Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/vqXNaSZgp3ssNrNy6651RrVFS3Y.roa
File: vqXNaSZgp3ssNrNy6651RrVFS3Y.roa (raw, json)
Hash identifier: giLaYS/A+9rxwvGKkolgztkk8t+vnflpFT/hVk3pswQ=
Subject key identifier: BE:A5:CD:69:26:60:A7:7B:2C:36:B3:72:EB:AE:75:46:B5:45:4B:76
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 019976D263F2D675073EBA36F5DF720928F1
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/vqXNaSZgp3ssNrNy6651RrVFS3Y.roa
Signing time: Tue 23 Sep 2025 13:45:23 +0000
ROA not before: Tue 23 Sep 2025 13:45:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214107
IP address blocks: 81.27.78.0/24 maxlen: 24
81.27.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:d2:63:f2:d6:75:07:3e:ba:36:f5:df:72:09:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Sep 23 13:45:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea5cd692660a77b2c36b372ebae7546b5454b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:49:a5:fc:71:a4:f5:eb:d5:b9:f5:90:f7:
d4:f8:ab:99:49:f3:3b:ed:25:43:f9:99:9c:ce:63:
b9:1c:07:8e:07:86:ef:47:2b:c2:46:40:2b:33:d6:
4e:d7:fe:18:a5:06:50:2c:02:99:b3:fd:6f:74:ba:
8d:08:03:ec:26:d3:2c:f1:72:e4:ed:4e:04:a9:f7:
c3:5f:b7:5a:c2:04:0c:df:9a:22:33:e8:85:ba:db:
90:14:e1:ec:82:7f:92:ae:ab:69:ff:3a:40:b9:3c:
f6:f8:6c:fa:6c:11:03:ac:a9:b2:c2:e7:23:af:d9:
0f:9b:c1:ae:00:7d:ad:04:98:7d:45:69:d9:43:4b:
39:43:fb:97:cb:f0:59:b8:28:73:22:7a:5c:0b:7c:
64:65:60:ae:01:45:4d:09:4a:d5:c4:57:7f:9c:1c:
cf:8f:ea:46:f4:a2:5c:c3:a6:6a:9d:0b:4e:eb:11:
45:a1:d3:67:44:fa:95:00:ea:52:5b:d4:78:40:25:
ad:d2:9a:c9:7f:2f:b0:e8:8a:4a:e3:c2:47:f5:80:
52:23:24:b9:ad:53:6d:51:ea:0b:27:7a:65:28:0d:
5c:60:5b:54:6d:3e:4d:4d:ee:98:98:ce:f2:76:6b:
d7:dd:86:c0:fc:5f:89:49:5d:e4:80:32:2c:f3:5f:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:CD:69:26:60:A7:7B:2C:36:B3:72:EB:AE:75:46:B5:45:4B:76
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/vqXNaSZgp3ssNrNy6651RrVFS3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
32:65:7d:ad:1c:ad:42:79:50:0a:15:d4:25:98:b7:00:ad:06:
82:ce:58:16:ac:32:95:ef:05:51:1a:fd:68:19:8c:63:5b:fb:
90:f0:06:7f:80:7b:17:98:aa:f7:5f:d6:96:93:5e:33:00:a7:
73:55:90:36:7d:a2:4b:ea:68:e6:c3:23:3b:d9:47:5f:8b:e7:
5a:03:14:05:e6:67:c4:91:43:56:5d:62:d7:38:aa:39:c4:eb:
f1:cb:00:2f:c8:26:28:2a:8f:80:94:d1:9d:e8:e1:c6:6f:e7:
91:99:c9:c4:ae:31:97:8a:2a:88:19:48:13:ad:6b:2c:89:6b:
aa:9d:7d:72:5a:6b:0e:7c:74:a9:7a:bb:fc:b4:35:ff:55:ca:
11:1a:a2:e2:fc:24:15:2d:63:77:81:33:77:02:c0:bb:82:60:
f0:11:b4:e9:55:06:52:81:b2:f8:19:7b:fa:45:0e:b6:e9:63:
66:9c:bf:a4:a4:23:83:99:d1:aa:d9:37:c8:b3:4b:d9:89:a5:
54:b9:5a:26:de:e4:8d:5c:b4:e4:2e:26:95:e5:4e:d6:88:81:
9f:bf:46:42:e1:b8:de:12:46:bc:20:24:30:2a:7e:48:74:47:
fd:85:3a:2d:ea:82:01:da:7c:22:b7:cb:38:ae:e6:d2:97:bd:
f0:28:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:41 2025 by rpki-client