Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VtZ2fnhmeQ9hmxIfD9jthbqjIsc.roa
File: VtZ2fnhmeQ9hmxIfD9jthbqjIsc.roa (raw, json)
Hash identifier: lZAa9wFNWFWalPlMOpIPa2+iTy6GcTxK064bq73UOSI=
Subject key identifier: 56:D6:76:7E:78:66:79:0F:61:9B:12:1F:0F:D8:ED:85:BA:A3:22:C7
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01991ACFB57BE4CFC8D452F497C1F480C0F9
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VtZ2fnhmeQ9hmxIfD9jthbqjIsc.roa
Signing time: Fri 05 Sep 2025 16:57:24 +0000
ROA not before: Fri 05 Sep 2025 16:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:cf:b5:7b:e4:cf:c8:d4:52:f4:97:c1:f4:80:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 5 16:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56d6767e7866790f619b121f0fd8ed85baa322c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:86:df:46:70:1c:ef:db:87:2a:f1:24:cc:
a7:16:ed:95:cb:85:0c:d7:35:6b:ab:5a:1c:bd:87:
5d:22:bd:12:70:58:f5:8f:9b:88:75:e0:cd:c3:26:
1c:1f:b4:00:78:70:e0:aa:2b:12:12:51:2d:d9:25:
3c:2e:29:b8:7c:87:5d:a7:c4:bd:c4:98:20:f8:94:
41:07:06:ef:1c:5f:f3:58:e4:02:4e:d1:7f:b6:b2:
c3:d6:1d:be:31:c3:eb:e4:10:79:a2:b9:7c:15:db:
67:4b:35:d4:2b:8b:ac:0e:6c:af:6d:fb:3e:7f:9f:
75:00:f4:85:f7:c3:3c:78:a5:e5:e5:c2:f5:30:72:
20:c9:a2:96:57:31:12:e0:12:f8:2f:69:cc:8e:f8:
11:e8:df:9d:a4:25:a9:75:35:fd:af:0c:5d:09:37:
07:1c:d1:19:c8:fd:ff:b2:3f:d1:58:53:b1:e2:05:
60:42:0c:09:bf:9c:97:ab:0e:82:94:7e:c4:29:99:
ee:da:5c:d2:e3:43:22:29:94:a8:a8:a8:43:2d:c5:
66:44:0a:81:cc:5e:95:26:c9:df:00:cd:a6:60:07:
87:0b:6c:f5:bc:4c:fe:d5:d8:f2:a2:41:00:fa:3f:
16:85:40:c3:3a:97:7c:94:0e:dd:79:be:56:15:77:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D6:76:7E:78:66:79:0F:61:9B:12:1F:0F:D8:ED:85:BA:A3:22:C7
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VtZ2fnhmeQ9hmxIfD9jthbqjIsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6a:57:28:0f:b5:27:ee:67:8a:35:47:bf:a3:3e:95:bb:04:
46:16:a8:fe:c3:26:84:e3:ea:79:05:75:8c:1b:49:34:7e:46:
6e:77:e0:06:6f:3a:58:e0:2d:0c:ee:f5:e3:ed:05:60:8f:1d:
6f:a9:2f:f6:ec:e7:ba:84:86:92:13:0e:a1:a0:c8:c3:91:c2:
33:ec:e7:39:fa:69:78:8d:91:83:ee:6c:33:3b:09:88:46:7f:
5b:d1:16:f1:54:2f:a0:60:bd:01:79:2b:6e:2a:c2:1b:3f:38:
8b:35:14:d3:2b:2e:7c:1b:68:a6:50:a6:7e:f1:9e:7d:dc:64:
5c:0c:b7:e8:22:33:01:7d:f6:c8:f5:ea:3b:56:36:15:3a:ae:
a7:89:75:1b:16:df:6b:f7:bb:15:4d:84:fd:71:6f:97:34:46:
47:f1:58:24:bd:77:fa:b2:02:29:7c:b0:28:2b:8b:09:34:37:
3b:c4:df:07:9e:ec:f3:65:8e:8c:ae:3b:1c:2d:80:20:bd:b2:
20:03:1c:4c:74:2f:34:a2:00:c3:9a:c8:0d:4e:9a:59:7e:8d:
0c:8a:d4:48:d0:a0:6c:e8:87:2e:79:3f:7c:6b:93:d8:9a:ae:
5b:8d:dc:0f:47:e9:38:85:8a:a6:cf:79:f3:6d:c8:e7:e2:e7:
b1:f8:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:39:00 2025 by rpki-client