Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VS3w74XMPr5c5L7Or6OFUuiVfsA.roa
File: VS3w74XMPr5c5L7Or6OFUuiVfsA.roa (raw, json)
Hash identifier: xHkZaeOMdBRp2lGp1v7TvvgW8QebAnrvdJ9wA2RpMMI=
Subject key identifier: 55:2D:F0:EF:85:CC:3E:BE:5C:E4:BE:CE:AF:A3:85:52:E8:95:7E:C0
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01981EFA21C1EA6CDD29E8AE96612112B298
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VS3w74XMPr5c5L7Or6OFUuiVfsA.roa
Signing time: Fri 18 Jul 2025 19:19:25 +0000
ROA not before: Fri 18 Jul 2025 19:19:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:a803::/32 maxlen: 32
2a09:af83::/32 maxlen: 32
2a09:d706::/32 maxlen: 32
2a09:dd00::/32 maxlen: 32
2a09:e300::/32 maxlen: 32
2a0d:3c41::/32 maxlen: 32
2a0d:95c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:fa:21:c1:ea:6c:dd:29:e8:ae:96:61:21:12:b2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 18 19:19:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=552df0ef85cc3ebe5ce4beceafa38552e8957ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:b3:56:5c:ed:7b:61:21:f0:76:f6:31:18:
7e:b1:ac:6a:ce:7c:32:86:47:73:b4:69:cc:2c:a4:
9f:45:ed:2b:d1:a9:5b:ef:37:45:13:49:53:ca:49:
fc:a9:62:5c:23:22:d2:0b:38:c8:9e:c6:69:05:13:
da:d8:43:5c:53:d9:29:53:16:97:51:82:b6:cc:56:
ac:56:77:e8:f5:48:0a:31:03:26:70:6a:54:e2:ba:
4d:1f:4a:cd:7e:94:6b:4d:8e:95:1d:83:89:97:87:
0f:c7:e8:83:87:6d:2f:e2:d5:e8:67:04:00:f9:70:
fb:df:85:02:82:c3:f5:5a:09:46:1a:7e:51:c9:5d:
b7:e5:c2:de:c6:07:0e:09:d2:02:9b:b9:63:35:e6:
05:57:2a:91:7b:a8:38:17:fc:ef:24:38:d4:03:a9:
73:77:45:0c:85:32:da:ca:00:fe:78:77:1e:42:a9:
d5:f9:0e:3a:25:0e:ca:73:a0:43:77:c0:cd:c9:12:
b2:8a:0e:4e:91:e4:cb:ac:d3:2e:69:1e:f6:41:12:
76:5d:25:b6:07:a5:8d:d1:9f:47:fb:3e:c6:55:1a:
f8:8b:a6:e5:46:2a:e8:10:e6:cb:c0:34:21:0a:c1:
3e:ad:c7:ae:0b:b9:95:0d:95:e6:a6:d6:dc:f6:06:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:F0:EF:85:CC:3E:BE:5C:E4:BE:CE:AF:A3:85:52:E8:95:7E:C0
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/VS3w74XMPr5c5L7Or6OFUuiVfsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a803::/32
2a09:af83::/32
2a09:d706::/32
2a09:dd00::/32
2a09:e300::/32
2a0d:3c41::/32
2a0d:95c7::/32
Signature Algorithm: sha256WithRSAEncryption
13:34:f3:aa:e3:a6:3f:96:d5:cd:7c:88:8e:99:1a:c2:05:d9:
88:ec:16:88:cd:c6:5c:2a:c2:5c:59:5e:30:c0:03:a3:f6:9b:
9f:0d:62:04:f6:6e:14:63:ca:2b:46:fd:d2:5f:70:71:26:1a:
48:1c:52:e2:b9:44:09:39:14:a3:ed:5d:d2:73:d6:94:80:2d:
2d:a6:e5:cf:6e:cf:3e:c6:d0:c4:8e:f1:46:64:d3:dd:76:81:
d4:1b:d8:96:04:5a:38:1d:29:8c:4a:43:8d:a8:ca:58:13:b7:
b8:cf:70:23:da:76:ea:60:d8:92:40:f7:9d:fe:06:a1:98:51:
1e:2f:9c:83:05:c7:db:87:22:b6:6b:86:95:1d:34:d6:ec:56:
52:65:d1:71:f5:22:36:81:39:3d:fb:35:1e:af:a3:54:72:33:
62:30:b3:84:e2:7d:f3:9b:56:12:14:2b:28:7c:d7:36:a6:f2:
49:a0:a0:53:c1:c8:9e:02:f9:a8:a1:82:35:d4:f9:30:c3:1b:
ef:39:4c:5c:4f:dd:e5:25:c3:ec:ac:01:95:a6:e5:4b:43:75:
5d:0c:87:16:cc:a2:dd:7e:56:3a:a8:b8:e9:24:13:e0:72:e2:
ed:e6:24:16:55:7a:25:60:ad:32:c8:95:df:a5:3f:a9:28:e3:
50:d4:6c:e3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZge+iHB6mzdKeiulmEhErKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUwNzE4MTkxOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTJkZjBlZjg1Y2MzZWJlNWNlNGJlY2VhZmEzODU1MmU4OTU3ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYizVlzte2Eh8Hb2MRh+saxqznwy
hkdztGnMLKSfRe0r0alb7zdFE0lTykn8qWJcIyLSCzjInsZpBRPa2ENcU9kpUxaX
UYK2zFasVnfo9UgKMQMmcGpU4rpNH0rNfpRrTY6VHYOJl4cPx+iDh20v4tXoZwQA
+XD734UCgsP1WglGGn5RyV235cLexgcOCdICm7ljNeYFVyqRe6g4F/zvJDjUA6lz
d0UMhTLaygD+eHceQqnV+Q46JQ7Kc6BDd8DNyRKyig5OkeTLrNMuaR72QRJ2XSW2
B6WN0Z9H+z7GVRr4i6blRiroEObLwDQhCsE+rceuC7mVDZXmptbc9gZIfwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFFUt8O+FzD6+XOS+zq+jhVLolX7AMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvVlMzdzc0WE1QcjVjNUw3T3I2T0ZVdWlWZnNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUAKgmoAwMF
ACoJr4MDBQAqCdcGAwUAKgndAAMFACoJ4wADBQAqDTxBAwUAKg2VxzANBgkqhkiG
9w0BAQsFAAOCAQEAEzTzquOmP5bVzXyIjpkawgXZiOwWiM3GXCrCXFleMMADo/ab
nw1iBPZuFGPKK0b90l9wcSYaSBxS4rlECTkUo+1d0nPWlIAtLablz27PPsbQxI7x
RmTT3XaB1BvYlgRaOB0pjEpDjajKWBO3uM9wI9p26mDYkkD3nf4GoZhRHi+cgwXH
24citmuGlR001uxWUmXRcfUiNoE5Pfs1Hq+jVHIzYjCzhOJ985tWEhQrKHzXNqby
SaCgU8HIngL5qKGCNdT5MMMb7zlMXE/d5SXD7KwBlablS0N1XQyHFsyi3X5WOqi4
6SQT4HLi7eYkFlV6JWCtMsiV36U/qSjjUNRs4w==
-----END CERTIFICATE-----
Generated at Mon Jul 21 10:38:19 2025 by rpki-client