Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5vvDWuIoZM8wtihy1R633roW01M.roa
File: 5vvDWuIoZM8wtihy1R633roW01M.roa (raw, json)
Hash identifier: B7XyrJH2u4616ramZwWluzw1NIOhHDCRF+/zOve7lDs=
Subject key identifier: E6:FB:C3:5A:E2:28:64:CF:30:B6:28:72:D5:1E:B7:DE:BA:16:D3:53
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197371F767ECE366671566DE78F7914B663
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5vvDWuIoZM8wtihy1R633roW01M.roa
Signing time: Tue 03 Jun 2025 18:48:18 +0000
ROA not before: Tue 03 Jun 2025 18:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206847
IP address blocks: 2a14:6ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:1f:76:7e:ce:36:66:71:56:6d:e7:8f:79:14:b6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6fbc35ae22864cf30b62872d51eb7deba16d353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:88:ce:fa:b9:55:03:4d:ab:10:ce:e8:27:
6d:33:8d:25:e7:6e:91:ba:70:66:f0:75:bd:f3:5a:
8a:95:6e:98:d4:0b:fe:e1:b1:e3:9a:de:8c:f8:dc:
be:89:f4:35:c1:b9:2b:08:49:a0:98:3b:14:0a:69:
a1:cc:a4:74:77:58:64:91:35:4a:ed:f4:3e:12:a2:
eb:17:6d:65:2a:8b:2a:02:0b:0c:91:11:96:35:19:
21:d1:2a:0f:c8:5c:af:95:ca:33:45:6d:ee:e6:f9:
86:e2:bc:a0:b7:93:db:05:1e:33:ba:9c:18:48:c2:
4e:47:c0:07:94:30:d0:7d:d1:ba:6a:d3:07:78:b5:
5c:32:e9:cd:8b:db:d0:a9:7f:fa:e4:3a:85:7c:34:
0c:68:f0:2c:9a:c5:23:ba:a7:0e:ee:50:c3:5b:e4:
4c:fc:5e:f5:8c:29:5a:e7:52:1e:e7:e2:96:0c:34:
5e:60:5c:ea:02:6b:f4:bc:ef:93:05:67:55:72:ad:
a0:53:cb:34:0e:ba:13:b4:b4:54:6e:ef:10:50:5e:
27:76:c5:0d:69:6f:72:76:80:5b:82:dc:79:27:81:
17:91:54:c9:59:60:ed:7a:3e:c0:fa:70:8a:24:26:
03:24:a8:92:d4:67:54:97:4e:98:4c:da:93:53:ad:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:C3:5A:E2:28:64:CF:30:B6:28:72:D5:1E:B7:DE:BA:16:D3:53
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5vvDWuIoZM8wtihy1R633roW01M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ac3::/32
Signature Algorithm: sha256WithRSAEncryption
3e:4a:d3:1f:75:39:90:ac:66:56:e9:dc:13:c5:0e:03:43:77:
29:5f:82:57:3a:f6:33:1d:f8:a7:c3:db:70:dd:1c:83:92:cb:
ce:fa:51:2b:90:ea:bc:4d:cc:f6:c1:bb:36:4e:08:ef:47:ce:
11:8c:98:b5:71:df:c7:02:f6:9d:88:b6:0c:af:e0:c6:87:04:
f2:83:14:60:f9:67:54:2e:d7:5d:69:86:45:80:30:82:0c:0e:
a8:9e:4f:61:f1:55:94:03:0d:93:1b:59:91:c3:1a:e5:1c:ef:
98:61:75:18:86:50:c1:45:70:05:ce:4e:55:5d:f8:e6:32:fe:
80:6e:9a:1f:9e:cd:30:85:32:7f:aa:22:9e:cd:43:50:0b:be:
62:da:06:42:e5:00:1d:b6:2b:11:31:f1:e2:88:cf:07:97:7e:
f4:4b:35:dd:0c:de:ed:b6:a3:5a:25:ef:10:d8:bc:8f:a5:d7:
45:39:b5:ce:ae:62:94:66:45:ce:ce:d1:a2:3f:4d:a6:ac:20:
7a:d9:22:48:e9:dd:d2:07:c9:73:28:77:aa:c7:51:37:77:16:
09:ab:cd:c4:a8:88:88:ec:05:ab:c4:54:b3:32:6b:31:2e:ff:
3a:e8:40:40:58:18:77:1d:94:2b:c9:2c:41:73:ae:ca:55:29:
9f:2c:99:a7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZc3H3Z+zjZmcVZt5495FLZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwNjAzMTg0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmZiYzM1YWUyMjg2NGNmMzBiNjI4NzJkNTFlYjdkZWJhMTZkMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1+Izvq5VQNNqxDO6CdtM40l526R
unBm8HW981qKlW6Y1Av+4bHjmt6M+Ny+ifQ1wbkrCEmgmDsUCmmhzKR0d1hkkTVK
7fQ+EqLrF21lKosqAgsMkRGWNRkh0SoPyFyvlcozRW3u5vmG4rygt5PbBR4zupwY
SMJOR8AHlDDQfdG6atMHeLVcMunNi9vQqX/65DqFfDQMaPAsmsUjuqcO7lDDW+RM
/F71jCla51Ie5+KWDDReYFzqAmv0vO+TBWdVcq2gU8s0DroTtLRUbu8QUF4ndsUN
aW9ydoBbgtx5J4EXkVTJWWDtej7A+nCKJCYDJKiS1GdUl06YTNqTU61nywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOb7w1riKGTPMLYoctUet966FtNTMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvNXZ2RFd1SW9aTTh3dGloeTFSNjMzcm9XMDFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRqwzAN
BgkqhkiG9w0BAQsFAAOCAQEAPkrTH3U5kKxmVuncE8UOA0N3KV+CVzr2Mx34p8Pb
cN0cg5LLzvpRK5DqvE3M9sG7Nk4I70fOEYyYtXHfxwL2nYi2DK/gxocE8oMUYPln
VC7XXWmGRYAwggwOqJ5PYfFVlAMNkxtZkcMa5RzvmGF1GIZQwUVwBc5OVV345jL+
gG6aH57NMIUyf6oins1DUAu+YtoGQuUAHbYrETHx4ojPB5d+9Es13Qze7bajWiXv
ENi8j6XXRTm1zq5ilGZFzs7Roj9NpqwgetkiSOnd0gfJcyh3qsdRN3cWCavNxKiI
iOwFq8RUszJrMS7/OuhAQFgYdx2UK8ksQXOuylUpnyyZpw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:05:35 2025 by rpki-client