Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa
File: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (raw, json)
Hash identifier: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=
Subject key identifier: 54:3F:8B:48:01:C5:C8:FA:96:51:9D:95:8E:6F:8A:2A:6A:FC:78:A3
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 019808BE090F8C9E674ACDCA253E9E450FA9
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa
Signing time: Mon 14 Jul 2025 11:42:08 +0000
ROA not before: Mon 14 Jul 2025 11:42:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206982
IP address blocks: 185.170.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:be:09:0f:8c:9e:67:4a:cd:ca:25:3e:9e:45:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Jul 14 11:42:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543f8b4801c5c8fa96519d958e6f8a2a6afc78a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:4c:23:a1:a5:3d:d5:21:9d:18:3d:61:c8:
01:ab:51:da:f6:0b:11:84:b1:6c:f2:a0:de:f7:da:
e3:8b:ce:04:8e:2a:d1:4a:38:ac:42:14:fc:4a:82:
19:bc:98:71:85:43:c3:03:b7:62:e8:82:d6:68:12:
e3:43:a8:59:07:c9:62:4d:6a:0a:c1:67:fe:86:b6:
6b:72:e3:9c:d8:2d:24:5b:3a:a3:ec:e1:27:3e:b9:
7b:4c:f1:be:65:71:f7:09:47:12:d4:7f:b8:87:03:
18:fa:29:cb:81:fc:5c:11:76:72:70:a4:9d:1d:56:
7b:6e:32:56:3f:99:f4:93:37:3d:8b:d8:3e:dc:56:
fd:00:39:41:54:2a:07:58:3d:7c:12:05:bf:4e:68:
75:b3:e8:ff:8b:1b:d6:15:2d:1b:3f:4d:05:bc:fa:
8f:8c:ec:ea:7b:e4:c5:e5:21:a5:55:21:f7:a0:e0:
1f:10:0e:8d:55:45:cd:3e:2e:11:37:63:32:fc:f8:
22:9c:7a:17:16:e5:97:28:df:95:a1:88:c7:f6:9a:
55:b7:6f:18:2f:25:34:dc:66:45:45:e3:e8:9d:c7:
7d:d5:aa:39:2b:23:c0:f3:cf:26:0b:cb:6b:e9:56:
86:33:af:54:78:3c:77:a2:13:62:00:76:d3:e3:61:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:8B:48:01:C5:C8:FA:96:51:9D:95:8E:6F:8A:2A:6A:FC:78:A3
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:87:6a:a2:cb:b6:5a:39:5f:96:9f:98:7b:e6:9c:02:c3:e7:
bb:ad:24:59:01:a9:5a:70:e7:8b:d2:47:13:68:41:b0:8c:c8:
75:41:e9:59:a1:1e:7d:5c:75:ea:ac:32:dc:bf:4d:9f:c9:a7:
2b:d1:11:cc:6a:e9:64:1a:e3:7c:30:2f:e4:41:18:00:2d:d2:
bd:df:3b:7c:e8:5e:a5:5a:3f:33:e9:35:09:01:89:f1:45:a9:
e4:4e:99:16:ed:1d:ad:f5:b3:d4:3a:4c:1a:da:69:49:74:28:
7e:43:c4:fd:ae:46:5c:70:dd:ff:09:18:52:e7:c4:01:af:77:
d7:b1:cb:ee:a2:6d:da:d7:70:2a:95:46:85:d1:12:76:41:96:
59:01:6e:b4:6a:a5:6c:1f:2f:e3:71:14:b3:09:f1:5b:e8:37:
ed:6e:ea:0f:bd:f5:63:f3:53:7c:b3:83:e2:a2:7e:4c:d1:bd:
9e:cf:02:55:66:7d:32:bb:0d:41:ed:aa:7e:bb:ab:93:ac:4a:
46:dc:a6:1f:e5:ae:b7:28:aa:df:cc:26:74:41:aa:9d:10:22:
bc:3e:e7:c4:3f:8d:32:a8:49:3d:1e:3e:38:79:e2:b9:34:28:
aa:dd:9d:26:75:d5:58:4b:62:57:14:d2:0b:02:13:51:b9:db:
4f:33:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:24 2025 by rpki-client