Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_VgnGY1xUnjSvVXz1MuFrAT-iz8.roa
File: _VgnGY1xUnjSvVXz1MuFrAT-iz8.roa (raw, json)
Hash identifier: 8+jCsl6oMBMTDdDwEpa4a4RztxiJF3+92cn00NrzfgM=
Subject key identifier: FD:58:27:19:8D:71:52:78:D2:BD:55:F3:D4:CB:85:AC:04:FE:8B:3F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019716570FB08DB909CF865164EC1F1F3338
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_VgnGY1xUnjSvVXz1MuFrAT-iz8.roa
Signing time: Wed 28 May 2025 10:01:33 +0000
ROA not before: Wed 28 May 2025 10:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210870
IP address blocks: 94.103.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:57:0f:b0:8d:b9:09:cf:86:51:64:ec:1f:1f:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 28 10:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd5827198d715278d2bd55f3d4cb85ac04fe8b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:bc:10:4d:e3:e1:11:c7:78:43:31:cf:99:
d7:c5:a0:6e:56:e7:ed:f1:d4:5f:4a:60:f9:f5:7f:
2e:31:60:15:6f:f0:51:3d:1d:8a:2b:1c:5c:8a:40:
75:8a:80:b1:14:c7:68:2c:04:7f:1c:07:5f:37:63:
25:28:26:b2:ea:bc:95:80:86:f9:d7:04:1c:64:64:
9e:b0:ba:bd:3b:e6:9d:42:db:e7:dd:02:cc:7e:b7:
00:03:a5:46:27:98:cb:9e:3f:f7:a5:61:7b:dc:a1:
d6:16:6e:30:7c:19:ad:87:94:a0:ec:57:35:5f:79:
fe:bc:7d:0d:6a:50:91:95:8f:8a:29:c6:71:11:04:
55:c8:9d:b8:d8:43:96:7e:18:1b:48:01:7f:cf:8c:
e7:bb:29:fe:0b:7e:6f:45:72:b7:1b:0f:9b:8f:2d:
fa:58:80:66:da:4d:4d:b5:f1:18:f3:21:81:15:a0:
6e:85:4f:f3:d2:3c:71:a8:b4:e7:00:1b:2f:d3:06:
f8:3a:72:a1:e9:9d:19:88:36:bd:c2:34:2a:b7:d7:
47:36:62:67:7e:34:25:8d:64:db:1b:65:ef:e1:73:
cf:cf:95:30:67:08:f3:aa:e0:da:bc:5f:f1:29:4b:
36:dc:2f:bf:e2:ea:15:02:ec:51:44:29:1e:1c:13:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:27:19:8D:71:52:78:D2:BD:55:F3:D4:CB:85:AC:04:FE:8B:3F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_VgnGY1xUnjSvVXz1MuFrAT-iz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.172.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ca:9d:5a:01:d5:66:f9:61:2a:28:1f:9d:63:54:72:96:9b:
47:6b:06:db:f7:92:2d:ad:5b:3e:46:d6:4e:fe:d7:58:51:81:
af:09:0b:80:51:92:e2:21:e7:4d:b5:31:b9:24:e4:14:86:7d:
75:49:bd:bb:00:3c:4f:f0:a8:15:8d:e0:2b:fd:34:84:63:e9:
91:8d:a9:f9:80:20:60:bc:7c:9c:cc:7e:92:06:5c:70:0b:a9:
8f:8d:80:31:2f:4f:6f:26:17:c0:0a:36:65:7e:19:50:9f:25:
7c:54:9c:3f:da:bc:14:9c:2c:4c:8c:69:34:31:6a:63:ae:ce:
c0:39:04:c4:46:9a:b2:db:09:f2:79:a7:7a:53:ed:88:27:0d:
5b:2c:e5:00:12:22:b7:56:ed:d6:e2:e1:97:87:52:b2:55:97:
e7:8c:38:7f:c2:90:31:45:d3:58:3e:6c:c6:0d:61:d5:58:48:
60:68:29:9d:e7:ef:e2:cd:b2:6d:26:55:80:87:d8:b9:9b:89:
bf:3d:c4:a9:e8:5a:dc:d4:e2:82:93:a9:f7:48:f9:ad:02:7c:
b9:a1:04:01:b7:5a:9e:69:8c:90:8b:2c:45:50:46:bc:ae:13:
70:91:cb:52:f7:36:e0:f9:c5:dd:6f:c1:9a:ae:45:2f:58:be:
f3:c6:e1:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcWVw+wjbkJz4ZRZOwfHzM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTI4MTAwMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDU4MjcxOThkNzE1Mjc4ZDJiZDU1ZjNkNGNiODVhYzA0ZmU4YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd68EE3j4RHHeEMxz5nXxaBuVuft
8dRfSmD59X8uMWAVb/BRPR2KKxxcikB1ioCxFMdoLAR/HAdfN2MlKCay6ryVgIb5
1wQcZGSesLq9O+adQtvn3QLMfrcAA6VGJ5jLnj/3pWF73KHWFm4wfBmth5Sg7Fc1
X3n+vH0NalCRlY+KKcZxEQRVyJ242EOWfhgbSAF/z4znuyn+C35vRXK3Gw+bjy36
WIBm2k1NtfEY8yGBFaBuhU/z0jxxqLTnABsv0wb4OnKh6Z0ZiDa9wjQqt9dHNmJn
fjQljWTbG2Xv4XPPz5UwZwjzquDavF/xKUs23C+/4uoVAuxRRCkeHBPSRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1YJxmNcVJ40r1V89TLhawE/os/MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX1ZnbkdZMXhVbmpTdlZYejFNdUZyQVQtaXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmesMA0G
CSqGSIb3DQEBCwUAA4IBAQC+yp1aAdVm+WEqKB+dY1RylptHawbb95ItrVs+RtZO
/tdYUYGvCQuAUZLiIedNtTG5JOQUhn11Sb27ADxP8KgVjeAr/TSEY+mRjan5gCBg
vHyczH6SBlxwC6mPjYAxL09vJhfACjZlfhlQnyV8VJw/2rwUnCxMjGk0MWpjrs7A
OQTERpqy2wnyead6U+2IJw1bLOUAEiK3Vu3W4uGXh1KyVZfnjDh/wpAxRdNYPmzG
DWHVWEhgaCmd5+/izbJtJlWAh9i5m4m/PcSp6Frc1OKCk6n3SPmtAny5oQQBt1qe
aYyQiyxFUEa8rhNwkctS9zbg+cXdb8GarkUvWL7zxuEJ
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:20:14 2025 by rpki-client