Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/VN5ojuAnFRlItFJUN1HhyLhUOjc.roa
File: VN5ojuAnFRlItFJUN1HhyLhUOjc.roa (raw, json)
Hash identifier: VYiIZW/eoPqi7U3Fkl9T92J2c6UJvlwURwxGsvrFuvI=
Subject key identifier: 54:DE:68:8E:E0:27:15:19:48:B4:52:54:37:51:E1:C8:B8:54:3A:37
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01980DFB4A56A84AF63038EC9611BD8327DA
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/VN5ojuAnFRlItFJUN1HhyLhUOjc.roa
Signing time: Tue 15 Jul 2025 12:07:08 +0000
ROA not before: Tue 15 Jul 2025 12:07:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 82.206.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:fb:4a:56:a8:4a:f6:30:38:ec:96:11:bd:83:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jul 15 12:07:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54de688ee027151948b452543751e1c8b8543a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:1c:1d:7a:d4:8c:fa:23:9b:86:44:02:d9:
e8:54:7c:fb:57:f0:e3:ac:cd:7c:4f:87:73:6b:43:
23:d6:a5:5b:a5:23:aa:20:1d:d8:6e:c6:93:1c:76:
f0:1f:ea:38:fe:0e:47:a3:62:ac:2f:bd:68:59:e3:
23:ad:f4:33:57:94:a2:c6:b5:e0:63:34:fb:05:e8:
b9:b2:a2:b4:5a:02:78:21:4c:de:e3:30:30:bb:28:
d8:cd:3c:09:ae:91:f2:90:ed:fa:90:7f:75:b5:9f:
f3:3a:3b:78:4e:2c:fe:68:f8:cc:26:18:b5:05:6e:
3e:69:9d:07:de:d9:8d:e9:5d:67:ff:41:04:c9:0d:
33:93:bd:ae:8e:14:22:5c:9a:29:8f:af:ba:3f:45:
8f:3d:06:73:58:b8:79:07:61:38:23:49:f4:2a:04:
54:c7:a0:e7:46:2d:9d:af:41:25:ce:8c:9a:b2:30:
4d:71:ff:01:f5:66:20:fa:ad:62:13:a4:b9:bc:a6:
6a:df:4a:0e:10:98:e6:1c:d6:e1:eb:2f:89:7d:fc:
2b:e9:01:42:95:84:1b:49:bf:bd:5c:2e:3b:39:aa:
3d:73:63:cc:3d:e5:47:70:6a:81:33:3b:aa:73:8f:
ab:2c:20:a5:05:a2:94:99:78:75:f8:ea:06:f2:9b:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:68:8E:E0:27:15:19:48:B4:52:54:37:51:E1:C8:B8:54:3A:37
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/VN5ojuAnFRlItFJUN1HhyLhUOjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.18.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fe:bb:2d:05:fd:eb:6b:db:2e:02:62:00:2a:e6:13:8d:4e:
fb:fe:83:fc:db:29:5e:f1:00:7e:dc:87:2e:4d:02:6e:8e:62:
30:8e:4e:a3:46:2a:69:f5:25:5d:9b:2b:06:9b:4e:fb:6d:bd:
43:dd:56:fd:92:31:2a:2f:c7:f3:fe:ad:c2:70:f1:a8:69:79:
04:64:f9:9d:e6:91:69:1b:50:e0:9d:00:30:33:8e:a6:f7:11:
47:6a:1b:e5:c5:54:e3:c5:44:62:60:a5:3b:ba:d4:2e:74:c9:
b2:a8:f4:0d:2f:0b:9b:d5:2b:e4:a2:e5:e3:08:53:55:7e:22:
9f:7c:e9:b0:36:9c:9c:e0:ff:75:fb:2c:27:3c:8f:2c:6c:b3:
6a:c8:43:c5:20:ba:d9:aa:77:5f:1a:71:ec:74:73:eb:35:ec:
bb:63:1c:09:25:28:e2:7c:24:7c:43:5f:c4:ae:a6:a6:e5:e3:
ec:9c:26:1d:71:82:3d:f6:0a:89:0d:db:9a:53:27:e4:b3:02:
21:94:88:90:da:eb:00:74:29:7a:0c:fb:f7:00:e9:8e:33:bd:
b3:83:03:fb:64:7d:34:c5:98:ae:bc:8f:f3:35:e2:6b:28:d8:
74:fe:ca:93:09:cf:62:5d:ff:56:93:78:be:e7:34:5f:3b:e5:
63:d7:c1:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgN+0pWqEr2MDjslhG9gyfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwNzE1MTIwNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGRlNjg4ZWUwMjcxNTE5NDhiNDUyNTQzNzUxZTFjOGI4NTQzYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeEcHXrUjPojm4ZEAtnoVHz7V/Dj
rM18T4dza0Mj1qVbpSOqIB3YbsaTHHbwH+o4/g5Ho2KsL71oWeMjrfQzV5SixrXg
YzT7Bei5sqK0WgJ4IUze4zAwuyjYzTwJrpHykO36kH91tZ/zOjt4Tiz+aPjMJhi1
BW4+aZ0H3tmN6V1n/0EEyQ0zk72ujhQiXJopj6+6P0WPPQZzWLh5B2E4I0n0KgRU
x6DnRi2dr0ElzoyasjBNcf8B9WYg+q1iE6S5vKZq30oOEJjmHNbh6y+Jffwr6QFC
lYQbSb+9XC47Oao9c2PMPeVHcGqBMzuqc4+rLCClBaKUmXh1+OoG8ps/lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTeaI7gJxUZSLRSVDdR4ci4VDo3MB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvVk41b2p1QW5GUmxJdEZKVU4xSGh5TGhVT2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs4SMA0G
CSqGSIb3DQEBCwUAA4IBAQBw/rstBf3ra9suAmIAKuYTjU77/oP82yle8QB+3Icu
TQJujmIwjk6jRipp9SVdmysGm077bb1D3Vb9kjEqL8fz/q3CcPGoaXkEZPmd5pFp
G1DgnQAwM46m9xFHahvlxVTjxURiYKU7utQudMmyqPQNLwub1SvkouXjCFNVfiKf
fOmwNpyc4P91+ywnPI8sbLNqyEPFILrZqndfGnHsdHPrNey7YxwJJSjifCR8Q1/E
rqam5ePsnCYdcYI99gqJDduaUyfkswIhlIiQ2usAdCl6DPv3AOmOM72zgwP7ZH00
xZiuvI/zNeJrKNh0/sqTCc9iXf9Wk3i+5zRfO+Vj18HS
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:31:39 2025 by rpki-client