Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/Vup9fyUkHCfDJpESeC6MCFBYGVI.roa
File: Vup9fyUkHCfDJpESeC6MCFBYGVI.roa (raw, json)
Hash identifier: /S5Qqrc+NbRKs+h/9lbQsMks6Y2KKec0Iu5Oh/qYLdo=
Subject key identifier: 56:EA:7D:7F:25:24:1C:27:C3:26:91:12:78:2E:8C:08:50:58:19:52
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 0199BD985809AA474747718FC076B67BEBB3
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/Vup9fyUkHCfDJpESeC6MCFBYGVI.roa
Signing time: Tue 07 Oct 2025 07:35:01 +0000
ROA not before: Tue 07 Oct 2025 07:35:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198774
IP address blocks: 195.69.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:98:58:09:aa:47:47:47:71:8f:c0:76:b6:7b:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Oct 7 07:35:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ea7d7f25241c27c3269112782e8c0850581952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:46:f7:a7:32:7a:b4:dd:31:ac:e5:9a:b9:
0b:b1:5d:64:0d:ea:bb:a4:56:35:ba:06:5d:d2:1f:
7a:2b:8a:4e:c4:15:fc:54:6c:f4:23:bf:15:24:69:
34:0e:d8:0f:35:bf:ca:5d:17:74:e0:7d:de:d5:13:
fa:83:7a:3d:30:61:57:0e:3a:db:be:b3:5e:b4:ef:
4c:ac:e4:20:64:c0:60:00:6d:2e:9a:fc:88:27:ee:
27:27:d8:a3:3a:16:4f:55:0b:32:7f:6c:45:9a:8c:
35:df:d6:36:84:18:e3:9f:db:19:6c:35:8d:f8:ca:
a1:ac:bc:e4:63:f3:80:a8:c6:a5:dd:9a:02:5d:e8:
14:32:ab:ee:5f:98:24:93:ca:50:92:b3:af:29:86:
8a:fe:7a:28:31:7b:ae:da:2b:69:b6:dc:e2:ef:71:
e1:f3:4a:69:81:ce:8a:f0:b0:ef:55:ab:12:60:fa:
94:38:e0:fd:c2:97:fe:a4:75:21:9b:01:d0:fd:b8:
75:1c:32:95:4a:d7:23:04:63:2a:ff:65:4b:da:71:
41:6c:6b:a6:78:34:d8:53:db:4c:8a:ba:46:5f:11:
d8:ae:94:3a:bf:23:66:a8:1f:53:15:bd:0f:f8:82:
41:8b:ae:2f:b4:27:0f:72:be:a3:77:9e:27:d5:1b:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:7D:7F:25:24:1C:27:C3:26:91:12:78:2E:8C:08:50:58:19:52
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/Vup9fyUkHCfDJpESeC6MCFBYGVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4f:28:5c:34:b4:33:10:79:3f:4d:af:3e:07:69:19:07:9a:
75:20:74:85:70:cd:85:0d:86:df:04:25:bd:37:dc:ce:1a:3d:
6c:4c:b0:e5:2e:e7:8e:29:b1:86:7d:3b:61:f6:92:83:60:d8:
a5:95:1c:bd:85:37:60:89:b8:3d:ae:20:5f:52:eb:93:73:c4:
1c:b1:a6:56:14:8a:22:9f:3e:ce:32:26:07:f4:d0:df:2a:86:
1e:f4:62:34:58:b6:4a:e6:51:07:48:82:8d:45:97:3a:f8:17:
8f:21:69:e1:e9:be:0e:87:fb:3b:cd:4f:6b:e4:33:24:29:36:
36:ca:b6:4a:c6:82:7b:ab:b3:ae:81:cf:80:78:54:6f:63:00:
fd:ad:a0:4d:56:c4:2e:7d:c7:df:81:df:3f:08:6c:b3:0a:a9:
52:31:ce:5e:a5:58:c4:a5:b9:9c:48:5e:82:a9:fb:97:fc:15:
80:4c:6e:f7:ca:b5:86:e0:d9:f5:9e:8c:ea:41:4e:55:01:fa:
85:c9:4c:c1:26:af:e8:1b:f4:0b:93:5d:72:95:87:05:35:18:
ed:0a:ba:77:c3:88:3d:c1:37:65:1a:35:25:b3:9c:17:d7:02:
f6:a1:4f:ab:fa:0d:bb:9f:06:74:6d:88:99:7c:c1:c7:2a:44:
fc:fe:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:04 2025 by rpki-client