Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/VTxgRc9lLnOIERMW9KzHm_cmqj0.roa
File: VTxgRc9lLnOIERMW9KzHm_cmqj0.roa (raw, json)
Hash identifier: hFhWb9lFF6kUCNUVNjvzbxq2eJ1u/87JP6fpDErHuIc=
Subject key identifier: 55:3C:60:45:CF:65:2E:73:88:11:13:16:F4:AC:C7:9B:F7:26:AA:3D
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 019884C86E32EF32F81969F9679A7775E617
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/VTxgRc9lLnOIERMW9KzHm_cmqj0.roa
Signing time: Thu 07 Aug 2025 13:46:24 +0000
ROA not before: Thu 07 Aug 2025 13:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208397
IP address blocks: 31.40.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:c8:6e:32:ef:32:f8:19:69:f9:67:9a:77:75:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Aug 7 13:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553c6045cf652e7388111316f4acc79bf726aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:54:e2:9a:70:73:10:51:a9:cd:25:ce:72:
e9:2f:e8:62:bd:f8:c2:57:a9:a3:9b:6d:33:f4:76:
b6:69:d2:dd:9f:25:91:ad:33:35:4e:3c:f7:f8:33:
bb:31:e4:42:66:89:d1:b1:d3:26:15:a6:ba:ac:88:
7c:c1:04:16:95:78:22:e2:77:b9:25:df:8b:c9:a3:
05:e3:91:f5:0b:6e:ec:33:9b:a2:17:43:3b:3f:36:
67:5f:c3:0e:67:86:52:af:a3:ad:5e:40:f0:c5:31:
12:12:80:de:49:f2:36:07:e4:72:eb:35:ff:07:e8:
1b:b0:45:e6:ad:d4:8f:19:45:06:d0:d3:34:07:7c:
2e:48:86:01:7a:7a:0f:fc:a2:d4:71:48:45:f0:65:
3c:37:9c:9c:06:c2:f7:68:0c:be:9e:99:1f:1d:a4:
54:05:45:84:9f:61:88:d6:fb:1e:9c:fa:7d:c2:c0:
06:45:36:5b:b9:e1:a2:ed:45:66:b6:e4:10:7e:17:
f4:02:37:d2:25:30:67:17:66:4d:0b:d8:52:9b:3e:
de:4b:7a:7d:12:ef:0b:4b:c8:28:32:78:17:ee:f2:
a2:cd:76:52:b6:22:bb:01:d8:c8:25:55:60:2b:16:
ea:3a:1a:1f:c5:12:88:54:d2:1c:16:26:fa:eb:d2:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:60:45:CF:65:2E:73:88:11:13:16:F4:AC:C7:9B:F7:26:AA:3D
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/VTxgRc9lLnOIERMW9KzHm_cmqj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
Signature Algorithm: sha256WithRSAEncryption
09:78:a2:ca:ee:10:0c:40:f8:55:0d:07:b3:0d:57:b2:e7:c7:
c9:6b:19:12:45:76:32:07:57:95:84:b4:50:b5:e5:3e:ee:77:
70:f4:4e:cd:54:18:f5:65:ef:8b:0c:e6:54:b1:ad:a2:b5:14:
d1:b4:4c:0d:dd:16:0c:25:84:2d:9d:07:c1:47:de:21:f2:ac:
11:75:6d:3d:40:d1:8a:03:a9:c6:e0:16:18:5c:24:8e:70:92:
39:44:d8:f2:05:e3:3b:7b:0c:7d:2c:d2:9a:b5:12:27:53:60:
8e:f4:d3:56:56:6b:7e:80:41:46:d4:84:67:e5:40:90:52:31:
9c:9b:63:57:e3:db:52:dc:65:1c:7f:20:71:72:c9:ab:91:a8:
12:63:0e:1c:68:97:a4:36:d1:86:d0:5c:83:79:e2:25:49:9c:
b3:b2:60:ba:f1:14:3e:7a:98:8a:fa:e9:c2:28:a7:84:c8:b4:
f1:4a:dd:ba:13:8d:05:87:7a:47:13:01:c9:b8:81:51:f3:d6:
e6:bc:57:4f:75:14:65:bf:f3:e4:d7:91:60:28:8d:59:76:c6:
e6:33:e7:9d:f9:27:8c:d5:89:3a:1a:5d:48:3f:33:04:07:89:
77:2a:86:e9:55:bb:96:85:b9:15:7e:45:0f:ba:74:19:aa:08:
a3:98:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:46 2025 by rpki-client