
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VGEwlpw6asPFFV1n9StUJyzTfEw.roa
File: VGEwlpw6asPFFV1n9StUJyzTfEw.roa (raw, json)
Hash identifier: 0pGkhMEO1QwaF1im3FAN2BXHbxw9cb9Bu1sg/fKOeVk=
Subject key identifier: 54:61:30:96:9C:3A:6A:C3:C5:15:5D:67:F5:2B:54:27:2C:D3:7C:4C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199B533976BC36D105801C618F3D184828D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VGEwlpw6asPFFV1n9StUJyzTfEw.roa
Signing time: Sun 05 Oct 2025 16:28:01 +0000
ROA not before: Sun 05 Oct 2025 16:28:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59651
IP address blocks: 130.49.8.0/24 maxlen: 24
130.49.9.0/24 maxlen: 24
130.49.10.0/24 maxlen: 24
130.49.11.0/24 maxlen: 24
170.168.28.0/24 maxlen: 24
170.168.29.0/24 maxlen: 24
170.168.30.0/24 maxlen: 24
170.168.31.0/24 maxlen: 24
170.168.96.0/24 maxlen: 24
170.168.97.0/24 maxlen: 24
170.168.98.0/24 maxlen: 24
170.168.99.0/24 maxlen: 24
170.168.172.0/24 maxlen: 24
170.168.173.0/24 maxlen: 24
170.168.174.0/24 maxlen: 24
170.168.175.0/24 maxlen: 24
170.168.240.0/24 maxlen: 24
170.168.241.0/24 maxlen: 24
170.168.242.0/24 maxlen: 24
170.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:33:97:6b:c3:6d:10:58:01:c6:18:f3:d1:84:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 5 16:28:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546130969c3a6ac3c5155d67f52b54272cd37c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:d6:9b:e5:0a:27:b4:0d:cb:16:e5:de:9f:
48:b6:9a:b0:3a:ce:f2:e7:cf:b4:87:22:f1:71:74:
6d:25:aa:04:10:ea:d7:33:b7:b1:f2:97:e1:fa:69:
a7:47:19:3f:88:d7:0a:58:6c:1e:78:2e:fb:27:42:
03:f0:b9:c3:c2:4b:35:3e:7f:0d:47:e6:c7:11:f3:
68:cb:3a:21:43:26:e2:71:e3:94:63:69:de:53:7f:
09:5c:5b:75:14:ac:67:35:6f:57:91:48:a8:4b:ee:
c0:1b:65:1f:23:a0:66:3d:f9:f4:f4:9c:c3:aa:6b:
4e:44:93:85:17:be:92:a2:ec:e9:01:85:cd:a3:a5:
06:8c:a4:01:e1:ab:fa:77:68:39:67:3a:82:2a:02:
e4:32:2c:48:f4:b2:a7:ed:6d:ca:c2:66:58:a8:fe:
70:6c:b3:d7:ad:c7:cc:46:2b:34:b8:93:3c:79:f1:
cb:d8:84:1d:9c:f3:97:b5:c5:2c:b6:28:e5:cc:fe:
76:c1:72:69:7b:c7:ca:d2:c2:f0:a2:8b:d5:74:e7:
77:ff:e2:6e:91:5b:84:3e:20:c1:7d:a2:bd:2d:ba:
53:b3:8d:b3:99:b7:a0:37:d6:72:5b:a0:64:66:e2:
00:f5:b9:cc:86:af:17:e7:ae:90:6b:f7:e2:e3:6e:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:30:96:9C:3A:6A:C3:C5:15:5D:67:F5:2B:54:27:2C:D3:7C:4C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VGEwlpw6asPFFV1n9StUJyzTfEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.8.0/22
170.168.28.0/22
170.168.96.0/22
170.168.172.0/22
170.168.240.0/22
Signature Algorithm: sha256WithRSAEncryption
08:22:50:2b:1f:68:0c:e5:3d:45:14:25:65:5f:a1:04:10:0f:
0d:9e:5a:f3:d7:b6:d4:23:30:66:8d:d4:19:a1:c6:37:6c:2e:
82:bb:32:3c:a0:02:9d:da:eb:8a:08:6b:2e:d6:7d:2e:f7:39:
d5:a4:d6:60:ba:bb:dc:e5:7f:d8:de:c9:64:0c:df:3f:74:39:
22:48:41:3f:7d:52:c5:8a:86:42:78:65:1a:80:72:ac:80:98:
b4:a6:eb:c7:dc:13:e7:b3:de:bb:a0:17:2d:3e:6a:ce:fd:42:
1f:e8:46:d5:e2:b5:71:d9:2e:9f:61:25:47:86:37:e5:7f:29:
7d:89:94:6e:31:5c:13:c4:2d:7f:a4:98:9c:71:9a:0e:e8:78:
74:2c:e2:08:67:37:63:f6:21:f4:7e:b5:ea:0b:fd:8f:98:9a:
89:0a:54:ad:5b:88:af:83:cf:4f:af:93:e3:1d:2d:0e:21:8f:
f1:1e:02:82:f9:00:3a:95:2e:65:da:e5:8d:23:21:cb:39:b0:
1a:df:32:05:e6:a5:23:f5:73:8d:4f:07:13:c6:d5:d6:6b:80:
ec:19:f1:f3:c9:09:28:1b:cc:91:01:6b:d1:94:63:cb:50:0e:
6c:e9:a4:c1:c5:dd:44:47:cd:b6:5b:ce:16:dd:38:d5:91:e2:
a4:db:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:33:12 2025 by rpki-client