Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/vfts5VO11Lf49yWawFf1T10X7IA.roa
File: vfts5VO11Lf49yWawFf1T10X7IA.roa (raw, json)
Hash identifier: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=
Subject key identifier: BD:FB:6C:E5:53:B5:D4:B7:F8:F7:25:9A:C0:57:F5:4F:5D:17:EC:80
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 0197E6707C2C1C1BFBF7DE3A28F316993052
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/vfts5VO11Lf49yWawFf1T10X7IA.roa
Signing time: Mon 07 Jul 2025 19:50:20 +0000
ROA not before: Mon 07 Jul 2025 19:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213620
IP address blocks: 2a14:a100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e6:70:7c:2c:1c:1b:fb:f7:de:3a:28:f3:16:99:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Jul 7 19:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdfb6ce553b5d4b7f8f7259ac057f54f5d17ec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:0d:d4:8b:8e:86:4f:2d:e9:ac:7f:1a:a4:
8f:5b:41:ae:0f:3c:0e:ad:5e:b0:07:3b:a9:0e:fa:
e9:09:4c:cb:75:e4:cd:a6:86:8e:1f:1b:40:0f:20:
5d:bc:bf:e6:f3:a4:ea:6a:b3:0a:9a:b0:13:b3:16:
e3:22:4d:d1:6d:cb:3c:00:1b:34:5d:03:dd:38:19:
83:3d:e6:d5:5a:41:6c:4c:47:51:b2:cb:31:23:08:
e5:8b:bb:05:db:1a:61:ce:89:58:5b:a3:09:87:15:
c7:54:e1:3a:34:df:eb:5f:d1:ee:9f:65:51:a6:de:
2a:1c:98:2b:c4:2d:14:3d:b3:d1:0e:19:7f:e3:f1:
d0:0a:f3:f3:06:17:a5:a5:8f:48:d8:fe:1f:ce:8b:
48:c9:95:3f:4e:68:77:55:ef:08:e9:e6:54:7f:df:
57:0f:8f:ce:40:f8:d7:a0:37:81:ed:16:c5:99:89:
21:2a:ef:5d:c0:c5:2c:3e:4f:7f:45:8a:74:61:a4:
94:ee:ed:40:86:f4:c0:43:b5:a2:ae:c7:d8:45:fa:
c9:fe:f2:b1:85:18:4b:b9:0b:ae:9a:bb:2c:ea:d2:
62:ac:16:a4:91:06:fa:d4:04:a3:db:6a:ea:54:c5:
3c:81:8f:3d:e6:e9:6e:2a:f3:07:59:4d:07:90:35:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:6C:E5:53:B5:D4:B7:F8:F7:25:9A:C0:57:F5:4F:5D:17:EC:80
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/vfts5VO11Lf49yWawFf1T10X7IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a100::/29
Signature Algorithm: sha256WithRSAEncryption
34:3b:c8:8b:d3:6f:da:01:e0:0f:55:25:e1:0b:5b:59:44:6e:
5b:ae:3d:19:39:ac:c5:1b:9c:2e:2f:b5:ad:a7:f2:8f:0f:b5:
cb:47:25:3f:ae:ce:36:66:9b:23:c7:50:e8:3b:bc:ac:23:9c:
3a:46:d9:25:c1:03:bb:5b:44:48:f3:d9:cd:e3:19:d6:4d:9c:
55:cd:88:5e:81:fb:f6:de:4c:f6:2c:03:de:a8:90:8b:fc:84:
3d:43:d3:0e:35:6e:da:05:9e:36:b6:b4:90:25:d9:69:20:be:
be:1d:ea:fb:49:8d:c9:4f:e3:b4:67:4a:2e:6c:df:4a:2a:49:
e4:2c:64:38:bc:b5:c7:e6:6c:f5:a7:f8:00:0f:76:04:5e:e5:
09:9b:19:fd:38:9e:29:7d:5a:14:c5:fb:6f:6a:47:9e:03:00:
80:74:d0:85:d5:90:e6:34:fa:b4:74:bd:af:8d:df:4a:22:14:
33:f2:a3:13:47:d0:f9:06:09:40:43:74:15:2b:aa:24:2f:4a:
80:24:d2:c0:95:34:6f:c3:73:4d:c8:62:9a:a7:f8:a6:6f:d7:
61:ee:c1:88:41:43:a8:76:4c:ec:c7:15:ba:3a:7a:32:94:b6:
ee:1f:e5:c1:5b:50:b9:7a:31:10:fe:dd:7e:7b:a0:1d:e0:7d:
c6:d2:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:27 2025 by rpki-client