Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vPVb7H8czeJWXldroNL5PgTLdWY.roa
File: vPVb7H8czeJWXldroNL5PgTLdWY.roa (raw, json)
Hash identifier: oIBsPTtL6UH7CT1UE4F13PJVovVKlflkzdIkHgnb3hQ=
Subject key identifier: BC:F5:5B:EC:7F:1C:CD:E2:56:5E:57:6B:A0:D2:F9:3E:04:CB:75:66
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197E453BE2199049510D30AE6C71D3DE6FC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vPVb7H8czeJWXldroNL5PgTLdWY.roa
Signing time: Mon 07 Jul 2025 09:59:42 +0000
ROA not before: Mon 07 Jul 2025 09:59:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50129
IP address blocks: 31.15.0.0/22 maxlen: 22
194.31.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:53:be:21:99:04:95:10:d3:0a:e6:c7:1d:3d:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 7 09:59:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf55bec7f1ccde2565e576ba0d2f93e04cb7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:9c:62:ed:a3:f7:12:e3:64:fc:00:11:3f:
62:3c:ef:f0:ee:68:8b:8a:6a:49:66:46:8c:a7:2a:
39:c9:4b:ef:15:f4:d9:46:2a:d0:68:f0:f0:a4:77:
6e:0b:22:56:b2:96:20:1c:e5:4e:bf:a5:e9:72:97:
49:5f:51:67:55:da:36:15:69:68:63:56:d9:c6:4c:
bd:ae:a1:02:e1:2b:e1:39:e1:7b:ab:e9:e9:e3:39:
c1:3f:78:fd:10:bc:16:85:1e:84:ee:9d:d2:f3:9c:
71:9f:1c:13:68:92:f1:56:f3:4c:d6:3b:95:30:26:
28:15:54:df:84:e9:3b:43:80:79:b6:32:c2:2d:f3:
97:05:b8:86:43:15:d0:5f:bf:a5:c0:47:97:bd:f8:
da:e0:70:3b:40:5e:88:2d:bf:d0:0d:08:78:69:b8:
1e:53:73:e5:c8:c9:32:22:38:86:d4:d8:9a:73:5d:
68:7b:27:9a:e0:8f:96:15:56:1c:fc:7d:61:df:f3:
e5:78:62:d0:5c:a7:1c:40:6a:ff:aa:41:b0:f1:7a:
b5:2e:55:5d:57:d2:39:1c:55:8c:47:c4:53:74:41:
ea:6f:c2:bf:b4:b2:db:88:8d:50:9d:6c:89:11:48:
76:3b:6a:c1:47:99:04:3a:a5:6b:60:59:38:d8:de:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:5B:EC:7F:1C:CD:E2:56:5E:57:6B:A0:D2:F9:3E:04:CB:75:66
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vPVb7H8czeJWXldroNL5PgTLdWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
17:53:ae:4a:01:6c:67:49:31:b8:0a:27:df:45:8e:54:6a:db:
63:88:1a:5f:32:25:96:26:2b:b0:89:bc:28:c2:40:47:fe:d1:
07:27:cf:13:44:cb:d6:be:b5:9a:73:e3:ea:7d:89:4c:12:f2:
fe:6d:ce:a0:a3:42:59:99:e4:9a:a3:a0:28:83:b2:4a:3a:76:
91:7d:d6:0d:59:9d:49:d8:66:84:13:55:5d:fd:e4:9c:0b:a4:
3b:e6:47:2f:bc:26:89:72:fe:7c:4c:43:39:c4:5c:41:62:13:
d8:36:09:f9:7c:e0:bd:81:0a:d1:5b:dc:dd:ac:06:d8:b7:61:
b3:59:18:f5:97:2c:99:16:5e:c0:ee:c8:53:5e:d7:02:7b:a2:
64:34:7e:fa:fb:5c:d8:e0:d4:e1:f3:e7:f6:ca:2d:af:97:ab:
b9:b1:8d:e5:af:39:72:cb:ff:65:77:ea:fd:41:c3:fb:85:b6:
46:8e:05:78:d3:98:80:e2:c7:5f:96:10:08:83:f2:ff:83:b4:
85:bd:23:ac:7a:e7:e6:f3:a5:46:f1:a9:40:3b:88:3b:53:ee:
1e:c3:b2:92:3e:d2:17:60:3f:36:d4:e9:34:c0:5c:44:55:3a:
c8:7c:44:ed:a0:83:69:d4:a9:69:67:ac:6c:2b:c1:85:3a:63:
ea:dc:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:06:19 2025 by rpki-client