Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/VjYlerEh7qVTQBqqPATO88eK6NQ.roa
File: VjYlerEh7qVTQBqqPATO88eK6NQ.roa (raw, json)
Hash identifier: 5FRpnrVjan0/lQPhlwWwVDFcy2JjA8zi7jlobrQ41Zw=
Subject key identifier: 56:36:25:7A:B1:21:EE:A5:53:40:1A:AA:3C:04:CE:F3:C7:8A:E8:D4
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 01996C520D779225C96428F7595BF2881200
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/VjYlerEh7qVTQBqqPATO88eK6NQ.roa
Signing time: Sun 21 Sep 2025 12:49:00 +0000
ROA not before: Sun 21 Sep 2025 12:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206388
IP address blocks: 193.176.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6c:52:0d:77:92:25:c9:64:28:f7:59:5b:f2:88:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Sep 21 12:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5636257ab121eea553401aaa3c04cef3c78ae8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:44:8c:c3:1e:56:2f:9e:f2:39:e4:4c:16:
d3:b9:a5:a0:5b:ec:6c:29:31:0f:0d:f8:61:ec:f4:
a4:06:3e:8a:83:f9:91:52:5b:8a:c1:25:c5:32:b2:
5b:43:59:cf:4b:c8:21:8e:e2:00:8e:a4:a3:d4:aa:
82:87:d3:c5:b2:be:0e:6b:10:90:59:23:ce:95:1d:
d3:9f:91:2c:bd:04:0e:b8:89:33:d4:73:28:51:fa:
ca:66:90:d9:ac:24:28:f9:37:6b:1b:fa:0e:7b:db:
fc:ec:8b:f8:8c:e3:d0:bb:70:ee:21:27:98:58:6b:
41:74:ee:01:16:0c:77:7e:c5:d8:40:d2:01:40:97:
c1:cb:1c:52:91:96:a6:56:b5:55:3c:de:5a:00:f3:
b1:ae:38:00:e6:12:d9:71:94:1e:b8:d1:2f:5f:cf:
a2:71:3a:f6:ba:ad:de:cb:51:1b:fb:1a:49:ba:85:
b3:66:87:ec:80:1e:57:5a:77:21:5a:fe:8d:31:fc:
d6:c2:d8:d5:d4:fb:92:ae:66:bc:3b:28:c1:95:dd:
e3:19:ff:46:9e:80:2f:74:8f:ef:31:92:2d:ef:b4:
04:d4:f2:8b:ca:c0:0e:39:8d:cd:10:8c:79:93:fd:
f9:9b:df:f5:e2:68:4f:4d:35:38:33:11:b8:8f:fb:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:25:7A:B1:21:EE:A5:53:40:1A:AA:3C:04:CE:F3:C7:8A:E8:D4
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/VjYlerEh7qVTQBqqPATO88eK6NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.97.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4d:9b:0f:a8:6a:24:a3:a3:f9:49:1e:22:33:23:49:1d:ec:
8a:dd:c7:b1:a0:5f:e8:e1:40:54:a5:3d:0e:53:20:84:e6:db:
6c:9e:e8:f7:d3:27:90:73:f5:96:aa:22:49:c8:3e:6a:08:97:
8d:38:ca:66:b1:55:48:63:d9:f2:43:fb:ed:3a:0f:cb:7c:93:
33:7c:c1:40:64:fb:fe:fd:d0:26:ff:78:ba:b3:8f:e7:49:62:
60:13:0a:70:fb:c5:74:a1:f4:e4:ae:9e:f1:21:89:27:f7:77:
7b:21:05:3d:98:66:d3:1f:ac:f8:80:dc:e7:0e:25:59:e8:59:
14:db:cc:d7:91:5c:a6:08:3f:02:96:c7:a0:f3:07:9d:54:70:
a4:f5:e9:6e:d8:05:1f:e4:f8:8e:0e:cb:32:cf:82:7f:3a:58:
2f:9a:95:10:e4:86:fb:d8:1b:24:4b:81:7b:00:a2:88:16:4c:
81:05:5e:ae:8b:af:db:92:1e:01:02:64:fa:e3:29:49:04:6c:
4b:48:e5:36:52:77:2a:b1:4f:f1:89:fd:1b:5c:81:fb:43:26:
ea:49:a6:d4:06:5c:eb:96:91:02:eb:45:cd:c8:ab:f9:14:79:
96:7b:0e:af:57:8b:d6:37:74:ea:6c:36:4b:ea:87:0d:e7:e6:
8d:ca:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:27 2025 by rpki-client