Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/VjUF6mkOxxkGBT69SzLniaN5UYw.roa
File: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (raw, json)
Hash identifier: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=
Subject key identifier: 56:35:05:EA:69:0E:C7:19:06:05:3E:BD:4B:32:E7:89:A3:79:51:8C
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 0198ADE6DAE34624E0B54A6E5A8A44E3BF74
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/VjUF6mkOxxkGBT69SzLniaN5UYw.roa
Signing time: Fri 15 Aug 2025 13:24:04 +0000
ROA not before: Fri 15 Aug 2025 13:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 212.102.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:e6:da:e3:46:24:e0:b5:4a:6e:5a:8a:44:e3:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Aug 15 13:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=563505ea690ec71906053ebd4b32e789a379518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:03:ab:e5:a2:5e:3f:6f:7b:7b:b5:71:74:
c8:a4:6f:f7:48:8e:53:ab:c4:df:cd:de:9b:8e:b3:
da:c0:07:4c:65:a0:b5:4c:e7:f5:07:c2:5a:c9:93:
99:56:c5:34:3c:a6:f8:9d:a4:d1:b0:4d:e1:36:39:
70:dd:69:fe:eb:fe:c2:a0:b8:7f:01:4c:7e:af:65:
ff:2b:16:21:16:ee:81:1c:df:17:b9:67:9e:b1:95:
05:17:4b:f7:cf:be:dd:ed:0d:66:e4:14:1b:01:70:
71:26:84:ae:a4:1c:4c:4b:65:4f:f9:7b:61:6f:ac:
d2:24:f0:1a:6e:f8:4f:f6:4e:c4:0e:bb:d6:53:ce:
44:4e:59:3f:b6:55:ca:f2:a1:c8:78:b5:6e:b5:9e:
15:bf:e0:a0:e2:8a:23:de:8b:bf:dd:89:e9:a4:8f:
9a:95:de:71:87:a8:cd:2b:48:b8:fe:0d:51:bf:e2:
21:4d:74:68:18:4f:83:ea:42:d2:31:7b:3d:86:23:
90:0b:28:83:20:da:85:40:bd:c4:68:f0:14:8e:4b:
7a:f0:e7:93:91:73:3a:68:62:a5:9d:b0:7c:ac:dd:
5a:d5:80:7c:e5:6c:98:9f:7a:0e:d9:00:9b:0d:57:
d5:47:59:93:71:e1:7a:51:d7:68:26:bf:35:25:a9:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:05:EA:69:0E:C7:19:06:05:3E:BD:4B:32:E7:89:A3:79:51:8C
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/VjUF6mkOxxkGBT69SzLniaN5UYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.144.0/20
Signature Algorithm: sha256WithRSAEncryption
50:e4:89:73:9b:b6:17:a0:be:8a:ee:9a:f7:f3:50:4a:d4:ca:
fc:5e:03:38:f5:d3:fe:0e:86:66:64:9e:3d:ed:4e:b2:0d:a6:
e7:50:78:a1:eb:37:31:e9:1c:1a:3d:09:e0:a9:27:a7:2a:7b:
81:e5:a3:89:36:5f:ca:a9:52:75:80:4f:3d:6f:9f:3c:ed:cc:
3c:c1:a3:97:24:e1:2f:e8:c1:2f:f0:88:66:72:7a:af:53:43:
1f:e3:69:77:d1:0b:70:eb:d0:6e:6d:5c:c2:34:0e:45:73:f1:
ab:29:3c:c6:80:79:0e:04:0d:6f:07:be:85:a5:55:89:88:81:
cd:74:37:a8:a9:7e:bd:8d:23:8b:6e:e8:7c:10:a5:42:f7:2e:
35:00:e5:51:7d:da:2b:20:89:d1:bb:bd:e9:7c:1f:7a:3b:ea:
a1:c5:0f:dd:14:93:3d:66:0f:8d:29:a7:70:bd:8d:7d:68:da:
43:69:c0:c5:bd:f6:0f:4d:f2:42:29:71:22:9e:23:76:ba:ee:
87:91:9e:eb:17:c6:8d:ff:a3:36:08:65:1e:3e:8e:4a:10:21:
9e:08:ed:00:05:0c:e8:e6:ac:0c:3c:20:ca:2a:56:2a:b8:1e:
73:dd:1d:7a:39:30:49:74:d8:b8:95:c8:fe:45:18:3c:ab:77:
b4:90:98:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZit5trjRiTgtUpuWopE4790MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4
NmY4YTcwHhcNMjUwODE1MTMyNDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjM1MDVlYTY5MGVjNzE5MDYwNTNlYmQ0YjMyZTc4OWEzNzk1MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWUDq+WiXj9ve3u1cXTIpG/3SI5T
q8Tfzd6bjrPawAdMZaC1TOf1B8JayZOZVsU0PKb4naTRsE3hNjlw3Wn+6/7CoLh/
AUx+r2X/KxYhFu6BHN8XuWeesZUFF0v3z77d7Q1m5BQbAXBxJoSupBxMS2VP+Xth
b6zSJPAabvhP9k7EDrvWU85ETlk/tlXK8qHIeLVutZ4Vv+Cg4ooj3ou/3YnppI+a
ld5xh6jNK0i4/g1Rv+IhTXRoGE+D6kLSMXs9hiOQCyiDINqFQL3EaPAUjkt68OeT
kXM6aGKlnbB8rN1a1YB85WyYn3oO2QCbDVfVR1mTceF6UddoJr81JamgzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFY1BeppDscZBgU+vUsy54mjeVGMMB8GA1UdIwQY
MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt
ZmExNDg2ZWE3OThjLzEvVmpVRjZta094eGtHQlQ2OVN6TG5pYU41VVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj
LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1GaQMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ5Ilzm7YXoL6K7pr381BK1Mr8XgM49dP+DoZmZJ49
7U6yDabnUHih6zcx6RwaPQngqSenKnuB5aOJNl/KqVJ1gE89b5887cw8waOXJOEv
6MEv8IhmcnqvU0Mf42l30Qtw69BubVzCNA5Fc/GrKTzGgHkOBA1vB76FpVWJiIHN
dDeoqX69jSOLbuh8EKVC9y41AOVRfdorIInRu73pfB96O+qhxQ/dFJM9Zg+NKadw
vY19aNpDacDFvfYPTfJCKXEiniN2uu6HkZ7rF8aN/6M2CGUePo5KECGeCO0ABQzo
5qwMPCDKKlYquB5z3R16OTBJdNi4lcj+RRg8q3e0kJji
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:56 2025 by rpki-client