Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VvXmAfjVw54vY7d91UzupmqoF6o.roa
File: VvXmAfjVw54vY7d91UzupmqoF6o.roa (raw, json)
Hash identifier: sTB0yCV/ZuSBahnlvzgCou59omGp61y4mLaAz0thtOM=
Subject key identifier: 56:F5:E6:01:F8:D5:C3:9E:2F:63:B7:7D:D5:4C:EE:A6:6A:A8:17:AA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197B7432EC4FAB4C83BDD93B9EC2DA408CD
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VvXmAfjVw54vY7d91UzupmqoF6o.roa
Signing time: Sat 28 Jun 2025 15:58:42 +0000
ROA not before: Sat 28 Jun 2025 15:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 94.183.152.0/22 maxlen: 22
94.183.192.0/22 maxlen: 22
94.183.196.0/22 maxlen: 22
94.183.200.0/22 maxlen: 22
94.183.204.0/22 maxlen: 22
94.183.208.0/22 maxlen: 22
94.183.212.0/22 maxlen: 22
94.183.216.0/22 maxlen: 22
94.183.220.0/22 maxlen: 22
94.183.224.0/22 maxlen: 22
94.183.228.0/22 maxlen: 22
94.183.236.0/22 maxlen: 22
94.183.240.0/22 maxlen: 22
94.183.244.0/22 maxlen: 22
94.183.248.0/22 maxlen: 22
94.183.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:43:2e:c4:fa:b4:c8:3b:dd:93:b9:ec:2d:a4:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 28 15:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f5e601f8d5c39e2f63b77dd54ceea66aa817aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:96:00:fe:b3:3d:01:f9:3d:c3:e8:76:62:
32:3a:02:01:b9:6b:2f:d7:21:6c:4d:8f:8f:a8:02:
55:ac:b1:1e:7c:cd:01:2a:2c:d2:12:9b:d3:63:ed:
7d:68:e9:7b:1b:23:b1:b1:02:cf:75:dc:0f:fd:e4:
fb:a7:45:91:04:4c:82:bb:8a:58:63:4c:fe:73:03:
55:00:ff:fb:f7:e9:cf:61:71:4e:1f:f6:ca:7f:32:
fe:78:28:6d:93:a6:1d:cf:25:ec:49:71:de:7b:76:
02:29:9e:fa:b6:49:cc:21:1f:8c:2d:4e:65:3e:99:
c4:44:90:69:14:09:d3:a3:b2:6b:dc:fc:f9:c1:ca:
1d:1b:08:8c:0e:1e:4f:13:17:51:e6:d4:90:af:bc:
e6:31:45:82:8a:da:a7:df:93:70:24:0f:c6:06:74:
14:65:fd:80:5b:ca:da:7f:0d:80:85:cb:f4:79:7c:
0d:06:24:0f:48:ae:d3:9c:d1:2d:f5:88:5e:fa:c2:
e7:23:8f:90:cb:03:b9:ae:3f:60:07:eb:03:4c:bc:
b3:08:e6:71:a7:50:16:ff:d9:44:a5:c6:04:6c:2f:
7a:00:48:e7:d9:91:95:e6:20:b5:c7:92:6e:cf:88:
65:cb:2b:fe:0f:ac:ee:7e:6a:08:22:02:d1:bc:47:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:E6:01:F8:D5:C3:9E:2F:63:B7:7D:D5:4C:EE:A6:6A:A8:17:AA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VvXmAfjVw54vY7d91UzupmqoF6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.152.0/22
94.183.192.0-94.183.231.255
94.183.236.0-94.183.255.255
Signature Algorithm: sha256WithRSAEncryption
90:3a:56:a1:c5:0c:d1:06:bb:53:d9:d2:50:fd:f2:e7:13:ea:
4e:ce:cd:1d:63:8d:54:9e:f0:3a:51:e4:d8:c7:eb:0f:fa:b0:
42:90:7a:82:5e:b4:bc:f8:f8:93:ba:e6:69:39:a4:c7:45:66:
04:cc:e6:58:8c:a8:17:8e:6c:d1:26:b0:d6:57:ba:cc:0e:68:
5e:27:4f:1d:62:2c:7e:ea:78:fd:d9:1e:87:94:37:cd:f4:3a:
12:e1:98:be:31:f4:1d:e7:cf:04:d8:79:7f:e8:bc:2c:00:26:
ad:43:7e:f6:8f:88:3f:d6:36:89:d7:e4:30:ea:ad:32:76:2f:
36:56:19:10:af:c3:fd:d3:ed:96:7f:3f:12:cc:96:28:7f:c7:
0d:fb:ac:d4:81:b0:f8:de:1e:27:40:9d:e7:11:b2:eb:f5:69:
8c:5b:c2:c6:ec:2a:d3:2a:08:73:87:77:78:ca:32:00:35:73:
07:29:76:52:b0:60:04:8d:60:08:38:93:9b:e5:bb:33:b8:63:
0d:53:5a:71:48:94:2b:30:a3:e3:31:2e:f6:04:4a:62:9d:09:
74:f9:9d:ae:d7:5e:41:cc:e8:fb:b9:62:61:d1:2b:23:bc:9a:
92:95:ff:e2:c0:2d:c5:36:6b:97:16:38:f9:e9:ee:7a:6d:8b:
c2:25:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:44:02 2025 by rpki-client