Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/Vjktac0EQutqMz1o5f1-TeAG4AY.roa
File: Vjktac0EQutqMz1o5f1-TeAG4AY.roa (raw, json)
Hash identifier: 8mwOPd8uKHxcwF0athR1g43eU49G81HPQuicA6jXBsM=
Subject key identifier: 56:39:2D:69:CD:04:42:EB:6A:33:3D:68:E5:FD:7E:4D:E0:06:E0:06
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 01990A9C0F6B41C2C5A28345111B667AE2D9
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/Vjktac0EQutqMz1o5f1-TeAG4AY.roa
Signing time: Tue 02 Sep 2025 13:27:03 +0000
ROA not before: Tue 02 Sep 2025 13:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213020
IP address blocks: 2a12:9ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:9c:0f:6b:41:c2:c5:a2:83:45:11:1b:66:7a:e2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Sep 2 13:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56392d69cd0442eb6a333d68e5fd7e4de006e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:7e:2a:5b:34:d4:3c:03:c8:16:6d:33:93:
9e:66:24:e0:d9:6d:78:1f:c4:ba:be:59:58:66:f3:
d9:0f:61:91:d6:7a:db:92:f3:fe:5d:f9:13:66:51:
e7:66:68:10:02:71:f7:26:18:1f:d3:74:67:ce:84:
d4:0f:a0:9b:d3:db:5d:f4:f1:cb:14:40:66:08:13:
34:f6:cd:95:b8:27:9f:4b:29:86:08:cf:cf:08:60:
d1:d1:6c:bc:59:aa:a2:a1:0f:3a:ef:d5:d5:3a:88:
7e:20:5f:2e:c7:94:4a:9a:9a:97:b9:e2:76:35:ad:
be:ca:eb:ec:f4:76:33:55:56:d3:de:2b:ca:ba:49:
eb:21:2f:ad:26:ee:e7:77:47:72:ab:24:73:ae:8b:
e1:f4:3f:ab:48:91:b7:7a:18:aa:29:f1:1f:22:bf:
a6:bb:71:7a:4f:b2:a2:da:b3:c7:e5:6c:f1:b9:1d:
bd:b4:7c:7d:ed:13:15:a1:40:11:90:e5:9e:bc:94:
82:01:f7:56:a3:a4:fd:dd:6b:42:0c:4f:97:0d:c3:
bd:45:19:e6:b3:39:3e:69:e0:c8:8e:75:32:92:db:
48:a2:3e:17:ee:97:a1:0d:a5:6f:b0:47:d5:3b:9b:
54:3b:3b:df:27:6b:21:fe:06:19:63:27:04:d3:22:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:39:2D:69:CD:04:42:EB:6A:33:3D:68:E5:FD:7E:4D:E0:06:E0:06
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/Vjktac0EQutqMz1o5f1-TeAG4AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
47:d4:f3:4c:d8:27:ad:6e:6e:8e:3d:ab:33:6d:ab:c2:17:30:
0f:08:a3:2b:4b:70:c4:18:fa:5c:59:df:dd:b0:ad:0c:97:31:
a2:ec:f7:e6:a7:d6:a2:91:cc:9f:99:8d:b7:6e:45:5e:c6:ae:
e9:53:22:cd:f0:20:67:d3:11:0a:3d:30:8b:c1:8e:ad:de:62:
7d:06:3b:4f:1a:b2:9b:9e:62:45:c4:45:3c:18:cf:fb:2a:a7:
94:c3:06:12:24:b0:fc:c5:2a:b8:40:0f:df:1e:08:0c:32:c8:
d4:89:fb:46:90:e0:44:91:0d:ec:e2:f7:b7:29:46:e3:c4:bc:
8b:fb:1a:ea:f2:67:ff:9e:9e:12:ac:99:b1:1a:c9:75:89:96:
15:07:dd:df:b5:23:69:1e:d9:1d:d9:13:4c:92:8f:d3:76:2c:
2a:07:cf:14:d9:f8:63:77:34:af:74:4e:21:26:37:67:dc:4b:
14:f0:99:0a:83:f9:61:23:58:3f:1d:07:1e:fc:f3:6f:e4:bb:
04:6c:2b:46:ff:e4:a3:a2:11:96:f8:df:f7:ce:f7:af:1d:f7:
fd:a6:f7:bf:e1:1c:a1:15:b0:47:f9:2b:30:1a:03:45:fb:1f:
08:d4:e1:03:88:61:fb:46:3d:c5:db:ee:61:82:21:6b:da:57:
2c:fa:70:b8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZkKnA9rQcLFooNFERtmeuLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTk3OWVhMzhiOWRiZGRjYTc0YjdiZmE3Mzc2OGI1N2Jm
ZmMxMmYwHhcNMjUwOTAyMTMyNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjM5MmQ2OWNkMDQ0MmViNmEzMzNkNjhlNWZkN2U0ZGUwMDZlMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZ+Kls01DwDyBZtM5OeZiTg2W14
H8S6vllYZvPZD2GR1nrbkvP+XfkTZlHnZmgQAnH3Jhgf03RnzoTUD6Cb09td9PHL
FEBmCBM09s2VuCefSymGCM/PCGDR0Wy8WaqioQ8679XVOoh+IF8ux5RKmpqXueJ2
Na2+yuvs9HYzVVbT3ivKuknrIS+tJu7nd0dyqyRzrovh9D+rSJG3ehiqKfEfIr+m
u3F6T7Ki2rPH5WzxuR29tHx97RMVoUARkOWevJSCAfdWo6T93WtCDE+XDcO9RRnm
szk+aeDIjnUykttIoj4X7pehDaVvsEfVO5tUOzvfJ2sh/gYZYycE0yIUAwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFY5LWnNBELrajM9aOX9fk3gBuAGMB8GA1UdIwQY
MBaAFCyZeeo4udvdynS3v6c3aLV7/8EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQt
YWMzMzJmOGQ4YzQ4LzEvVmprdGFjMEVRdXRxTXoxbzVmMS1UZUFHNEFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82MTU1ZjAtNGRjYi00OGNlLWE0ZWQtYWMzMzJmOGQ4YzQ4
LzEvTEpsNTZqaTUyOTNLZExlX3B6ZG90WHZfd1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKawDAN
BgkqhkiG9w0BAQsFAAOCAQEAR9TzTNgnrW5ujj2rM22rwhcwDwijK0twxBj6XFnf
3bCtDJcxouz35qfWopHMn5mNt25FXsau6VMizfAgZ9MRCj0wi8GOrd5ifQY7Txqy
m55iRcRFPBjP+yqnlMMGEiSw/MUquEAP3x4IDDLI1In7RpDgRJEN7OL3tylG48S8
i/sa6vJn/56eEqyZsRrJdYmWFQfd37UjaR7ZHdkTTJKP03YsKgfPFNn4Y3c0r3RO
ISY3Z9xLFPCZCoP5YSNYPx0HHvzzb+S7BGwrRv/ko6IRlvjf9873rx33/ab3v+Ec
oRWwR/krMBoDRfsfCNThA4hh+0Y9xdvuYYIha9pXLPpwuA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:57:22 2025 by rpki-client