Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/VZWTcHnuKRpq8GzyCubRyL1hqY8.roa
File: VZWTcHnuKRpq8GzyCubRyL1hqY8.roa (raw, json)
Hash identifier: OVbY/kAKvnKH5T6BoSni6A5JA5/zw2lxZl3YYIuCJGE=
Subject key identifier: 55:95:93:70:79:EE:29:1A:6A:F0:6C:F2:0A:E6:D1:C8:BD:61:A9:8F
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197212F4398D05EC99A25C86CEF14A8D2CC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/VZWTcHnuKRpq8GzyCubRyL1hqY8.roa
Signing time: Fri 30 May 2025 12:33:54 +0000
ROA not before: Fri 30 May 2025 12:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:2f:43:98:d0:5e:c9:9a:25:c8:6c:ef:14:a8:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 30 12:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5595937079ee291a6af06cf20ae6d1c8bd61a98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:b7:6a:34:e6:e3:3d:f8:1a:f8:37:f0:ec:
75:de:60:a8:bd:22:3b:b3:d8:8a:fb:a1:0b:00:fc:
83:58:a3:96:cb:7b:3e:71:f3:bc:aa:84:78:08:ef:
26:69:9f:f8:cb:43:4d:7f:c7:ad:13:4d:9e:c0:a0:
d5:38:ed:3b:c9:db:5b:eb:dd:a0:42:45:5b:09:50:
a8:3b:34:ac:32:d5:0f:36:4a:0c:1a:50:52:5d:26:
71:f9:37:78:c4:c3:17:8f:47:1d:e2:e6:11:ae:1a:
aa:de:9e:4c:5e:00:be:86:a9:54:bb:f7:19:b7:d0:
d8:58:90:14:dc:f9:42:d7:63:28:16:68:bf:29:5e:
4c:4b:f2:54:09:f8:08:25:6e:99:79:ff:b7:78:c0:
1b:b8:10:85:94:bd:b6:d1:39:14:c4:2d:5b:0e:f0:
13:2b:4c:d0:09:8c:bc:09:92:88:73:af:15:e9:aa:
10:44:bf:29:cc:9f:00:af:a0:37:4b:d0:77:25:42:
d7:e9:d5:ca:6d:ac:68:fa:dc:e2:c8:0c:eb:6f:af:
e2:c7:b3:eb:b8:89:f3:01:60:b1:30:6f:5b:91:38:
32:d9:16:b0:0d:2d:3d:cb:8e:b4:03:c4:d6:e2:7b:
64:43:18:36:a5:3d:9f:85:68:5a:75:2e:c9:bc:e8:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:93:70:79:EE:29:1A:6A:F0:6C:F2:0A:E6:D1:C8:BD:61:A9:8F
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/VZWTcHnuKRpq8GzyCubRyL1hqY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/23
Signature Algorithm: sha256WithRSAEncryption
88:4a:22:f1:f1:f4:da:d9:28:47:37:b1:67:00:95:c2:1e:f9:
4c:ab:95:a5:44:80:2f:d2:70:3d:b1:cd:08:99:e7:da:3b:da:
d7:47:e0:97:24:fa:94:0d:24:00:03:1b:81:17:27:4b:b4:6f:
c8:a2:99:0a:91:a3:2b:be:6e:ff:ef:d8:73:20:4c:a3:81:12:
72:1d:64:5f:8d:3f:90:b0:1f:be:16:de:ce:4f:b2:8e:79:8c:
37:58:42:83:ee:ef:ed:a4:c8:18:11:74:f5:63:d1:c2:0f:a5:
bd:07:68:77:12:62:2b:49:c9:f1:a5:e4:7e:16:3c:dd:08:54:
5b:da:83:2b:ad:c1:f8:08:cc:91:ca:fa:7a:71:5a:45:88:0a:
f2:fd:9c:60:3e:4a:be:8e:e5:d7:6c:7a:ca:f1:ac:a9:b7:f6:
df:5a:ce:eb:eb:46:09:26:b1:b7:47:f1:25:45:86:bb:03:3c:
d8:30:01:18:69:68:84:80:20:7b:81:fc:a0:4f:c1:67:de:45:
ad:e1:70:d5:91:f6:f1:77:b5:e0:47:7f:2e:d3:f0:14:e3:cf:
76:1f:3c:ba:f3:6e:b1:d3:40:29:ef:09:8d:f8:c3:ed:39:63:
03:f9:d7:27:f7:82:fa:14:86:e2:0e:0d:74:7f:55:65:d0:6c:
d2:17:7c:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZchL0OY0F7JmiXIbO8UqNLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjUwNTMwMTIzMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTk1OTM3MDc5ZWUyOTFhNmFmMDZjZjIwYWU2ZDFjOGJkNjFhOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGO3ajTm4z34Gvg38Ox13mCovSI7
s9iK+6ELAPyDWKOWy3s+cfO8qoR4CO8maZ/4y0NNf8etE02ewKDVOO07ydtb692g
QkVbCVCoOzSsMtUPNkoMGlBSXSZx+Td4xMMXj0cd4uYRrhqq3p5MXgC+hqlUu/cZ
t9DYWJAU3PlC12MoFmi/KV5MS/JUCfgIJW6Zef+3eMAbuBCFlL220TkUxC1bDvAT
K0zQCYy8CZKIc68V6aoQRL8pzJ8Ar6A3S9B3JULX6dXKbaxo+tziyAzrb6/ix7Pr
uInzAWCxMG9bkTgy2RawDS09y460A8TW4ntkQxg2pT2fhWhadS7JvOgAnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWVk3B57ikaavBs8grm0ci9YamPMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvVlpXVGNIbnVLUnBxOEd6eUN1YlJ5TDFocVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4VYMA0G
CSqGSIb3DQEBCwUAA4IBAQCISiLx8fTa2ShHN7FnAJXCHvlMq5WlRIAv0nA9sc0I
mefaO9rXR+CXJPqUDSQAAxuBFydLtG/IopkKkaMrvm7/79hzIEyjgRJyHWRfjT+Q
sB++Ft7OT7KOeYw3WEKD7u/tpMgYEXT1Y9HCD6W9B2h3EmIrScnxpeR+FjzdCFRb
2oMrrcH4CMyRyvp6cVpFiAry/ZxgPkq+juXXbHrK8aypt/bfWs7r60YJJrG3R/El
RYa7AzzYMAEYaWiEgCB7gfygT8Fn3kWt4XDVkfbxd7XgR38u0/AU4892Hzy6826x
00Ap7wmN+MPtOWMD+dcn94L6FIbiDg10f1Vl0GzSF3wv
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:02 2025 by rpki-client