Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vp17_4TupEArRJIGRotCfNCc3nU.roa
File: Vp17_4TupEArRJIGRotCfNCc3nU.roa (raw, json)
Hash identifier: gpi0gGHy06fVA9b3eYCKOtwH/D6rejrY1VYAS7Rmxe8=
Subject key identifier: 56:9D:7B:FF:84:EE:A4:40:2B:44:92:06:46:8B:42:7C:D0:9C:DE:75
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019721863D102FBABE35D06E9B261F55E24A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vp17_4TupEArRJIGRotCfNCc3nU.roa
Signing time: Fri 30 May 2025 14:08:54 +0000
ROA not before: Fri 30 May 2025 14:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207635
IP address blocks: 2a0c:b641:500::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:86:3d:10:2f:ba:be:35:d0:6e:9b:26:1f:55:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 30 14:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=569d7bff84eea4402b449206468b427cd09cde75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:c5:98:2f:83:35:e9:b6:d2:5a:9a:91:7f:
0d:da:6b:a1:78:a2:08:31:70:9e:33:9c:c1:25:a1:
ff:17:1b:ee:8c:7a:79:d3:35:fb:b2:14:83:4f:d4:
bb:68:ee:04:a3:51:32:0d:64:e9:8b:c8:d0:ca:77:
00:a1:10:36:55:ea:db:39:26:85:05:9c:06:d9:24:
a0:cc:92:41:76:4e:c8:03:a4:94:cf:ab:00:8a:b8:
95:35:4a:81:78:30:7e:19:fc:ba:ef:88:91:20:49:
5b:e8:b7:f3:c7:a3:e4:f5:86:2a:25:75:ee:ab:fc:
c9:a1:ec:a6:da:01:91:73:7c:e5:49:9f:34:e6:44:
7f:94:e9:6f:cb:f1:c1:1d:71:38:e5:84:bf:fd:bf:
82:cb:f4:3d:94:4f:7b:68:dd:02:a9:28:e8:ae:87:
a4:39:a9:51:fc:93:bd:5e:55:ce:23:03:c7:42:66:
f4:e2:32:b2:fa:4e:29:81:68:ee:90:15:34:e1:ec:
5e:83:13:3d:57:32:22:5d:77:fb:21:98:12:10:44:
a6:71:2a:f1:b5:78:9e:bc:78:17:4a:29:48:bf:46:
9b:de:ca:57:d3:63:46:f1:4c:98:40:16:12:df:be:
84:8e:d8:81:33:c2:98:be:ff:96:b0:56:8b:40:7f:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9D:7B:FF:84:EE:A4:40:2B:44:92:06:46:8B:42:7C:D0:9C:DE:75
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vp17_4TupEArRJIGRotCfNCc3nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:500::/44
Signature Algorithm: sha256WithRSAEncryption
2f:35:5c:2c:d8:26:8c:29:a8:6e:7a:63:a8:39:e7:b5:74:3b:
d9:6d:22:02:07:ac:fb:07:ab:69:89:7b:ba:66:93:d3:5a:05:
87:b8:e3:e2:c8:2b:9d:03:ee:b3:e5:8b:5a:bb:f0:40:c0:bb:
5f:6c:d2:c4:96:d4:94:d8:a5:72:61:91:d7:88:93:eb:a3:b6:
f0:a2:82:96:e1:d8:43:d6:4b:52:21:e2:e7:34:c1:e3:f4:42:
22:cd:cd:94:46:a2:b6:7d:3d:58:95:5b:5a:44:63:28:51:2f:
22:2d:f5:2f:21:05:a1:3e:54:7a:3a:f6:ed:c4:b6:31:ec:b1:
b7:c0:af:92:e1:90:43:2d:80:92:bb:0e:a8:0e:1c:81:51:60:
97:ab:72:3d:cf:98:c1:29:70:86:32:01:16:6c:85:48:f2:c5:
4f:64:92:44:d8:a9:e7:77:ff:03:7c:3d:a2:b3:0b:62:18:fb:
0a:aa:89:ee:b4:bd:22:10:4c:62:a6:1d:24:35:c6:58:a1:6b:
a0:7f:ee:7b:12:a6:ab:4f:72:ff:c9:a6:24:22:54:90:41:ab:
15:f7:28:bb:71:71:82:63:ab:3b:93:fa:f3:0b:3a:be:ad:0d:
db:5d:df:d8:4f:c0:5a:ec:27:eb:03:d3:50:d0:f5:f0:65:5a:
b1:84:e6:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZchhj0QL7q+NdBumyYfVeJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwNTMwMTQwODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjlkN2JmZjg0ZWVhNDQwMmI0NDkyMDY0NjhiNDI3Y2QwOWNkZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/FmC+DNem20lqakX8N2muheKII
MXCeM5zBJaH/FxvujHp50zX7shSDT9S7aO4Eo1EyDWTpi8jQyncAoRA2VerbOSaF
BZwG2SSgzJJBdk7IA6SUz6sAiriVNUqBeDB+Gfy674iRIElb6Lfzx6Pk9YYqJXXu
q/zJoeym2gGRc3zlSZ805kR/lOlvy/HBHXE45YS//b+Cy/Q9lE97aN0CqSjoroek
OalR/JO9XlXOIwPHQmb04jKy+k4pgWjukBU04exegxM9VzIiXXf7IZgSEESmcSrx
tXievHgXSilIv0ab3spX02NG8UyYQBYS376EjtiBM8KYvv+WsFaLQH9+1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFade/+E7qRAK0SSBkaLQnzQnN51MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvVnAxN180VHVwRUFyUkpJR1JvdENmTkNjM25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAvNVws2CaMKahuemOoOee1dDvZbSICB6z7B6tp
iXu6ZpPTWgWHuOPiyCudA+6z5Ytau/BAwLtfbNLEltSU2KVyYZHXiJPro7bwooKW
4dhD1ktSIeLnNMHj9EIizc2URqK2fT1YlVtaRGMoUS8iLfUvIQWhPlR6OvbtxLYx
7LG3wK+S4ZBDLYCSuw6oDhyBUWCXq3I9z5jBKXCGMgEWbIVI8sVPZJJE2Knnd/8D
fD2iswtiGPsKqonutL0iEExiph0kNcZYoWugf+57EqarT3L/yaYkIlSQQasV9yi7
cXGCY6s7k/rzCzq+rQ3bXd/YT8Ba7CfrA9NQ0PXwZVqxhOZx
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:50:34 2025 by rpki-client