Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VOcEF0f7WNo4vVl5qC3aLFDgO20.roa
File: VOcEF0f7WNo4vVl5qC3aLFDgO20.roa (raw, json)
Hash identifier: xaWkvZwH2pynHeJG2I3um3vV/6zvwD6eFp9XmnidXp0=
Subject key identifier: 54:E7:04:17:47:FB:58:DA:38:BD:59:79:A8:2D:DA:2C:50:E0:3B:6D
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E250D33FF281A8A555210D90274D0BF3
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VOcEF0f7WNo4vVl5qC3aLFDgO20.roa
Signing time: Mon 25 Aug 2025 17:40:04 +0000
ROA not before: Mon 25 Aug 2025 17:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39351
IP address blocks: 85.203.53.0/24 maxlen: 24
85.203.54.0/24 maxlen: 24
85.203.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:50:d3:3f:f2:81:a8:a5:55:21:0d:90:27:4d:0b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e7041747fb58da38bd5979a82dda2c50e03b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:17:9f:f2:3b:75:23:5a:62:3e:f2:1a:bf:
ff:31:36:12:68:d6:a4:26:c1:36:ca:65:5b:e2:20:
4b:52:8c:2c:c1:3d:79:44:8a:0a:65:f3:49:70:4e:
86:32:3a:89:67:4a:05:5b:40:8a:e6:41:41:b4:f5:
46:b3:ad:d0:cb:48:6f:74:9c:e9:5b:6b:fd:84:29:
73:b1:f0:e7:52:39:22:db:f5:1d:3e:ce:c4:3b:94:
de:43:df:3c:81:cc:a1:dd:95:f9:52:8b:e5:5c:30:
ae:40:ad:6e:eb:13:81:5c:a5:68:e2:1e:82:0b:02:
b1:ef:9e:42:7f:97:ae:86:2c:0e:91:74:79:ca:90:
d9:6c:79:3d:a0:3d:0a:df:fc:2e:e2:67:f5:38:d5:
3b:e6:73:2f:66:ed:3c:ff:d4:68:12:4c:5b:f2:16:
a3:16:a2:87:6d:20:52:1c:eb:eb:10:60:7a:64:4e:
67:8e:d8:94:bf:fe:48:3b:7a:94:17:4f:f0:fa:2a:
33:d8:67:9b:e8:37:cf:94:a7:20:3f:92:85:69:dc:
0b:b9:85:93:b5:5a:63:bc:8d:d7:f7:5b:88:11:ae:
40:60:d6:ed:96:12:54:9a:d0:b7:85:cf:86:fa:3c:
b8:57:d4:db:df:ab:ae:b4:8d:a0:b6:d2:66:fe:af:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:04:17:47:FB:58:DA:38:BD:59:79:A8:2D:DA:2C:50:E0:3B:6D
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VOcEF0f7WNo4vVl5qC3aLFDgO20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.53.0-85.203.55.255
Signature Algorithm: sha256WithRSAEncryption
48:fb:bb:f7:8f:68:3a:67:6b:fe:95:e5:76:9a:f0:ee:27:0f:
6e:12:ba:80:5e:59:82:54:d6:28:4e:b8:4a:a5:56:53:2a:45:
6a:1c:32:ff:b8:28:f4:40:c7:72:6c:03:83:ad:d3:bf:05:cd:
2a:73:af:dc:f0:72:4d:a5:7a:49:42:3a:63:24:e7:d2:c3:ef:
3f:c2:e7:70:b4:99:63:1a:30:e3:41:7d:3e:13:b8:3a:e8:ff:
fa:8a:8e:b1:75:9e:c6:cb:10:31:ce:09:25:9b:f4:f6:a9:1e:
d6:87:3c:2a:90:7a:69:51:a6:03:49:c6:cd:92:ec:1f:cd:7d:
49:36:c5:43:15:16:45:be:93:c1:86:ff:00:97:6a:e9:dd:1a:
b9:33:32:9b:04:de:d5:70:ca:d4:19:ef:14:62:a9:44:16:8c:
bf:fc:03:f1:9e:18:9b:57:07:b8:bd:9f:bb:37:58:88:3a:88:
06:5d:25:86:c7:78:5b:75:57:36:e5:3a:8d:5c:ef:9d:f9:7e:
b6:82:26:87:5c:02:14:39:52:01:8e:6b:7e:00:8d:76:09:0e:
dc:23:76:f5:59:4d:0d:93:98:ab:b6:23:0f:68:e0:59:da:23:
bd:ed:0c:d2:be:c7:4f:08:88:cc:cb:9d:da:96:a3:eb:04:34:
ca:13:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:54:35 2025 by rpki-client