Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VLE_wDJTSD6F4otByHihBQw7eQs.roa
File: VLE_wDJTSD6F4otByHihBQw7eQs.roa (raw, json)
Hash identifier: YxQdjt4u/5p9+W6haeQfpAsc3Qbbll4OxtwTcNh/MB8=
Subject key identifier: 54:B1:3F:C0:32:53:48:3E:85:E2:8B:41:C8:78:A1:05:0C:3B:79:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198A4562266B6E496C63B9C41FCA9A775C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VLE_wDJTSD6F4otByHihBQw7eQs.roa
Signing time: Wed 13 Aug 2025 16:49:24 +0000
ROA not before: Wed 13 Aug 2025 16:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 2a0a:2d06:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:56:22:66:b6:e4:96:c6:3b:9c:41:fc:a9:a7:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 13 16:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b13fc03253483e85e28b41c878a1050c3b790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:bf:6c:cd:29:ea:2d:8d:df:a9:f8:4a:7b:
6f:74:59:67:8c:1c:6b:a0:cb:46:4f:ac:29:ef:cf:
7c:76:65:3f:70:98:8b:fc:45:9a:66:8a:2f:2c:b7:
b1:c5:e3:c5:0c:f4:dc:60:51:45:3d:6a:ce:ca:f9:
f2:6c:55:87:52:dc:87:52:9a:19:34:7c:63:72:14:
52:a7:21:b5:d3:42:b5:09:84:10:9d:b4:61:82:99:
ed:cf:14:69:e5:97:cf:0e:b7:4c:34:a8:68:28:e9:
4f:7a:8b:23:88:d9:41:2d:dc:f4:38:f1:f2:81:c6:
77:a7:cc:bf:ef:d6:b0:56:f0:23:5a:42:45:f1:39:
fa:78:ff:af:36:8c:68:0b:99:be:67:d3:0d:2e:38:
27:1e:99:4d:f2:d3:3e:b3:a9:30:4b:a4:81:03:9d:
d7:f2:9f:ea:02:d2:e0:1c:45:58:68:6c:a8:a3:89:
c3:bf:1a:de:aa:36:d3:9f:b0:bf:89:31:45:08:b1:
cd:42:41:05:42:52:f0:ff:48:18:ef:7b:49:25:01:
39:83:c7:20:c1:e6:5b:75:85:62:0f:a9:64:1c:67:
f7:4c:cc:95:24:6f:82:ea:79:15:51:d4:c0:e6:38:
72:84:a7:e6:d3:26:a9:32:48:af:2a:d8:db:b0:30:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:3F:C0:32:53:48:3E:85:E2:8B:41:C8:78:A1:05:0C:3B:79:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VLE_wDJTSD6F4otByHihBQw7eQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:105::/48
Signature Algorithm: sha256WithRSAEncryption
6e:88:23:41:b2:61:fd:3c:73:6b:85:13:09:81:09:5f:bc:71:
5f:54:b2:a6:1a:69:50:fe:02:43:81:02:a8:5a:af:c8:ae:5c:
9c:6d:ef:48:4f:1a:f0:3b:0c:63:8e:94:6f:42:dc:47:99:91:
88:c3:90:b2:00:02:b3:00:ac:0c:bc:b7:e3:f6:70:c0:6b:55:
b4:09:3c:de:5a:2b:06:45:d5:c3:3d:57:47:ef:5c:de:21:f8:
06:80:34:70:62:7c:91:24:78:d6:c2:e0:d1:12:fc:12:d2:cd:
e8:22:f4:2a:fb:a2:f0:c7:d7:dc:5d:11:ea:fa:f7:5d:d9:01:
d4:bc:fd:b0:f3:9f:4b:5c:1b:1e:37:44:b2:f4:f4:68:9b:9e:
ef:35:a3:9c:b3:18:ad:39:85:ee:bc:79:89:1a:3e:dc:df:57:
fb:cc:72:e1:14:b5:eb:1f:29:71:64:52:7f:9b:dd:ee:d8:48:
05:08:7f:94:46:a0:bc:60:2d:3c:18:0a:c3:25:1e:2b:d6:dc:
5f:bb:35:48:32:7c:43:ce:5b:56:6d:60:2e:65:aa:54:ae:9f:
ce:e2:cc:34:46:0b:40:76:13:cc:8e:dc:b4:8f:a5:4f:e3:4c:
cb:7e:93:18:2d:b9:2b:15:86:2d:b1:cf:d3:98:1a:2c:57:d7:
23:7a:88:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZikViJmtuSWxjucQfypp3XFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwODEzMTY0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGIxM2ZjMDMyNTM0ODNlODVlMjhiNDFjODc4YTEwNTBjM2I3OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyee/bM0p6i2N36n4SntvdFlnjBxr
oMtGT6wp7898dmU/cJiL/EWaZoovLLexxePFDPTcYFFFPWrOyvnybFWHUtyHUpoZ
NHxjchRSpyG100K1CYQQnbRhgpntzxRp5ZfPDrdMNKhoKOlPeosjiNlBLdz0OPHy
gcZ3p8y/79awVvAjWkJF8Tn6eP+vNoxoC5m+Z9MNLjgnHplN8tM+s6kwS6SBA53X
8p/qAtLgHEVYaGyoo4nDvxreqjbTn7C/iTFFCLHNQkEFQlLw/0gY73tJJQE5g8cg
weZbdYViD6lkHGf3TMyVJG+C6nkVUdTA5jhyhKfm0yapMkivKtjbsDDgmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFSxP8AyU0g+heKLQch4oQUMO3kLMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVkxFX3dESlRTRDZGNG90QnlIaWhCUXc3ZVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotBgEF
MA0GCSqGSIb3DQEBCwUAA4IBAQBuiCNBsmH9PHNrhRMJgQlfvHFfVLKmGmlQ/gJD
gQKoWq/Irlycbe9ITxrwOwxjjpRvQtxHmZGIw5CyAAKzAKwMvLfj9nDAa1W0CTze
WisGRdXDPVdH71zeIfgGgDRwYnyRJHjWwuDREvwS0s3oIvQq+6Lwx9fcXRHq+vdd
2QHUvP2w859LXBseN0Sy9PRom57vNaOcsxitOYXuvHmJGj7c31f7zHLhFLXrHylx
ZFJ/m93u2EgFCH+URqC8YC08GArDJR4r1txfuzVIMnxDzltWbWAuZapUrp/O4sw0
RgtAdhPMjty0j6VP40zLfpMYLbkrFYYtsc/TmBosV9cjeogU
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:50 2025 by rpki-client