Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/V0NyGBzeNeiAwnkgDdus_1vA7a8.roa
File: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (raw, json)
Hash identifier: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=
Subject key identifier: 57:43:72:18:1C:DE:35:E8:80:C2:79:20:0D:DB:AC:FF:5B:C0:ED:AF
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019889473F4FA62B689F9DACD205929B3D29
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/V0NyGBzeNeiAwnkgDdus_1vA7a8.roa
Signing time: Fri 08 Aug 2025 10:43:24 +0000
ROA not before: Fri 08 Aug 2025 10:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213513
IP address blocks: 194.4.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:47:3f:4f:a6:2b:68:9f:9d:ac:d2:05:92:9b:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Aug 8 10:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=574372181cde35e880c279200ddbacff5bc0edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:49:5e:a7:c2:af:e6:1f:bf:0a:6f:df:df:
cb:33:37:e4:09:bd:54:48:21:d9:99:2f:aa:6e:0b:
ad:82:56:bd:ce:a7:73:a0:8f:c4:66:ea:0e:79:7c:
0b:8b:65:bc:09:e4:f1:0c:0d:ef:1f:cd:bd:b2:f3:
8c:88:11:fc:97:c1:de:22:b9:b5:95:52:82:46:b2:
f5:29:46:7a:b2:c6:5b:2b:fb:a2:12:c8:8d:c9:7b:
b5:27:98:58:b3:00:06:a8:2c:3d:9c:d7:e8:85:bd:
c2:f2:72:ca:fe:46:cf:ca:34:14:9d:aa:19:a9:7f:
3b:59:cc:3f:0a:3c:f9:47:7e:2d:fa:c5:8e:e3:5f:
f5:5c:60:98:68:11:07:2b:dd:e4:76:71:e0:22:44:
1b:f8:2f:08:12:39:85:db:30:0c:80:5e:5a:a5:f1:
8a:e2:4b:9b:fc:ce:fa:f5:98:0b:fb:46:a5:0b:fa:
60:fa:d2:51:2a:80:f2:f8:cb:b9:7c:89:6e:26:d8:
2f:d5:93:ec:fc:2c:ee:8d:6f:93:fa:12:0d:5e:f5:
f3:74:5e:73:f2:07:92:d9:40:2d:22:32:3c:8d:b8:
ca:40:97:67:f5:73:20:17:82:e4:b6:5e:c2:ca:29:
0a:88:fe:ec:33:fe:44:74:91:79:72:04:70:17:20:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:72:18:1C:DE:35:E8:80:C2:79:20:0D:DB:AC:FF:5B:C0:ED:AF
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/V0NyGBzeNeiAwnkgDdus_1vA7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.152.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:ec:c4:31:31:c3:ac:d4:66:64:38:4f:e8:91:2d:fd:67:d8:
8d:2b:a6:83:51:62:ed:e4:8f:43:f3:f4:e7:e5:95:2d:7c:95:
a3:02:68:4c:62:c1:b7:ec:92:a7:91:be:71:1b:b1:40:8f:35:
bd:37:16:48:d3:f5:f1:4f:33:cd:ef:03:05:7c:2a:54:95:9e:
24:05:0b:8a:41:fd:68:24:de:30:ae:f8:3e:ac:e5:30:55:f3:
48:e6:c3:41:28:ee:9a:64:e2:01:3f:c4:ab:4e:4a:45:6b:68:
cf:bc:66:33:b7:82:23:17:a6:48:18:1a:19:67:dd:54:a5:35:
9a:d3:bd:ae:9a:5c:6d:3e:88:24:85:d7:60:d7:b8:24:3c:b2:
33:c3:03:cc:bf:c3:6f:29:03:e2:c4:85:0a:a7:0b:ea:8d:d0:
28:b8:fc:47:69:c3:6e:7c:3d:46:fb:09:52:f7:b8:15:d9:91:
a8:a8:43:ce:37:0b:82:cd:73:a4:c2:6f:b3:73:2f:df:7b:69:
1e:df:c3:e1:f0:94:05:5c:95:41:93:19:57:fb:1f:79:80:d8:
71:f2:15:32:a5:a3:96:c7:20:d4:5a:c0:dd:00:02:b1:c4:31:
6f:27:04:5e:57:b0:13:a1:83:de:01:31:69:be:68:68:2e:eb:
bf:34:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:56 2025 by rpki-client