Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vejsvXRbfLpYgx8r3P2G5BGjcMk.roa
File: vejsvXRbfLpYgx8r3P2G5BGjcMk.roa (raw, json)
Hash identifier: Nw+rpKoVeiPKdE9SgU6X1PpaXeGwLuQhY8+RSX6i37Q=
Subject key identifier: BD:E8:EC:BD:74:5B:7C:BA:58:83:1F:2B:DC:FD:86:E4:11:A3:70:C9
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B62D0AC66D398524B7E253E467194E
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vejsvXRbfLpYgx8r3P2G5BGjcMk.roa
Signing time: Mon 14 Jul 2025 16:13:10 +0000
ROA not before: Mon 14 Jul 2025 16:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 185.125.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:2d:0a:c6:6d:39:85:24:b7:e2:53:e4:67:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde8ecbd745b7cba58831f2bdcfd86e411a370c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:d8:4a:f3:52:5b:fc:3a:04:27:94:f0:6b:
6b:f8:95:9c:b3:85:0f:28:8e:52:ce:ad:cb:38:6e:
dd:c4:c1:27:22:c4:c3:47:8b:c0:e1:dc:a5:de:93:
13:46:c4:33:48:94:7b:32:a5:e7:bd:52:70:d3:9f:
fc:f8:bc:aa:fd:1e:e3:90:42:e3:d1:c5:a7:bd:66:
9e:71:ad:7e:35:16:67:d4:7c:ad:0f:2c:0c:f2:74:
77:d8:21:b8:5b:65:5b:80:64:73:72:9f:f2:85:88:
15:d2:31:70:9f:37:d7:0b:62:7b:88:ae:52:57:12:
99:ff:05:5f:7a:d1:a9:47:bd:97:a6:61:2e:3a:61:
5b:6a:89:cb:c6:e0:02:2b:9e:4a:c7:d2:b9:67:50:
dc:c9:05:95:af:79:cd:0b:91:56:54:db:c2:1a:60:
a5:3c:e0:b0:0f:b2:19:e2:21:b9:88:19:7f:86:a9:
d3:a5:55:45:90:54:76:a2:03:97:bc:b2:b3:8e:09:
2c:13:2a:0e:eb:83:31:b1:b7:ee:94:99:d8:24:43:
d6:41:34:0c:63:46:6c:10:ef:18:e8:b5:b4:7f:c4:
00:ad:80:28:67:c3:5c:ed:2a:6b:a3:0d:29:15:3c:
95:97:5a:0e:0e:87:37:e8:33:00:ef:a7:ba:3b:ec:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:EC:BD:74:5B:7C:BA:58:83:1F:2B:DC:FD:86:E4:11:A3:70:C9
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vejsvXRbfLpYgx8r3P2G5BGjcMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1d:3c:ca:f3:be:6c:d3:79:4d:19:a0:0c:57:37:2c:e8:5c:
8e:76:3a:8a:63:92:93:b9:b0:7c:a7:c6:c9:3d:42:1c:9b:61:
c4:fa:81:c0:b7:5a:e4:cb:dc:96:ed:23:6c:05:d5:01:a7:00:
a1:0c:ec:b8:72:00:54:4b:7d:fb:2a:4e:fe:a0:5e:09:c4:63:
62:3f:4f:39:0b:b5:37:d4:2b:2f:d7:9f:c5:74:c5:a0:63:93:
f3:d5:f5:50:67:cf:06:39:31:bd:76:e0:a0:0c:59:04:3f:e3:
d8:c1:83:7c:34:f0:67:3d:83:ad:8e:8e:e1:db:b2:95:28:c9:
9b:9a:20:ab:fe:bc:ea:26:05:4d:f0:9b:aa:62:31:6d:10:6e:
7a:b3:8f:77:f6:57:b4:73:ed:53:03:84:42:b1:48:44:a8:cd:
7d:89:90:d0:6c:5a:68:56:c7:31:47:f6:9f:da:53:81:d9:fb:
46:05:3c:0e:fb:c1:71:9f:5c:58:cd:fb:46:ab:02:df:ba:ba:
a2:69:ee:ba:5a:a7:52:ce:39:30:0c:02:f5:29:81:9f:65:e3:
08:4e:8e:d6:f3:6b:a5:29:1f:e8:19:4e:fd:c0:28:76:45:00:
04:5d:ef:d4:ee:a7:75:c3:46:84:77:ca:71:0a:49:44:b4:f8:
ab:01:e9:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgJti0Kxm05hSS34lPkZxlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjUwNzE0MTYxMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGU4ZWNiZDc0NWI3Y2JhNTg4MzFmMmJkY2ZkODZlNDExYTM3MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycvYSvNSW/w6BCeU8Gtr+JWcs4UP
KI5Szq3LOG7dxMEnIsTDR4vA4dyl3pMTRsQzSJR7MqXnvVJw05/8+Lyq/R7jkELj
0cWnvWaeca1+NRZn1HytDywM8nR32CG4W2VbgGRzcp/yhYgV0jFwnzfXC2J7iK5S
VxKZ/wVfetGpR72XpmEuOmFbaonLxuACK55Kx9K5Z1DcyQWVr3nNC5FWVNvCGmCl
POCwD7IZ4iG5iBl/hqnTpVVFkFR2ogOXvLKzjgksEyoO64MxsbfulJnYJEPWQTQM
Y0ZsEO8Y6LW0f8QArYAoZ8Nc7Sprow0pFTyVl1oODoc36DMA76e6O+y0iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3o7L10W3y6WIMfK9z9huQRo3DJMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvdmVqc3ZYUmJmTHBZZ3g4cjNQMkc1QkdqY01rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX0yMA0G
CSqGSIb3DQEBCwUAA4IBAQAuHTzK875s03lNGaAMVzcs6FyOdjqKY5KTubB8p8bJ
PUIcm2HE+oHAt1rky9yW7SNsBdUBpwChDOy4cgBUS337Kk7+oF4JxGNiP085C7U3
1Csv15/FdMWgY5Pz1fVQZ88GOTG9duCgDFkEP+PYwYN8NPBnPYOtjo7h27KVKMmb
miCr/rzqJgVN8JuqYjFtEG56s4939le0c+1TA4RCsUhEqM19iZDQbFpoVscxR/af
2lOB2ftGBTwO+8Fxn1xYzftGqwLfurqiae66WqdSzjkwDAL1KYGfZeMITo7W82ul
KR/oGU79wCh2RQAEXe/U7qd1w0aEd8pxCklEtPirAemo
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:28 2025 by rpki-client