Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VsSTvbixRfYrocy_48_mU0JJy5Y.roa
File: VsSTvbixRfYrocy_48_mU0JJy5Y.roa (raw, json)
Hash identifier: X9VVFN4pwPTGQgbzXLWhqGmx+1hmGYUiCOAdy+S/2K0=
Subject key identifier: 56:C4:93:BD:B8:B1:45:F6:2B:A1:CC:BF:E3:CF:E6:53:42:49:CB:96
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198D52F0182E797EC829B55D55B926D22D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VsSTvbixRfYrocy_48_mU0JJy5Y.roa
Signing time: Sat 23 Aug 2025 04:28:04 +0000
ROA not before: Sat 23 Aug 2025 04:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 64.188.91.0/24 maxlen: 24
77.239.96.0/24 maxlen: 24
77.239.97.0/24 maxlen: 24
77.239.98.0/24 maxlen: 24
77.239.99.0/24 maxlen: 24
77.239.100.0/24 maxlen: 24
77.239.101.0/24 maxlen: 24
77.239.102.0/24 maxlen: 24
77.239.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:2f:01:82:e7:97:ec:82:9b:55:d5:5b:92:6d:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 23 04:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56c493bdb8b145f62ba1ccbfe3cfe6534249cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:07:4b:00:71:fb:ab:88:ef:d4:a9:d3:08:
65:d4:41:25:62:fa:b0:59:59:16:4d:d8:4c:ab:f2:
d7:80:8d:bf:33:e9:05:f7:19:93:a8:b9:52:10:a4:
82:77:da:d6:ee:7e:1b:06:2c:2b:1c:80:e1:83:ce:
76:6d:7d:ed:d9:30:6e:72:c2:aa:64:be:e2:a9:e1:
54:bb:88:01:82:da:e2:29:13:61:b5:bf:88:bb:bb:
df:01:44:6f:bc:be:3e:72:4c:6e:ae:f6:f0:03:5c:
56:f8:30:4f:e6:d2:6f:40:e7:a9:7e:09:4d:09:ae:
bc:d7:bf:aa:33:43:f9:95:f1:78:df:bc:92:be:b1:
db:c5:88:75:3c:83:65:44:c2:e9:a8:3d:6f:7a:ee:
5b:4d:b3:de:6b:2c:e9:75:a1:21:db:ca:d1:21:86:
0c:91:0e:61:16:41:4e:90:21:6e:09:f3:1e:4a:bd:
e9:39:34:7f:93:01:67:71:88:65:0e:9d:0d:36:1f:
a0:71:5d:bd:9b:b7:6e:3b:62:82:04:17:4d:6d:9b:
18:4d:7c:6d:49:f1:63:93:7c:45:56:55:8a:1f:2f:
7f:1f:5d:1a:cc:94:ce:8d:01:8f:9b:12:b4:8e:28:
7f:65:3e:62:6e:70:55:41:7f:f9:c5:3c:f6:25:b9:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:93:BD:B8:B1:45:F6:2B:A1:CC:BF:E3:CF:E6:53:42:49:CB:96
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VsSTvbixRfYrocy_48_mU0JJy5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.91.0/24
77.239.96.0/21
Signature Algorithm: sha256WithRSAEncryption
42:d7:ad:40:69:03:62:cf:18:17:f6:e1:ea:f2:b3:97:80:2f:
7c:80:bf:e7:34:3c:94:0a:b0:58:36:08:4d:ed:ff:ce:14:90:
41:30:db:43:af:d2:12:70:58:27:07:93:59:0f:33:48:fb:fb:
1b:49:96:ef:f2:90:2d:b0:20:16:1a:57:d0:72:aa:e9:5b:9d:
1b:47:8b:0c:2a:f8:b9:68:15:64:0c:bb:98:fb:4d:78:77:38:
34:43:c8:aa:47:90:a2:19:0e:b6:e0:f0:11:31:3b:36:d9:d4:
a8:01:cb:b5:95:1e:c0:98:1e:13:62:d5:89:fa:b1:85:48:99:
29:46:e3:22:00:fc:bf:61:ff:e5:52:29:0d:e0:9b:e0:57:71:
db:f3:6e:58:2c:51:53:54:c9:f2:bb:73:3e:2d:66:fc:3b:ea:
db:14:e8:68:a9:ad:d7:62:a5:cb:be:38:64:14:81:d4:28:8f:
ca:36:b6:73:ea:5f:53:34:11:d4:f4:87:4d:71:8a:ab:ef:93:
a2:ca:6a:18:54:cc:10:96:8a:9e:2c:6a:b9:0b:58:d1:dd:2a:
b7:86:81:7a:59:b7:b8:a4:c9:38:ad:8c:09:ae:92:1c:47:6a:
51:95:f7:7f:8c:e2:7b:62:fe:bb:59:e4:dd:bb:43:74:00:60:
8e:f6:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:34:44 2025 by rpki-client