Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vj8KgRdnFps3dvkFo8d8rzw3ICQ.roa
File: vj8KgRdnFps3dvkFo8d8rzw3ICQ.roa (raw, json)
Hash identifier: gpVEf849wWp4NXPmAVA8R6x7Qa0hkidn7DRQeM5OgKM=
Subject key identifier: BE:3F:0A:81:17:67:16:9B:37:76:F9:05:A3:C7:7C:AF:3C:37:20:24
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0199298296C07675E3560E45F81E9C8AE7B3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vj8KgRdnFps3dvkFo8d8rzw3ICQ.roa
Signing time: Mon 08 Sep 2025 13:27:28 +0000
ROA not before: Mon 08 Sep 2025 13:27:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 77.47.152.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:82:96:c0:76:75:e3:56:0e:45:f8:1e:9c:8a:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 8 13:27:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3f0a811767169b3776f905a3c77caf3c372024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:7d:a7:3a:59:39:95:e8:4f:de:57:22:b1:
52:b1:bc:fd:7e:b1:8c:e9:c2:11:41:e8:63:5c:3c:
31:5c:b5:50:a2:85:39:72:df:c5:d7:9c:65:9f:62:
50:61:9e:6c:a2:d1:41:4c:ae:f7:d9:5a:68:23:34:
86:72:a0:ac:0d:c6:67:00:6d:a6:b6:1c:22:c8:bf:
61:61:7f:da:39:8b:90:68:fb:0e:23:85:be:ac:23:
41:0c:c2:51:d6:01:62:b8:90:e1:08:99:42:dc:5e:
0c:47:44:78:d0:e5:f8:4b:58:ea:14:7a:81:74:d3:
5d:b1:7d:69:32:f3:3b:e2:18:4f:3a:af:31:a6:bb:
e6:ae:2e:b4:69:de:3f:5a:5a:e6:f1:4c:b0:cf:70:
92:74:cb:4c:9c:b4:4e:27:4d:a4:dc:e5:eb:a7:16:
1f:0d:fa:a2:24:ca:c0:67:cb:f8:07:16:10:6c:b0:
fc:16:e4:f8:61:96:54:97:e2:b5:34:e8:7c:43:b9:
0a:c0:38:d4:4a:25:f1:99:55:cc:8e:67:78:ab:92:
88:6c:d9:76:52:42:5f:59:da:1e:36:66:f5:32:1b:
78:a9:93:51:21:4f:d0:0f:dc:5a:41:3e:b4:ff:7a:
65:c6:d7:d7:20:34:7b:f3:55:57:c1:89:e8:8f:85:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:0A:81:17:67:16:9B:37:76:F9:05:A3:C7:7C:AF:3C:37:20:24
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vj8KgRdnFps3dvkFo8d8rzw3ICQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
185.143.56.0/22
212.111.200.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
05:19:ec:fd:78:ff:88:5e:76:a3:82:88:c3:b4:3d:bc:11:04:
7c:a5:c2:f8:95:58:a6:c5:c5:e8:81:15:b7:51:ee:f8:a6:d3:
ae:86:82:cf:bf:a4:80:1f:f6:5d:df:c1:cc:69:05:1c:3d:12:
57:4a:cb:ca:f3:82:00:75:bb:50:62:c5:86:5f:e9:c1:b5:16:
7b:38:23:c0:de:e6:34:59:22:9e:95:a4:af:a6:77:6e:17:53:
b9:14:1a:19:83:16:52:ab:01:e5:61:c8:72:87:cc:67:d8:fb:
41:b8:1d:c8:ca:71:54:e9:6d:3e:08:4c:61:ed:4c:c4:86:56:
83:07:bd:05:1b:17:84:d1:9c:5a:2f:6d:ad:85:8d:82:4c:7a:
a3:4b:78:fc:2d:48:eb:78:46:e0:38:50:86:05:76:76:7c:67:
bf:0c:b7:78:0f:b3:e7:1c:fc:21:79:3a:62:30:07:e4:8f:00:
5c:9c:f1:78:c2:79:56:c2:0b:45:d8:9a:66:3c:47:04:3e:75:
09:51:96:80:a8:53:f2:8c:34:d0:58:52:be:14:e8:a0:e5:6a:
b3:f7:60:66:82:bd:e5:ab:1f:d0:65:a7:33:8b:82:b9:20:f5:
78:b2:76:fd:85:5f:3a:72:11:8c:12:5c:55:b1:e5:15:87:d7:
bf:2e:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:04:13 2025 by rpki-client