Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgCKGX48jy8Tlje_hzchrft0EcI.roa
File: VgCKGX48jy8Tlje_hzchrft0EcI.roa (raw, json)
Hash identifier: 2JcRwrk4Ec+U/fhLdDcBJIiSxP9u5kLnoZeg6murT7U=
Subject key identifier: 56:00:8A:19:7E:3C:8F:2F:13:96:37:BF:87:37:21:AD:FB:74:11:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198DA405119CA50379DB41F47802E0E29D6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgCKGX48jy8Tlje_hzchrft0EcI.roa
Signing time: Sun 24 Aug 2025 04:05:04 +0000
ROA not before: Sun 24 Aug 2025 04:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:40:51:19:ca:50:37:9d:b4:1f:47:80:2e:0e:29:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 24 04:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56008a197e3c8f2f139637bf873721adfb7411c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:d6:8f:02:c8:42:6a:ac:f5:e9:da:18:4a:
4a:27:ca:37:39:e0:6f:41:4a:64:58:d0:1b:2a:a7:
bf:84:69:38:1a:a3:e8:8b:7c:71:9c:47:61:7b:f4:
22:29:69:a1:4b:a7:11:05:d4:87:5b:42:8e:3e:bb:
2e:55:e7:b0:6d:54:08:49:2d:72:bb:67:7a:7b:5f:
a5:9d:e6:06:96:6f:39:f8:9a:4d:84:2a:c3:57:3d:
1c:5c:01:2d:c1:c1:8c:0f:06:24:ab:02:ba:5b:91:
bc:27:0d:12:76:df:40:59:6c:9a:ef:53:1d:13:0f:
15:c5:3a:fb:05:d5:1c:fd:66:55:d1:a5:45:1e:bd:
b3:69:54:e2:9c:8a:e7:c4:f8:3f:fe:87:82:e1:f5:
7d:f3:bb:de:f4:55:b3:ec:ba:ad:84:c4:2f:e0:10:
de:bf:f0:b5:9c:e9:df:52:22:44:9b:f2:e3:fc:6a:
c3:d7:38:0b:25:c6:31:ea:e1:ba:af:de:4d:a7:db:
e4:7f:87:b6:60:20:07:4a:15:aa:f2:0f:0f:99:26:
49:51:c0:42:17:ce:da:9d:f4:90:c7:75:cb:de:95:
dd:8d:bc:69:15:7c:10:4f:ca:dc:ca:12:00:78:e1:
d8:8d:9d:f2:2b:48:47:58:bb:f9:00:8e:f8:a6:e7:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:8A:19:7E:3C:8F:2F:13:96:37:BF:87:37:21:AD:FB:74:11:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgCKGX48jy8Tlje_hzchrft0EcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:4d:39:82:04:38:37:f8:e2:1a:a5:b6:70:26:29:7f:87:69:
af:ec:eb:f4:82:2b:b1:02:74:92:15:9d:bf:fe:ee:ca:c9:ee:
0a:43:c6:50:c7:33:90:73:25:35:c3:bd:85:e0:da:aa:75:35:
72:2b:c1:d5:79:5f:3c:39:87:e1:55:bc:8b:14:54:99:2d:fb:
54:a8:45:99:c8:c3:c1:0d:3f:72:c1:ca:3c:08:ad:42:86:59:
3c:dc:c6:0c:61:10:ed:95:c7:ae:6e:62:3b:54:95:86:9e:53:
af:21:55:36:ce:f3:81:ba:1d:15:82:70:75:9c:67:de:f0:c1:
26:e8:c6:d9:b7:62:4a:e2:ce:72:bd:a2:ef:e2:57:33:29:0f:
1f:ec:0e:fa:b4:4d:00:23:2f:0d:6d:a1:f0:03:4a:7d:bc:9f:
78:02:f0:33:5e:5c:83:95:d1:1d:70:87:6d:bc:fc:fc:83:8b:
4e:3e:0b:a9:5c:d2:77:d5:5f:21:85:3a:3e:b3:94:ee:f3:65:
d7:ce:ae:f5:65:9e:50:c2:05:27:d7:97:64:cf:6b:33:0a:6c:
18:a6:8f:85:7a:b0:90:6d:9f:58:e3:81:0d:24:54:3e:af:75:
ba:0e:40:88:1f:a7:39:78:cf:ff:6b:ff:4e:59:4c:f6:db:22:
a2:d2:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:14:56 2025 by rpki-client