Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/vdaPP_qhNUmgnJ0NAXqPDvpkGdM.roa
File: vdaPP_qhNUmgnJ0NAXqPDvpkGdM.roa (raw, json)
Hash identifier: ZfZB97Ru+6Pn49YAOEFkll7sCtlDBIjxlPW9srTOp54=
Subject key identifier: BD:D6:8F:3F:FA:A1:35:49:A0:9C:9D:0D:01:7A:8F:0E:FA:64:19:D3
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0197D0B76D96DCC3933940E5AB95529E4FFF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/vdaPP_qhNUmgnJ0NAXqPDvpkGdM.roa
Signing time: Thu 03 Jul 2025 14:36:11 +0000
ROA not before: Thu 03 Jul 2025 14:36:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.173.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:b7:6d:96:dc:c3:93:39:40:e5:ab:95:52:9e:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 3 14:36:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdd68f3ffaa13549a09c9d0d017a8f0efa6419d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:42:e3:89:be:71:a0:07:43:60:69:e5:62:
c0:b8:ea:68:4a:ff:a0:5d:fe:1c:0e:b6:5c:5b:40:
a1:56:64:e8:bc:fe:10:bb:6e:0f:59:bc:18:95:cb:
2a:27:fb:71:99:bd:cd:18:56:0c:ff:ad:81:dc:65:
7d:7e:0e:7a:79:f5:7d:bb:2e:63:4b:83:d7:9d:ba:
f2:19:9a:05:c8:f4:5b:56:6a:96:f0:81:f5:6b:fb:
9d:d2:3f:15:15:84:b6:1b:7a:b8:9c:1d:4b:c2:97:
1f:d0:77:24:aa:60:5b:24:5e:af:49:46:2c:2a:8b:
4d:7f:b9:43:d5:9a:14:ab:e8:98:20:85:48:74:f3:
d3:84:e2:6d:5a:e3:c1:1d:67:16:c1:7a:26:76:53:
55:c1:82:d0:48:fa:26:bc:71:d0:c4:a8:3f:63:4f:
9f:47:e1:05:05:5b:a1:e6:5b:b2:d6:18:bb:c7:30:
a1:7d:53:d8:d0:dd:59:21:09:b5:b5:c1:09:54:7a:
db:87:f3:6a:ac:e2:63:4e:12:2f:71:71:f0:4a:49:
c0:2f:5b:d9:e5:67:6b:30:fd:92:b7:40:90:d4:ce:
ac:94:cd:14:df:68:c4:9b:d5:bf:9c:ab:cf:0e:b8:
87:a1:4b:2c:04:a8:0e:13:a1:f0:68:de:dc:ac:49:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:8F:3F:FA:A1:35:49:A0:9C:9D:0D:01:7A:8F:0E:FA:64:19:D3
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/vdaPP_qhNUmgnJ0NAXqPDvpkGdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:42:4f:56:c9:e3:7c:1c:a1:28:95:ac:bb:be:03:f5:35:8f:
75:73:d0:e5:16:26:00:24:1e:aa:e1:ec:b6:65:60:5c:56:c8:
2e:46:dd:c2:a5:62:a0:19:d5:f0:ea:a1:07:bd:d0:66:60:14:
22:9e:4d:cc:f4:6e:12:19:2f:0c:f2:5c:35:bd:e8:1d:bd:0b:
75:78:2d:2b:55:5b:17:37:f5:94:4f:59:f8:b2:d2:a8:01:ab:
74:ce:27:ad:84:0b:7d:88:49:59:46:ee:4e:44:a5:74:e2:ad:
73:c7:ee:e0:ee:e3:1b:c8:a6:22:8d:ec:e1:32:80:85:02:94:
0d:7a:ff:75:2f:20:70:02:4e:d1:31:29:e9:85:7c:df:8f:d1:
4b:fb:39:9d:f7:8c:d5:31:34:e5:6a:8c:a1:a8:15:7b:3f:43:
67:d8:a2:78:a8:bd:a6:a2:35:5e:84:88:05:7c:56:d4:a3:55:
08:1f:a3:01:16:6e:ee:29:51:6d:ae:18:4d:3a:1d:ef:22:44:
f9:e3:8d:f3:4b:1b:4c:4c:6b:69:72:b4:ce:b6:34:65:6a:02:
b8:16:12:91:e5:ba:f2:e9:c6:03:1c:1e:61:08:11:f0:8b:6f:
3b:7b:f9:34:56:eb:d3:ec:16:e8:32:29:95:02:5a:54:0c:ae:
8c:28:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:29:37 2025 by rpki-client