Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VyNbaZHM8-r0n3OtFhOVv7FEcxE.roa
File: VyNbaZHM8-r0n3OtFhOVv7FEcxE.roa (raw, json)
Hash identifier: Dw7GI0ZYWm2DlRWea6LSDfXZteNKplJSeO/M3Fbw6ew=
Subject key identifier: 57:23:5B:69:91:CC:F3:EA:F4:9F:73:AD:16:13:95:BF:B1:44:73:11
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197640C500682AA45B41DBE336E13745863
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VyNbaZHM8-r0n3OtFhOVv7FEcxE.roa
Signing time: Thu 12 Jun 2025 12:10:17 +0000
ROA not before: Thu 12 Jun 2025 12:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2001:3187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0c:50:06:82:aa:45:b4:1d:be:33:6e:13:74:58:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 12:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57235b6991ccf3eaf49f73ad161395bfb1447311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:4b:75:b3:ed:4d:b6:ac:b1:13:c2:9d:b3:
0d:fb:00:21:41:dc:4b:42:ca:7e:73:11:51:d4:13:
d2:69:05:b0:6d:dc:69:ff:a7:14:40:96:4f:b8:9e:
c8:c4:eb:f6:89:88:52:38:08:c3:c4:cb:a4:14:5c:
8b:6d:e3:31:fd:aa:fe:b2:69:08:57:b6:10:d8:b6:
8c:85:0b:c9:8a:28:13:59:c4:e6:2f:32:8f:81:64:
ad:6d:8e:30:c7:3d:db:38:99:e8:32:f3:f1:55:c4:
1b:f7:e6:2b:06:c6:ee:40:1a:c3:20:86:cc:c3:52:
b6:80:96:39:c9:8f:8d:0e:8c:19:69:87:9e:74:b0:
48:0d:16:0b:04:a3:88:27:69:17:0f:ac:9e:6d:02:
4a:64:a1:7a:81:d8:3d:10:19:1d:91:48:eb:1e:e1:
28:de:8f:2c:83:53:c9:3a:5b:2b:54:42:56:84:33:
2c:70:88:44:e3:77:e5:ca:b3:62:e6:ad:cf:75:c1:
71:91:7f:b7:87:ff:64:96:a2:e6:ec:41:f6:1d:ab:
e1:96:7d:ec:44:18:68:fa:46:ba:58:5d:6d:bc:3a:
72:9d:75:28:fa:25:fb:b0:1e:bd:43:5b:34:e4:e6:
97:ec:28:32:00:b1:06:e8:48:c6:92:9c:62:c0:51:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:5B:69:91:CC:F3:EA:F4:9F:73:AD:16:13:95:BF:B1:44:73:11
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VyNbaZHM8-r0n3OtFhOVv7FEcxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3187::/32
Signature Algorithm: sha256WithRSAEncryption
5e:e3:aa:83:ce:df:96:2a:45:a9:4e:79:99:c8:13:51:52:4e:
34:e5:97:22:bb:07:f0:5d:ff:94:ea:71:6b:d4:97:e9:ea:ca:
c1:86:cc:ca:e8:5a:ad:7d:51:ac:36:3b:fd:41:3e:e4:04:a9:
0c:61:19:cc:ef:a0:e0:24:51:c6:a9:5a:7f:9b:92:7a:26:3f:
15:97:88:d3:d2:b7:52:46:1c:f1:5f:c7:8c:38:55:34:af:5f:
4a:3f:63:c8:b0:74:57:de:ca:ee:99:83:19:d0:92:2e:a8:fc:
d2:3b:c7:03:2c:8d:c2:99:ef:8b:c5:39:0e:3e:13:30:64:8c:
af:bc:a1:0d:7a:bf:95:8b:73:73:a5:c5:f8:68:28:72:b2:eb:
b8:c5:09:e5:33:9e:a6:e4:09:de:b1:88:23:03:a9:ef:15:3e:
50:51:6f:a5:6b:7a:a9:b6:8c:c2:26:b5:62:83:4a:e7:7c:87:
59:7c:77:46:0a:77:cf:e2:30:eb:ca:a1:12:5b:aa:ce:89:84:
e9:74:d8:f8:80:5c:ea:76:89:57:b1:63:37:88:bd:0c:d0:4a:
d9:54:26:1f:d0:a6:00:88:95:86:ae:4c:26:b7:5e:0d:b5:4a:
a4:55:d6:fb:96:e6:06:d4:58:66:0c:e8:81:73:a0:20:98:98:
a8:63:0e:cf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZdkDFAGgqpFtB2+M24TdFhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwNjEyMTIxMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzIzNWI2OTkxY2NmM2VhZjQ5ZjczYWQxNjEzOTViZmIxNDQ3MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKlLdbPtTbassRPCnbMN+wAhQdxL
Qsp+cxFR1BPSaQWwbdxp/6cUQJZPuJ7IxOv2iYhSOAjDxMukFFyLbeMx/ar+smkI
V7YQ2LaMhQvJiigTWcTmLzKPgWStbY4wxz3bOJnoMvPxVcQb9+YrBsbuQBrDIIbM
w1K2gJY5yY+NDowZaYeedLBIDRYLBKOIJ2kXD6yebQJKZKF6gdg9EBkdkUjrHuEo
3o8sg1PJOlsrVEJWhDMscIhE43flyrNi5q3PdcFxkX+3h/9klqLm7EH2Havhln3s
RBho+ka6WF1tvDpynXUo+iX7sB69Q1s05OaX7CgyALEG6EjGkpxiwFGYdQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFcjW2mRzPPq9J9zrRYTlb+xRHMRMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvVnlOYmFaSE04LXIwbjNPdEZoT1Z2N0ZFY3hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExhzAN
BgkqhkiG9w0BAQsFAAOCAQEAXuOqg87flipFqU55mcgTUVJONOWXIrsH8F3/lOpx
a9SX6erKwYbMyuharX1RrDY7/UE+5ASpDGEZzO+g4CRRxqlaf5uSeiY/FZeI09K3
UkYc8V/HjDhVNK9fSj9jyLB0V97K7pmDGdCSLqj80jvHAyyNwpnvi8U5Dj4TMGSM
r7yhDXq/lYtzc6XF+GgocrLruMUJ5TOepuQJ3rGIIwOp7xU+UFFvpWt6qbaMwia1
YoNK53yHWXx3Rgp3z+Iw68qhEluqzomE6XTY+IBc6naJV7FjN4i9DNBK2VQmH9Cm
AIiVhq5MJrdeDbVKpFXW+5bmBtRYZgzogXOgIJiYqGMOzw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:23:57 2025 by rpki-client