Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/HN2NjgcrA1uNmOFiqlfNJWjX5-0.roa
File: HN2NjgcrA1uNmOFiqlfNJWjX5-0.roa (raw, json)
Hash identifier: sKvzDTDf2qwp6uU7QVuroNn534QLUvAgYTCUUX0q+2Q=
Subject key identifier: 1C:DD:8D:8E:07:2B:03:5B:8D:98:E1:62:AA:57:CD:25:68:D7:E7:ED
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019985211B6BEF28312986FCE7DC3B1DBC1C
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/HN2NjgcrA1uNmOFiqlfNJWjX5-0.roa
Signing time: Fri 26 Sep 2025 08:26:03 +0000
ROA not before: Fri 26 Sep 2025 08:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 95.85.196.0/22 maxlen: 22
95.85.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:21:1b:6b:ef:28:31:29:86:fc:e7:dc:3b:1d:bc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Sep 26 08:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cdd8d8e072b035b8d98e162aa57cd2568d7e7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:bd:c3:b1:2c:dc:02:31:07:85:31:28:34:
6e:bf:ba:f8:02:30:de:75:c3:03:43:4b:12:8a:2b:
07:e0:19:bc:4d:d3:dd:50:03:93:ca:f2:da:71:ee:
4a:6b:94:d9:87:e7:89:22:8f:b6:f8:2e:20:c3:08:
57:8b:c8:a7:01:46:0a:7a:4f:4c:2d:fc:12:cb:01:
6d:9a:70:1f:54:4f:1e:11:70:e4:08:4e:51:ba:18:
86:4d:5f:15:9f:8d:b9:c5:2f:33:4d:03:ef:1e:c3:
56:4f:a2:a4:52:01:13:f0:ab:ce:84:49:66:34:5f:
42:f3:fc:52:ff:b0:b4:93:4a:83:63:dc:af:bf:29:
9a:4f:ea:c5:49:49:2f:08:ea:d4:6a:1d:ea:9f:84:
67:c4:9f:e6:45:eb:55:b6:f4:25:84:f5:0c:24:28:
5e:bb:3d:78:6e:c6:b1:1b:7e:0c:12:44:03:8d:75:
3c:31:a3:1d:3c:44:56:32:07:31:13:1f:61:ba:a3:
ba:35:0d:1a:d8:e1:bb:20:35:e0:c0:5e:6e:3f:3c:
f3:ec:16:af:3d:2f:40:bb:90:08:dc:d9:07:84:12:
e9:9b:4f:51:9f:60:63:70:64:b1:3e:80:d5:da:ff:
e1:73:79:50:9d:1f:ca:2f:cf:69:2e:c6:7a:8d:97:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:8D:8E:07:2B:03:5B:8D:98:E1:62:AA:57:CD:25:68:D7:E7:ED
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/HN2NjgcrA1uNmOFiqlfNJWjX5-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.196.0/22
95.85.208.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:08:a6:f4:c1:58:06:92:37:48:1e:ac:39:20:cc:76:99:f1:
7e:a4:fb:bb:77:b2:67:77:4b:ef:60:bf:f0:c4:50:da:c0:78:
19:41:73:0e:48:5e:78:1a:99:e2:19:5c:d2:b0:5b:21:85:31:
e0:d5:4a:32:8c:69:88:5d:4e:3c:c3:8b:fe:1a:44:b1:ef:4d:
ff:08:7f:bc:5e:45:c7:8b:33:8c:66:63:24:d0:d4:2a:77:34:
0c:1e:2e:9b:24:3e:a5:02:b3:82:1f:51:12:57:05:80:33:95:
ce:2a:60:a2:2a:cb:af:84:f8:32:5a:b7:e3:c5:6b:d9:a5:d6:
1a:a1:cc:db:87:f0:da:08:33:4d:a9:5b:08:d9:4c:49:37:92:
20:6b:d2:86:27:f7:a0:a4:e7:ba:9d:89:52:f4:ae:19:1c:10:
5d:ba:3d:87:a5:cd:bc:77:8f:f6:08:17:9a:c1:92:b8:17:90:
a5:13:76:ed:42:b6:0a:52:08:b2:63:e4:d1:28:2d:af:7a:e0:
63:d1:27:6b:23:eb:75:c5:f5:d2:77:9c:f1:4f:b3:cf:32:78:
1b:6e:3f:41:ef:b3:3a:6b:0a:ec:31:ee:0f:99:48:8c:10:fb:
9e:5e:41:48:76:82:74:3f:67:19:5c:ba:0d:cd:6a:f5:4a:d7:
08:7c:87:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmFIRtr7ygxKYb859w7HbwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjUwOTI2MDgyNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2RkOGQ4ZTA3MmIwMzViOGQ5OGUxNjJhYTU3Y2QyNTY4ZDdlN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I29w7Es3AIxB4UxKDRuv7r4AjDe
dcMDQ0sSiisH4Bm8TdPdUAOTyvLace5Ka5TZh+eJIo+2+C4gwwhXi8inAUYKek9M
LfwSywFtmnAfVE8eEXDkCE5RuhiGTV8Vn425xS8zTQPvHsNWT6KkUgET8KvOhElm
NF9C8/xS/7C0k0qDY9yvvymaT+rFSUkvCOrUah3qn4RnxJ/mRetVtvQlhPUMJChe
uz14bsaxG34MEkQDjXU8MaMdPERWMgcxEx9huqO6NQ0a2OG7IDXgwF5uPzzz7Bav
PS9Au5AI3NkHhBLpm09Rn2BjcGSxPoDV2v/hc3lQnR/KL89pLsZ6jZf21wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBzdjY4HKwNbjZjhYqpXzSVo1+ftMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvSE4yTmpnY3JBMXVObU9GaXFsZk5KV2pYNS0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XEAwQC
X1XQMA0GCSqGSIb3DQEBCwUAA4IBAQDICKb0wVgGkjdIHqw5IMx2mfF+pPu7d7Jn
d0vvYL/wxFDawHgZQXMOSF54GpniGVzSsFshhTHg1UoyjGmIXU48w4v+GkSx703/
CH+8XkXHizOMZmMk0NQqdzQMHi6bJD6lArOCH1ESVwWAM5XOKmCiKsuvhPgyWrfj
xWvZpdYaoczbh/DaCDNNqVsI2UxJN5Iga9KGJ/egpOe6nYlS9K4ZHBBduj2Hpc28
d4/2CBeawZK4F5ClE3btQrYKUgiyY+TRKC2veuBj0SdrI+t1xfXSd5zxT7PPMngb
bj9B77M6awrsMe4PmUiMEPueXkFIdoJ0P2cZXLoNzWr1StcIfIfj
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:46 2025 by rpki-client