Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/VEzRmKCthg0N9znr0nEC6lBX2SE.roa
File: VEzRmKCthg0N9znr0nEC6lBX2SE.roa (raw, json)
Hash identifier: uFDhugUUw1ANaPXsl+IH/rhPDlcZVp0gQ5Plq/UIw9k=
Subject key identifier: 54:4C:D1:98:A0:AD:86:0D:0D:F7:39:EB:D2:71:02:EA:50:57:D9:21
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019808E73C828BE7F0D0A8663CDDCACC02BF
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/VEzRmKCthg0N9znr0nEC6lBX2SE.roa
Signing time: Mon 14 Jul 2025 12:27:08 +0000
ROA not before: Mon 14 Jul 2025 12:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 78.108.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:e7:3c:82:8b:e7:f0:d0:a8:66:3c:dd:ca:cc:02:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jul 14 12:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=544cd198a0ad860d0df739ebd27102ea5057d921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:89:88:3f:0e:c1:f0:1f:a2:54:cd:50:00:
ef:86:32:5c:dc:3f:4c:f0:e2:5f:2c:09:9c:83:a3:
37:23:f2:1f:23:a4:c8:ef:a2:8f:c9:96:b7:13:bd:
f8:bf:86:7e:36:e5:6f:58:3f:8b:4d:2a:9f:01:55:
42:0a:a8:8a:84:2e:9f:27:1d:27:39:3e:36:7b:1f:
19:3f:2f:83:9b:38:2d:15:ad:9c:f9:76:a8:ef:48:
87:d3:c8:94:49:d8:02:38:8c:26:4e:45:68:07:c8:
b9:21:03:ef:13:34:88:e2:d3:b5:f4:df:05:8c:5d:
07:99:b2:3e:a7:b3:6e:1b:66:69:84:0f:cf:b7:02:
10:25:af:d0:5c:51:73:42:85:51:f7:f1:c7:fb:eb:
e2:d8:48:e7:c1:93:95:a0:1f:bd:ef:1f:8c:67:05:
5e:b0:88:53:2a:86:fb:11:0d:49:0c:a2:b5:1a:13:
48:2a:37:24:fc:e7:ff:95:82:b3:e8:91:f4:d6:63:
c3:f7:52:9c:27:2c:46:d0:29:cc:b6:83:da:d7:29:
b1:00:58:8f:81:15:91:a5:b5:d1:21:a9:2e:d5:f1:
eb:23:54:60:aa:e8:ba:ec:5c:4b:b7:aa:f4:2b:27:
cb:53:a0:88:2c:1b:1c:f6:ad:d3:8a:ea:77:a4:3c:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:D1:98:A0:AD:86:0D:0D:F7:39:EB:D2:71:02:EA:50:57:D9:21
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/VEzRmKCthg0N9znr0nEC6lBX2SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8b:7a:14:cc:11:fb:b5:61:25:94:28:29:b1:a5:45:9f:13:
41:fd:8f:8f:8d:92:23:10:35:fc:a5:9d:b6:4f:7c:e7:6f:a1:
cf:4d:52:d5:dc:9c:bb:4c:c0:db:03:c2:c0:3d:b7:2d:e1:cd:
75:f6:4f:38:ce:cc:d4:aa:5c:6f:f5:f7:2a:eb:18:03:99:d0:
83:f4:30:0a:a4:d0:36:9e:01:bf:31:f5:12:d3:dd:fb:58:f9:
4b:7e:80:b2:9c:f2:71:74:60:05:fa:79:db:56:59:c4:d1:42:
c2:74:a1:4b:ee:ed:c2:53:af:d3:b8:fa:17:47:dd:d1:8d:93:
a7:ac:3d:59:c7:0f:f8:f0:6b:e7:61:cb:4b:36:54:71:c9:03:
0b:ab:28:8d:a2:70:19:a6:83:26:56:20:21:45:3b:4c:48:03:
c2:3f:04:85:f3:a7:db:17:79:ad:b1:79:81:e7:8c:b4:06:84:
04:c5:e2:8a:9f:c1:1d:bd:aa:70:9f:6c:7a:46:25:0d:cc:af:
ee:19:4c:7a:83:21:b7:ae:58:39:c0:c7:16:7e:02:96:9d:50:
c7:75:b5:ea:3f:56:36:f2:b2:2c:91:8b:56:67:41:25:f7:e7:
fa:a5:c8:53:8f:a7:45:9a:a9:7d:96:d3:99:c8:fe:b9:27:ff:
6b:35:0f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:28 2025 by rpki-client