Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/VbGX6V55_AUgh-706a5pCl3f9Kg.roa
File: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (raw, json)
Hash identifier: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=
Subject key identifier: 55:B1:97:E9:5E:79:FC:05:20:87:EE:F4:E9:AE:69:0A:5D:DF:F4:A8
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 0197F943A21F6D16FF033A5B2478F79651C3
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/VbGX6V55_AUgh-706a5pCl3f9Kg.roa
Signing time: Fri 11 Jul 2025 11:34:08 +0000
ROA not before: Fri 11 Jul 2025 11:34:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199724
IP address blocks: 212.146.128.0/24 maxlen: 24
212.146.129.0/24 maxlen: 24
212.146.130.0/24 maxlen: 24
212.146.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:43:a2:1f:6d:16:ff:03:3a:5b:24:78:f7:96:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jul 11 11:34:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55b197e95e79fc052087eef4e9ae690a5ddff4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:53:ea:df:54:0c:8c:6d:de:3b:42:17:76:
f7:31:d6:b0:2d:33:11:71:fc:ea:05:78:c2:b3:07:
4d:33:c3:a2:a8:93:ef:fb:c3:68:91:71:af:1d:10:
6a:26:af:ad:5d:01:e1:91:d6:81:e9:30:3f:06:41:
c5:f5:77:c5:4a:e1:55:8b:86:c5:5c:28:3d:22:5f:
9e:e8:36:e9:fa:2f:2b:5b:bf:24:60:ee:53:d2:02:
e5:9e:cf:39:83:e2:8f:4b:b1:4e:ed:11:3b:18:61:
da:11:54:38:94:f7:20:d6:c9:03:42:b9:64:b5:f4:
6f:95:c3:d2:90:61:d8:94:b7:d9:e3:d7:5e:b2:66:
c8:8c:67:6b:ff:84:b9:1e:18:0b:a2:2a:bf:d3:cd:
52:5b:5a:0f:95:a4:d9:d3:21:00:2c:f2:80:20:6f:
f7:b0:c7:d9:ac:88:40:02:80:55:e0:91:89:b3:41:
40:cc:ff:22:2c:2e:76:67:b8:cf:f5:43:0f:41:80:
d0:30:e2:0c:a6:a2:c1:7d:90:92:99:9b:9d:59:fe:
75:df:29:33:21:7a:b7:3e:12:39:13:e2:43:96:39:
c6:a6:fe:51:d4:65:61:5b:73:21:a3:38:5e:28:e4:
ca:db:62:a3:98:49:fa:dc:37:75:78:ba:aa:5a:1e:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:97:E9:5E:79:FC:05:20:87:EE:F4:E9:AE:69:0A:5D:DF:F4:A8
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/VbGX6V55_AUgh-706a5pCl3f9Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.128.0/22
Signature Algorithm: sha256WithRSAEncryption
96:4b:64:2a:fd:12:e8:1d:42:4a:0f:70:d0:ad:22:ba:38:f4:
c5:ff:05:8b:93:26:bc:c0:f6:50:5c:dd:e3:47:47:66:e8:f7:
b3:9b:18:bd:e3:2c:4a:b0:e4:22:38:4c:56:a0:8c:4a:a9:56:
43:da:75:fb:72:ce:53:92:98:15:08:46:ae:1d:f5:71:fe:15:
02:f4:cf:ec:41:93:54:7b:f2:5d:0b:c3:f5:07:2f:65:6f:7c:
24:41:b4:cb:a6:14:31:a5:74:dc:43:14:bb:b1:7d:80:97:86:
7d:1d:f8:02:0b:5f:3c:e1:70:5f:00:6c:e2:17:47:a2:ae:19:
96:6c:4f:bc:f2:d3:a9:ba:5c:68:33:91:96:63:8a:94:ba:61:
a2:39:86:2a:6f:dc:78:54:8c:ae:24:ef:ad:e0:a5:17:b0:4d:
9f:c6:ef:2e:2e:fd:b8:3d:bb:06:b6:7a:7d:2b:83:a9:42:36:
20:54:7d:43:f6:d6:67:99:f5:1c:19:a6:da:de:6e:78:3e:6f:
cb:17:c1:9e:28:9b:5e:09:15:4e:0f:89:51:3d:1b:8c:25:13:
56:b7:34:43:e4:af:ce:2f:0f:4d:1f:3c:89:28:62:23:4a:81:
a6:a1:e8:67:3d:6a:f5:a2:ef:ec:fe:90:51:55:e1:5b:90:cd:
b4:4d:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:01 2025 by rpki-client