Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa
File: VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa (raw, json)
Hash identifier: sTPKL68aWFgc68j11xhbS7hhl1djwaAr+lQ2FflBKks=
Subject key identifier: 56:61:97:66:C6:60:23:8A:6F:1F:57:C2:90:1A:BC:A9:A5:A0:2C:2B
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019906C56DF10CDF2F7AE62AA133F630FA1E
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa
Signing time: Mon 01 Sep 2025 19:33:45 +0000
ROA not before: Mon 01 Sep 2025 19:33:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60255
IP address blocks: 45.153.135.0/24 maxlen: 24
194.55.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:c5:6d:f1:0c:df:2f:7a:e6:2a:a1:33:f6:30:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Sep 1 19:33:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56619766c660238a6f1f57c2901abca9a5a02c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:78:aa:9c:85:9e:b8:7d:13:8b:38:de:f7:
98:89:61:b1:2d:c5:0f:b7:18:1c:c9:3a:da:bd:24:
e2:64:ed:6c:09:a8:65:eb:82:44:60:11:7f:65:14:
22:dc:9a:94:9c:d2:37:e8:af:46:4b:30:e7:d6:05:
a2:aa:09:17:d2:dc:72:80:c4:28:20:af:54:03:75:
9f:bc:bc:be:88:ab:a9:6c:be:96:13:a7:61:68:30:
5e:41:6a:c8:6d:51:f1:85:cd:8e:4b:45:9a:77:4a:
49:12:d7:e4:0c:93:35:8b:f1:ff:0e:98:df:d2:8f:
cc:5b:e7:c0:89:ab:7a:a1:a6:e3:7b:b8:fe:f0:af:
64:92:d3:35:e2:ef:64:e6:f6:3b:85:1f:fc:d8:fc:
ea:ad:c8:e4:f9:0c:1b:63:4f:51:09:42:15:0e:a0:
d1:89:3e:29:c2:02:c5:da:30:ad:c4:bb:b8:b1:ad:
65:c3:4b:61:9d:4a:f3:fb:aa:0b:08:b7:f1:e5:c8:
71:f3:66:f6:56:67:ab:a5:06:e9:d8:17:06:90:6a:
69:8d:c9:39:27:f2:2b:90:c9:57:1a:c7:d3:7c:47:
8b:4e:53:00:27:53:33:cc:58:0c:48:60:e4:0a:71:
fb:a7:8f:05:9b:c8:35:11:ac:4b:73:67:24:bf:bf:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:97:66:C6:60:23:8A:6F:1F:57:C2:90:1A:BC:A9:A5:A0:2C:2B
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.135.0/24
194.55.157.0/24
Signature Algorithm: sha256WithRSAEncryption
71:79:88:9c:70:c8:74:64:e3:b9:11:17:14:c2:3c:ec:79:4a:
14:fb:f2:4c:64:c7:14:10:83:2a:80:0b:16:c1:2c:a2:62:0e:
30:57:8d:b2:12:cf:7b:9a:15:95:c1:c5:3a:bb:6b:ec:b4:24:
db:2d:34:70:52:aa:c3:df:e5:62:ca:f6:6f:02:e0:2a:3f:5e:
51:65:ff:f3:1e:18:88:8f:c8:2d:a1:00:16:a6:65:24:67:67:
70:83:68:88:8b:26:d0:ac:9d:d8:a9:03:58:7e:6d:39:15:82:
0a:5d:d9:4c:9d:30:f1:63:b2:45:34:a7:06:a0:0c:91:9b:e8:
14:0f:97:2c:62:3c:0a:03:a7:7a:7d:7a:c4:a3:93:43:70:11:
f1:c7:e0:0a:19:00:6e:d4:6d:09:ae:91:77:21:ba:44:7d:19:
0a:ce:77:35:8a:d5:1b:69:21:e9:d4:d5:d7:42:d9:d0:3e:3a:
53:46:48:1c:f7:42:fe:e2:79:51:87:99:70:52:ae:b8:95:50:
2e:28:86:c8:a0:47:52:f9:ca:8c:6c:32:5a:3a:31:10:57:7c:
03:ef:91:7b:69:39:40:d9:c1:93:36:d1:e7:58:da:b9:95:11:
48:90:9d:59:98:b1:38:df:99:ba:a2:e6:07:41:aa:12:db:9d:
00:26:5a:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkGxW3xDN8veuYqoTP2MPoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjRhODI2MjAyMDkxYWM4MzE5ZjBmMDZlYjc5NmZkODI0
MjJiMGYwHhcNMjUwOTAxMTkzMzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYxOTc2NmM2NjAyMzhhNmYxZjU3YzI5MDFhYmNhOWE1YTAyYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVt4qpyFnrh9E4s43veYiWGxLcUP
txgcyTravSTiZO1sCahl64JEYBF/ZRQi3JqUnNI36K9GSzDn1gWiqgkX0txygMQo
IK9UA3WfvLy+iKupbL6WE6dhaDBeQWrIbVHxhc2OS0Wad0pJEtfkDJM1i/H/Dpjf
0o/MW+fAiat6oabje7j+8K9kktM14u9k5vY7hR/82Pzqrcjk+QwbY09RCUIVDqDR
iT4pwgLF2jCtxLu4sa1lw0thnUrz+6oLCLfx5chx82b2VmerpQbp2BcGkGppjck5
J/IrkMlXGsfTfEeLTlMAJ1MzzFgMSGDkCnH7p48Fm8g1EaxLc2ckv78mHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFZhl2bGYCOKbx9XwpAavKmloCwrMB8GA1UdIwQY
MBaAFOwkqCYgIJGsgxnw8G63lv2CQisPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NTb0ppQWdrYXlER2ZEd2JyZVdfWUpDS3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODZmZTktODdjYy00ZDI5LTg4NmUt
ZDBhYzFlMDQ4ZjY3LzEvVm1HWFpzWmdJNHB2SDFmQ2tCcThxYVdnTENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ODZmZTktODdjYy00ZDI5LTg4NmUtZDBhYzFlMDQ4ZjY3
LzEvN0NTb0ppQWdrYXlER2ZEd2JyZVdfWUpDS3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZmHAwQA
wjedMA0GCSqGSIb3DQEBCwUAA4IBAQBxeYiccMh0ZOO5ERcUwjzseUoU+/JMZMcU
EIMqgAsWwSyiYg4wV42yEs97mhWVwcU6u2vstCTbLTRwUqrD3+ViyvZvAuAqP15R
Zf/zHhiIj8gtoQAWpmUkZ2dwg2iIiybQrJ3YqQNYfm05FYIKXdlMnTDxY7JFNKcG
oAyRm+gUD5csYjwKA6d6fXrEo5NDcBHxx+AKGQBu1G0JrpF3IbpEfRkKznc1itUb
aSHp1NXXQtnQPjpTRkgc90L+4nlRh5lwUq64lVAuKIbIoEdS+cqMbDJaOjEQV3wD
75F7aTlA2cGTNtHnWNq5lRFIkJ1ZmLE435m6ouYHQaoS250AJloo
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:21:44 2025 by rpki-client