Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/VQo-At29Fu-EX7b5D46S6kL9nbI.roa
File: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (raw, json)
Hash identifier: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=
Subject key identifier: 55:0A:3E:02:DD:BD:16:EF:84:5F:B6:F9:0F:8E:92:EA:42:FD:9D:B2
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0197176AF557D4AEC726043BB47889D4A1A6
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/VQo-At29Fu-EX7b5D46S6kL9nbI.roa
Signing time: Wed 28 May 2025 15:02:54 +0000
ROA not before: Wed 28 May 2025 15:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34829
IP address blocks: 87.236.13.0/24 maxlen: 24
87.236.14.0/24 maxlen: 24
87.236.15.0/24 maxlen: 24
185.121.245.0/24 maxlen: 24
185.121.246.0/24 maxlen: 24
185.121.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:6a:f5:57:d4:ae:c7:26:04:3b:b4:78:89:d4:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: May 28 15:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=550a3e02ddbd16ef845fb6f90f8e92ea42fd9db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:98:d2:5e:95:60:d1:39:cb:07:72:c4:a9:
21:4e:fd:eb:a7:2d:80:a6:0e:82:79:88:b8:41:43:
fd:63:96:03:8e:fd:8b:9c:b2:f0:a9:94:00:73:df:
63:08:cd:ad:ea:89:cc:43:7e:a9:ad:60:88:54:95:
0f:82:39:8f:71:0f:98:ce:53:9e:5d:ed:66:a1:f7:
ae:e1:40:6c:92:38:c2:1e:7a:f2:a4:13:cd:e3:53:
bf:da:37:ef:45:9e:99:77:91:c8:31:77:e0:d9:27:
0c:5d:cc:23:1b:9a:9d:2a:57:eb:e3:bf:98:4f:18:
c0:60:6b:54:48:12:c6:cd:f4:46:1e:bd:b3:8c:68:
d3:de:3a:06:15:de:b6:89:21:33:e1:f5:c2:ad:69:
42:61:6a:d9:af:37:c2:e0:f6:aa:07:6f:9c:3b:ef:
02:5e:d3:a6:b2:0b:05:7b:03:d6:e4:6b:83:aa:e1:
5e:c3:bb:10:34:e4:35:bd:e4:ce:2c:72:ce:74:3b:
19:4f:6f:b3:eb:f4:7f:eb:56:5d:95:d1:fe:4c:1d:
4d:bb:bb:cf:00:fb:61:91:5d:2d:e1:36:6c:be:a3:
48:25:ea:10:84:e6:d4:21:ab:41:26:96:84:63:aa:
5b:c4:18:64:f4:db:e0:48:14:ab:4f:86:47:09:46:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:3E:02:DD:BD:16:EF:84:5F:B6:F9:0F:8E:92:EA:42:FD:9D:B2
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/VQo-At29Fu-EX7b5D46S6kL9nbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.13.0-87.236.15.255
185.121.245.0-185.121.247.255
Signature Algorithm: sha256WithRSAEncryption
38:da:25:de:7a:e7:a5:45:aa:c2:a3:4a:13:23:57:0f:bb:bc:
3a:68:45:03:48:04:68:08:ff:59:32:35:0f:c0:f4:e6:bd:26:
5a:39:45:46:5d:ad:40:d6:b4:df:30:ae:46:3f:74:4f:a7:93:
d4:1f:27:cb:bb:9a:04:4c:a9:1d:8f:00:69:55:a8:bd:25:74:
d4:6e:19:e8:5d:b5:c7:f9:1b:ad:a0:f5:4e:2e:b7:d5:14:2d:
d2:17:ee:d6:a5:8c:27:a3:e8:31:77:fd:1f:26:25:6d:03:fc:
f6:5e:f5:a2:f7:a6:0a:99:3d:8e:7e:e5:1e:34:d1:00:b6:ea:
32:2a:ce:c7:5d:8d:ca:70:1f:d1:fb:c5:73:78:3a:bf:5a:72:
50:ce:9b:39:7a:83:9f:07:58:01:20:30:aa:21:b7:33:85:76:
3c:c4:a4:b1:df:57:d1:af:70:f1:fb:ac:73:33:13:3b:19:a5:
d1:e4:5d:41:55:5f:c8:ae:6e:6c:d3:c7:7e:d7:14:d2:9d:db:
74:ac:67:dc:9b:a6:8b:6b:a7:98:1a:a0:4a:bc:ff:c4:86:7b:
9e:ea:49:0f:3f:38:10:ac:fd:f5:07:87:61:ed:17:71:02:6b:
4d:d7:7d:48:76:dd:3e:15:f4:3c:da:c1:fd:b1:a3:53:83:6d:
b1:91:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:25 2025 by rpki-client