Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VFBPn_kLbElvVRVA2RrLbUghYuI.roa
File: VFBPn_kLbElvVRVA2RrLbUghYuI.roa (raw, json)
Hash identifier: vIbcZJ/RPAXy4MeKuqVghzuiPd9KESij5kYHrityH0I=
Subject key identifier: 54:50:4F:9F:F9:0B:6C:49:6F:55:15:40:D9:1A:CB:6D:48:21:62:E2
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197ADD5D8C10DA213C1F929A245E75DE1B3
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VFBPn_kLbElvVRVA2RrLbUghYuI.roa
Signing time: Thu 26 Jun 2025 20:02:42 +0000
ROA not before: Thu 26 Jun 2025 20:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:21c5::/32 maxlen: 32
2a11:d384::/32 maxlen: 32
2a12:24c2::/32 maxlen: 32
2a12:41c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:d5:d8:c1:0d:a2:13:c1:f9:29:a2:45:e7:5d:e1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 26 20:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54504f9ff90b6c496f551540d91acb6d482162e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:b4:51:0f:35:12:fd:25:47:8a:30:54:f5:
7d:b9:5c:2b:9a:30:62:ab:18:25:ab:82:87:26:2e:
f6:7c:b9:1d:5e:6f:06:1c:99:62:cd:ab:67:cc:b9:
65:49:65:41:74:47:2f:04:a1:b1:ad:0c:c0:a0:96:
db:a5:be:d1:e1:7f:9d:cb:ee:0a:12:d7:d6:21:78:
af:89:d4:64:9c:ff:d3:45:fd:49:d9:3c:8e:b6:83:
3a:28:a7:44:ae:b8:df:27:fc:cd:81:cf:56:e6:aa:
06:36:3f:14:42:6a:05:49:2f:0b:37:7b:ce:60:0e:
a1:3a:e6:e1:d0:b7:b3:98:a0:3b:df:c3:fa:59:28:
1f:b1:fd:4a:52:8d:53:6e:de:54:89:b1:ec:ca:b9:
a2:3b:09:60:56:b9:c1:98:e0:0b:63:fc:c8:ae:40:
e5:f9:6b:0a:46:ac:0b:d0:c1:2f:63:32:36:dc:d0:
c6:85:16:d7:08:4d:52:08:ac:21:4e:d1:26:86:a1:
74:19:a2:ab:cb:e1:4d:c0:e7:c6:ab:e3:dc:60:99:
04:44:0c:73:6f:fb:6c:56:8b:23:6b:9f:74:0c:4d:
95:d3:67:8f:06:6c:0d:e2:24:47:82:96:05:fa:5b:
d0:88:38:63:28:7b:dd:74:8d:21:f3:b6:d2:57:47:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:4F:9F:F9:0B:6C:49:6F:55:15:40:D9:1A:CB:6D:48:21:62:E2
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VFBPn_kLbElvVRVA2RrLbUghYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:21c5::/32
2a11:d384::/32
2a12:24c2::/32
2a12:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d3:c3:37:d8:a4:40:95:ff:90:0f:29:aa:3c:18:06:a1:a8:
cc:f7:c8:a1:a0:0a:61:e5:ec:42:2c:df:42:fa:5c:8a:20:c1:
ed:fe:f0:dc:a5:f2:9c:a2:bf:2c:57:c7:d9:60:53:22:89:ed:
b5:16:b5:3f:59:22:97:1e:17:86:cb:7c:98:26:59:a6:b2:90:
e8:7a:16:ab:2d:35:bf:11:fb:5e:be:2b:41:f0:f9:94:fe:0e:
9f:1f:d4:ec:2b:e4:c4:ce:7e:c6:47:bf:ef:8f:83:5b:a5:88:
46:d8:e2:e4:d9:73:6c:22:f5:92:0d:12:0f:94:d7:21:39:3d:
38:01:82:fb:70:68:92:9b:49:ab:87:5f:ca:2d:1b:e9:5b:5b:
8b:16:00:ed:4d:39:19:e0:15:c6:53:20:52:86:6b:18:18:5c:
14:a9:54:f9:aa:84:99:5f:69:09:53:16:fd:6d:dd:7c:a2:98:
5a:e2:20:23:c1:09:da:7f:fc:07:01:38:31:17:47:19:48:9b:
eb:53:e5:34:57:f0:e8:75:a5:f4:8b:e9:fe:f2:2b:11:e8:97:
e4:bd:c2:14:b6:cf:2c:43:32:e8:52:c4:46:29:35:ff:67:98:
91:d0:6b:09:c3:71:fd:4d:6e:ae:93:ab:3c:39:1c:f9:11:d7:
0e:e3:b0:7e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZet1djBDaITwfkpokXnXeGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNjI2MjAwMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDUwNGY5ZmY5MGI2YzQ5NmY1NTE1NDBkOTFhY2I2ZDQ4MjE2MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGm0UQ81Ev0lR4owVPV9uVwrmjBi
qxglq4KHJi72fLkdXm8GHJlizatnzLllSWVBdEcvBKGxrQzAoJbbpb7R4X+dy+4K
EtfWIXividRknP/TRf1J2TyOtoM6KKdErrjfJ/zNgc9W5qoGNj8UQmoFSS8LN3vO
YA6hOubh0LezmKA738P6WSgfsf1KUo1Tbt5UibHsyrmiOwlgVrnBmOALY/zIrkDl
+WsKRqwL0MEvYzI23NDGhRbXCE1SCKwhTtEmhqF0GaKry+FNwOfGq+PcYJkERAxz
b/tsVosja590DE2V02ePBmwN4iRHgpYF+lvQiDhjKHvddI0h87bSV0fv/QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFRQT5/5C2xJb1UVQNkay21IIWLiMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvVkZCUG5fa0xiRWx2VlJWQTJSckxiVWdoWXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhEhxQMF
ACoR04QDBQAqEiTCAwUAKhJBwDANBgkqhkiG9w0BAQsFAAOCAQEAntPDN9ikQJX/
kA8pqjwYBqGozPfIoaAKYeXsQizfQvpciiDB7f7w3KXynKK/LFfH2WBTIonttRa1
P1kilx4Xhst8mCZZprKQ6HoWqy01vxH7Xr4rQfD5lP4Onx/U7CvkxM5+xke/74+D
W6WIRtji5NlzbCL1kg0SD5TXITk9OAGC+3BokptJq4dfyi0b6VtbixYA7U05GeAV
xlMgUoZrGBhcFKlU+aqEmV9pCVMW/W3dfKKYWuIgI8EJ2n/8BwE4MRdHGUib61Pl
NFfw6HWl9Ivp/vIrEeiX5L3CFLbPLEMy6FLERik1/2eYkdBrCcNx/U1urpOrPDkc
+RHXDuOwfg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:19:02 2025 by rpki-client