Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/VugXiKsgP7bQPJhY3BVriDgIQ2o.roa
File: VugXiKsgP7bQPJhY3BVriDgIQ2o.roa (raw, json)
Hash identifier: 8u8Hdzg8f0dez00W/RVlIGeDoOIagMEgQ4HmQTkse4M=
Subject key identifier: 56:E8:17:88:AB:20:3F:B6:D0:3C:98:58:DC:15:6B:88:38:08:43:6A
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 0198D0CBA7473599878E2F78ECFF386E9A4F
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/VugXiKsgP7bQPJhY3BVriDgIQ2o.roa
Signing time: Fri 22 Aug 2025 08:01:04 +0000
ROA not before: Fri 22 Aug 2025 08:01:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
2a0b:21c1:601d::/48 maxlen: 48
2a0b:21c1:601e::/48 maxlen: 48
2a0b:21c1:601f::/48 maxlen: 48
2a0b:21c1:6020::/48 maxlen: 48
2a0b:21c1:6021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:cb:a7:47:35:99:87:8e:2f:78:ec:ff:38:6e:9a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Aug 22 08:01:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e81788ab203fb6d03c9858dc156b883808436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:c3:b0:38:7a:e4:ae:39:0d:b4:7a:a5:0d:
91:f8:9b:64:58:0e:07:cf:8a:ee:c3:10:2d:64:95:
13:7a:3c:38:eb:db:b4:6c:67:4c:34:6e:59:8e:3f:
c3:cc:39:36:1d:82:86:bd:78:59:3b:ec:a9:15:e9:
24:96:b0:d4:32:67:aa:68:84:1d:cb:73:46:86:93:
d6:30:73:86:a2:41:2f:ad:bb:80:63:aa:16:a8:7e:
9a:78:cd:75:ed:10:aa:e8:00:9a:fe:d5:8c:1a:14:
cf:6a:43:9f:40:25:83:a3:75:63:2c:de:3b:13:86:
2f:7b:4d:61:6e:fc:e2:f0:f7:d4:a7:8a:0a:43:71:
bd:6c:40:08:c0:45:a4:40:66:51:ff:ae:4f:14:97:
ad:e2:f2:b6:af:b4:9a:83:aa:d4:7e:0e:55:65:4b:
8a:d0:93:23:e0:31:d0:c0:18:7d:ce:7e:3c:76:c0:
50:6e:03:0d:b3:f6:1c:44:4a:10:7a:2a:b4:35:72:
e4:78:2c:2a:27:db:a6:c0:cb:8a:c1:6e:8c:cf:48:
1c:b9:d4:62:ed:97:82:aa:bb:0e:b3:24:2c:ce:22:
f1:1b:4d:78:85:fb:1b:6c:01:dc:2d:98:aa:76:09:
a5:80:45:e6:ed:a4:6d:e5:a2:26:05:ae:2c:d8:0d:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:17:88:AB:20:3F:B6:D0:3C:98:58:DC:15:6B:88:38:08:43:6A
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/VugXiKsgP7bQPJhY3BVriDgIQ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:601d::-2a0b:21c1:6021:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:3e:d6:19:2a:63:43:6c:47:b9:67:d2:81:70:0b:40:83:8a:
d4:58:d1:7c:34:cc:6e:4a:23:93:fb:65:fc:fc:a7:25:d9:c7:
50:a9:5e:5a:0f:54:29:04:17:50:07:2e:fe:97:d9:85:fe:93:
2a:67:f4:47:da:21:62:00:f4:e8:a0:5e:6e:4c:c2:e0:24:c0:
ee:f7:19:65:15:73:a2:4f:da:de:03:47:20:1a:02:b2:7c:13:
5b:87:5d:e3:59:73:32:4d:bf:20:bd:24:79:28:a1:25:f0:be:
53:a2:01:c3:d1:ea:d1:10:7b:11:de:16:f7:38:55:97:7c:74:
ca:39:c1:50:6c:89:d9:78:59:51:d5:bd:fb:cb:ec:ae:b0:93:
44:55:20:16:1d:4c:34:3c:c4:f4:47:ce:59:95:f2:f6:99:db:
9f:72:2c:d2:d7:5b:55:a3:de:3b:1d:67:d7:03:db:f4:14:d0:
ca:34:57:32:e1:bb:69:a9:91:0e:4c:0a:e0:71:01:ef:4f:28:
7f:82:8f:e0:88:d3:a3:5f:7c:f5:51:d7:1f:fb:c3:fb:aa:9f:
98:cf:7b:46:93:30:38:96:a8:8b:b1:0a:c7:99:2c:69:f7:78:
8b:16:27:9b:67:c2:ff:d8:4f:d8:26:7b:b2:fd:c0:b2:0e:f5:
9e:b8:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:48 2025 by rpki-client