Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/mVG4H-bxC4gAAge0Z_G5-u15wQ8.roa
File: mVG4H-bxC4gAAge0Z_G5-u15wQ8.roa (raw, json)
Hash identifier: wC+7y2a/aysucvYqXRmLS6U7ll3xITO55rZoqtKn4JU=
Subject key identifier: 99:51:B8:1F:E6:F1:0B:88:00:02:07:B4:67:F1:B9:FA:ED:79:C1:0F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019906AE668E60C605CEFC51268C3ACE6EA7
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/mVG4H-bxC4gAAge0Z_G5-u15wQ8.roa
Signing time: Mon 01 Sep 2025 19:08:36 +0000
ROA not before: Mon 01 Sep 2025 19:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215819
IP address blocks: 2001:3184::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:ae:66:8e:60:c6:05:ce:fc:51:26:8c:3a:ce:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 19:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9951b81fe6f10b88000207b467f1b9faed79c10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:ef:8b:ec:bc:2a:3f:24:ec:29:df:33:39:
c0:65:9f:01:be:bb:51:af:6f:cc:bb:6c:b2:87:2a:
9f:41:db:38:46:0b:17:35:fe:6d:ef:27:b5:d9:e1:
b1:6e:11:bc:73:e0:50:95:11:21:b3:9a:ff:4c:88:
8c:3b:7e:8c:4c:b0:05:03:ac:2a:a9:de:b4:0a:95:
65:cc:dc:6a:7f:a3:36:87:0f:ca:b2:94:fb:0c:32:
62:4d:26:67:e5:ba:15:6c:64:92:bd:aa:7e:e2:7e:
1e:b2:df:6f:08:e7:90:56:1b:5a:5f:c5:a4:7e:14:
41:4d:af:a0:ec:98:2d:76:16:e9:fb:13:a0:4b:c6:
9e:85:dc:8f:32:47:a8:07:da:ba:56:3d:96:57:1b:
cb:0b:a1:77:a9:28:05:24:68:df:d1:c7:54:9f:d3:
63:b8:07:91:1c:63:b3:19:7e:90:e4:6a:52:c3:da:
32:01:5f:dd:32:fb:20:a4:43:07:05:35:83:23:72:
d0:b6:93:00:f0:ec:d5:e1:97:b7:09:a9:83:f7:ed:
7f:58:04:7d:72:4f:a5:09:93:a4:5b:5c:ea:2f:78:
fb:e4:77:e7:86:f1:1b:73:eb:07:b2:33:fd:c3:e4:
3f:64:70:55:7c:ad:ad:7f:3d:e7:26:46:a9:54:74:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:B8:1F:E6:F1:0B:88:00:02:07:B4:67:F1:B9:FA:ED:79:C1:0F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/mVG4H-bxC4gAAge0Z_G5-u15wQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3184::/32
Signature Algorithm: sha256WithRSAEncryption
94:f4:9e:e5:43:23:b4:a5:a1:05:5c:3a:3d:b2:cc:7d:fd:a5:
b1:32:95:74:53:e0:35:a3:46:7f:a6:1b:9c:2f:76:2c:b8:61:
c5:7f:41:7a:8c:e3:cb:9d:56:1c:b6:96:b5:9c:8e:b1:38:6f:
b4:90:f2:d9:d6:cc:61:78:dc:87:ae:6a:52:d8:12:54:4a:f4:
c7:2e:1d:db:73:1c:f9:1f:06:f5:df:85:0a:1d:38:11:0a:f0:
2c:95:12:0f:62:1f:7d:fb:ae:84:49:02:9c:a6:76:72:95:73:
b5:d2:56:d6:b0:4b:4e:5d:db:26:33:57:7d:58:24:a3:3b:e8:
f6:ff:c9:02:1e:d2:e8:bd:49:ad:69:0d:6a:ba:7b:1c:81:4d:
ba:fe:f9:cd:2a:c3:4d:90:a4:44:4f:a2:e5:22:2c:54:59:b2:
01:1f:05:98:10:4a:9d:f4:ac:78:a3:14:85:f6:db:ec:b0:28:
e7:95:24:34:74:eb:be:3c:3c:71:fb:6b:4f:5e:4e:89:87:c0:
a3:87:51:0b:48:f7:90:1f:33:c4:b5:89:4b:4d:55:42:69:57:
88:57:cf:16:8d:33:c7:47:28:51:64:cc:f7:e6:29:24:52:91:
87:15:4e:a4:0a:0d:d2:8f:77:95:06:50:87:16:d6:a1:55:71:
44:d8:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:04:29 2025 by rpki-client