Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/VEgZIBYWjoldzkGuakwy0OuiD_g.roa
File: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (raw, json)
Hash identifier: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=
Subject key identifier: 54:48:19:20:16:16:8E:89:5D:CE:41:AE:6A:4C:32:D0:EB:A2:0F:F8
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 0196F33BA30AA8B6B6B94A2085DBBC18121E
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/VEgZIBYWjoldzkGuakwy0OuiD_g.roa
Signing time: Wed 21 May 2025 14:24:53 +0000
ROA not before: Wed 21 May 2025 14:24:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48271
IP address blocks: 212.2.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:3b:a3:0a:a8:b6:b6:b9:4a:20:85:db:bc:18:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: May 21 14:24:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5448192016168e895dce41ae6a4c32d0eba20ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:cc:c9:80:f4:bc:17:75:70:83:43:fb:8c:
a7:12:3b:e1:75:47:c7:92:55:dd:93:8a:dc:af:e9:
f2:3a:f0:56:6d:7d:f2:82:4b:5a:55:40:70:67:3f:
7b:8d:12:a2:a1:4f:05:8d:0f:ff:c6:f0:c4:fd:01:
32:17:1a:e5:e0:34:76:11:4f:8c:f1:2a:4d:16:d8:
b4:3e:c9:16:ac:94:09:67:40:cd:18:ef:57:cf:be:
f6:0f:e3:b3:a1:47:ec:89:3b:95:73:d4:70:37:c3:
d9:5f:33:b2:98:8b:de:e1:bb:2c:04:d0:c3:b9:00:
68:c4:a2:2d:ac:77:0a:cc:04:5e:95:72:8e:5d:e8:
f1:37:55:0d:6f:b8:31:13:90:51:7b:1a:80:92:85:
52:48:ff:52:4b:b2:57:3c:78:cd:8f:7f:d7:d1:62:
8d:e0:b7:77:a1:13:25:79:e9:53:89:42:fb:4c:73:
cd:90:06:1c:7b:7a:3e:04:bb:73:10:25:61:f0:ff:
ea:3f:fd:3e:7e:98:91:96:74:d4:61:e5:6b:ff:8c:
60:9f:9e:ed:43:76:03:dd:91:d3:bd:83:a7:85:c6:
d3:dc:c0:6e:14:96:9a:4b:e2:37:a0:b3:68:52:5a:
45:70:ec:8c:a3:ad:4d:a9:e4:5c:60:ec:5c:5e:a1:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:19:20:16:16:8E:89:5D:CE:41:AE:6A:4C:32:D0:EB:A2:0F:F8
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/VEgZIBYWjoldzkGuakwy0OuiD_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.224.0/21
Signature Algorithm: sha256WithRSAEncryption
32:e1:aa:44:0a:87:99:f3:ff:4a:82:ad:9e:88:32:f5:8a:47:
bb:1b:9c:97:ef:91:6b:cc:b0:34:85:3c:46:89:cc:46:47:29:
8f:0d:25:ea:e9:56:d4:89:74:91:af:89:89:dc:d7:02:52:12:
75:fb:35:ab:80:49:b4:6f:4f:8d:7e:db:98:01:1d:64:f0:25:
7c:ca:0b:d1:09:be:05:46:2e:ed:fa:ea:e3:59:b8:7e:9f:ad:
df:a8:fe:fb:f3:cb:ef:2a:81:ce:a9:46:49:83:62:11:66:79:
70:7a:5a:4f:18:34:20:b1:01:9f:7a:b7:0a:b3:92:2e:7c:48:
22:e3:f0:d5:f0:6e:a5:99:39:ec:96:27:21:8a:8c:05:fb:42:
5c:e0:7e:e4:42:dc:f6:fe:04:43:4c:0b:33:c6:a5:1a:ba:c5:
75:04:93:93:8d:ae:8d:90:8c:14:eb:ec:9c:72:c6:ad:07:6a:
59:09:86:74:b5:3f:3d:eb:c2:c0:09:59:24:99:30:19:bf:1f:
34:a8:d2:d8:14:3a:c4:3b:5d:e8:a8:11:87:a4:6a:fa:e0:99:
a3:10:4b:0c:ed:e6:16:19:90:8d:c3:ef:b7:a6:4d:da:c1:6d:
84:76:36:de:61:cf:eb:b1:79:58:92:da:c7:9d:cd:4f:95:15:
bb:da:79:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbzO6MKqLa2uUoghdu8GBIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2
NjU0ODAwHhcNMjUwNTIxMTQyNDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ4MTkyMDE2MTY4ZTg5NWRjZTQxYWU2YTRjMzJkMGViYTIwZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvprMyYD0vBd1cIND+4ynEjvhdUfH
klXdk4rcr+nyOvBWbX3ygktaVUBwZz97jRKioU8FjQ//xvDE/QEyFxrl4DR2EU+M
8SpNFti0PskWrJQJZ0DNGO9Xz772D+OzoUfsiTuVc9RwN8PZXzOymIve4bssBNDD
uQBoxKItrHcKzARelXKOXejxN1UNb7gxE5BRexqAkoVSSP9SS7JXPHjNj3/X0WKN
4Ld3oRMleelTiUL7THPNkAYce3o+BLtzECVh8P/qP/0+fpiRlnTUYeVr/4xgn57t
Q3YD3ZHTvYOnhcbT3MBuFJaaS+I3oLNoUlpFcOyMo61NqeRcYOxcXqExxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRIGSAWFo6JXc5BrmpMMtDrog/4MB8GA1UdIwQY
MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct
YTU1YjU4MGIwZWEzLzEvVkVnWklCWVdqb2xkemtHdWFrd3kwT3VpRF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz
LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1ALgMA0G
CSqGSIb3DQEBCwUAA4IBAQAy4apECoeZ8/9Kgq2eiDL1ike7G5yX75FrzLA0hTxG
icxGRymPDSXq6VbUiXSRr4mJ3NcCUhJ1+zWrgEm0b0+NftuYAR1k8CV8ygvRCb4F
Ri7t+urjWbh+n63fqP7788vvKoHOqUZJg2IRZnlwelpPGDQgsQGfercKs5IufEgi
4/DV8G6lmTnslichiowF+0Jc4H7kQtz2/gRDTAszxqUausV1BJOTja6NkIwU6+yc
csatB2pZCYZ0tT8968LACVkkmTAZvx80qNLYFDrEO13oqBGHpGr64JmjEEsM7eYW
GZCNw++3pk3awW2EdjbeYc/rsXlYktrHnc1PlRW72nl2
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:21 2025 by rpki-client