Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNWjVrw9_n0H0OYU6jqQTd1Dw1w.roa
File: vNWjVrw9_n0H0OYU6jqQTd1Dw1w.roa (raw, json)
Hash identifier: V/K/Sh+Ce4PEerh2wWpLVCWPqc8nt3B43r1qP51OGCQ=
Subject key identifier: BC:D5:A3:56:BC:3D:FE:7D:07:D0:E6:14:EA:3A:90:4D:DD:43:C3:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D7E7BCB7146920A968BC435DDCE481A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNWjVrw9_n0H0OYU6jqQTd1Dw1w.roa
Signing time: Sat 23 Aug 2025 17:09:05 +0000
ROA not before: Sat 23 Aug 2025 17:09:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 217.60.239.0/24 maxlen: 24
217.60.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e7:bc:b7:14:69:20:a9:68:bc:43:5d:dc:e4:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 17:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcd5a356bc3dfe7d07d0e614ea3a904ddd43c35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:aa:cd:47:7c:c0:80:45:18:84:6f:5a:4a:
a3:cf:d3:48:e5:da:33:1c:7c:a1:24:67:6e:e0:96:
8f:6e:78:a6:16:de:68:66:da:78:97:60:1a:b1:ff:
dd:d9:a2:94:ab:b8:03:b5:46:f7:95:49:f7:91:99:
19:8c:c7:8a:15:7f:ec:86:68:00:17:dc:ee:07:00:
6e:67:37:92:dc:ad:84:7f:ba:6a:d5:d6:4b:71:ae:
62:6b:99:eb:fb:f0:ab:68:5f:6f:ce:50:2b:74:b0:
61:dc:c4:82:38:92:13:33:f5:16:ce:c6:60:1a:93:
bc:f5:ba:d7:b2:f1:8c:de:46:96:d6:a2:97:96:64:
30:ca:33:49:c7:65:72:61:7f:ae:1b:76:f3:f6:5e:
4a:96:9c:fb:af:fd:67:f8:39:11:f3:3e:70:47:fa:
00:0c:91:04:40:c1:af:5b:02:0c:bb:5a:29:03:27:
ec:ae:11:35:b0:3c:fe:ef:58:f0:98:34:3a:55:75:
9d:df:3f:d0:0e:7b:c4:26:5d:43:a1:61:b4:c0:4b:
e3:6a:8b:45:6f:7b:76:0f:2c:3b:78:e8:13:d8:1d:
79:ad:82:3b:54:45:e3:ac:7f:21:36:20:65:f5:97:
32:3c:e0:06:5f:83:d2:f7:0f:26:1d:b3:35:8b:60:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:A3:56:BC:3D:FE:7D:07:D0:E6:14:EA:3A:90:4D:DD:43:C3:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vNWjVrw9_n0H0OYU6jqQTd1Dw1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.239.0/24
217.60.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:21:8e:6f:49:7a:6b:43:19:68:ea:9f:a8:b0:4e:a2:5b:0d:
8c:c8:82:c9:42:63:63:ec:a7:09:24:77:a7:b5:df:e8:ae:c2:
15:e3:a4:31:12:59:0b:a0:52:8a:28:35:4e:82:73:fa:a4:c2:
9d:32:b9:e3:cf:95:1d:51:97:23:34:86:11:3b:a4:9e:12:fd:
a3:0c:ca:b9:94:89:52:c2:0c:1e:0f:a9:54:11:d5:7b:41:da:
54:35:ac:73:4e:46:da:07:e5:a7:90:0d:4f:58:68:ab:23:54:
f5:36:b5:48:31:38:bc:af:d7:20:22:e2:8a:35:0d:3e:bf:15:
4d:f0:68:43:2c:ee:b4:00:2e:77:25:2a:8f:77:6a:66:a6:47:
9b:38:69:47:1d:1e:1c:11:27:96:42:6e:0f:2b:90:d3:f9:a4:
61:4b:40:93:8e:05:fc:68:4a:81:81:c6:1d:f1:f7:fb:fa:ee:
86:0f:83:b3:eb:4a:26:41:a7:18:41:28:4a:8a:79:41:45:a8:
32:22:b8:ef:5f:4d:12:56:eb:d5:e2:9b:8a:96:a5:c7:39:6f:
1c:65:10:f4:db:27:c9:6d:47:ce:51:10:66:0f:15:a1:5c:23:
5b:b0:4f:14:86:b2:52:d0:fe:ff:83:aa:c8:b6:be:66:9f:67:
20:a5:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:44 2025 by rpki-client