Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa
File: VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa (raw, json)
Hash identifier: 1R0P6gMaK3bQlWdyGdOcpLYDnNLujqwH2yF60BoEkOc=
Subject key identifier: 55:B3:B5:17:79:97:01:A2:3E:85:89:A5:40:BB:C1:3D:79:F0:28:E3
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E24FE86CD82296CBBB12D16319C05361
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa
Signing time: Mon 25 Aug 2025 17:39:04 +0000
ROA not before: Mon 25 Aug 2025 17:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38195
IP address blocks: 85.203.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:4f:e8:6c:d8:22:96:cb:bb:12:d1:63:19:c0:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55b3b517799701a23e8589a540bbc13d79f028e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:3d:88:e6:55:99:15:9f:51:c4:63:8c:bc:
e0:20:e0:f8:87:bd:95:84:1f:5a:b9:a6:73:32:d3:
27:d7:a6:00:34:e9:d7:61:0d:59:4b:7a:57:44:e9:
60:a6:7d:0f:f3:3f:3a:99:17:02:9e:01:4a:9b:21:
c9:f6:c3:8a:6f:98:d4:20:61:88:bc:cd:83:f5:4f:
6c:ac:5a:52:e0:41:76:45:d1:1e:33:c5:d1:7c:2a:
74:ef:3c:91:df:d3:b7:61:58:e4:14:42:f6:93:70:
11:c3:21:a7:08:c8:c0:98:e2:19:e0:dd:f1:bd:d8:
3e:8d:7f:1c:20:93:09:e5:5b:1e:02:22:0d:71:76:
52:e2:b3:2f:8e:dd:5d:3c:40:07:49:ad:57:fb:02:
e2:62:2e:87:d1:fb:3a:59:06:c1:0f:99:12:3e:07:
3e:d8:04:ac:fc:e9:01:4c:34:d0:88:cb:42:3a:8f:
07:ac:1c:0e:ab:4e:96:37:28:83:f9:6f:01:c0:c4:
3a:f6:fd:d5:7c:dc:de:ca:da:a6:7b:4b:15:fb:4c:
6e:61:7f:7d:eb:c7:93:2c:ca:bf:d4:05:56:51:29:
8a:be:ce:02:c7:31:cd:96:c5:70:e9:55:0e:02:94:
55:b0:b0:c5:04:aa:c3:f4:34:04:d4:50:21:6b:41:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:B5:17:79:97:01:A2:3E:85:89:A5:40:BB:C1:3D:79:F0:28:E3
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:8a:ce:cb:f6:23:29:e5:13:9d:24:20:b4:14:02:cf:0f:2d:
9d:d8:df:c1:ec:c7:96:4f:8e:6b:18:fd:48:c9:e1:7a:21:f2:
ed:6d:0a:79:c1:13:b7:6d:f3:a8:f1:7e:b0:43:30:df:ae:d5:
26:b8:73:07:3b:e5:02:1f:94:34:03:6e:b4:36:ca:a6:28:73:
18:2f:bf:3b:ef:e5:ec:42:4f:d2:73:5b:ad:1e:ba:34:40:04:
b0:88:97:e2:8b:d1:75:f9:72:d5:e9:91:8a:bc:d9:9b:6f:31:
b4:80:e6:32:e3:41:37:70:ff:f5:e6:c8:1f:b5:1a:1f:0a:a6:
3e:a9:e8:fb:6e:ac:a4:df:3f:c3:06:33:c0:a7:0e:a8:4e:22:
bc:8b:40:de:8f:e9:57:23:fc:ac:43:12:da:34:51:33:40:2a:
f6:32:01:56:70:9a:d2:71:bf:31:0e:1a:d1:1a:be:6e:59:c5:
5c:81:32:8e:cb:b2:18:89:0c:f2:8a:46:0a:01:76:15:aa:14:
1e:a6:97:eb:73:95:ef:46:a6:77:68:fa:f4:b1:98:75:6a:b2:
c0:43:06:98:0f:97:c9:cf:30:7e:f0:3a:d1:72:53:40:61:47:
18:52:84:84:25:9d:ce:6f:5d:4a:ee:19:5e:18:97:fc:61:bf:
12:e7:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:35:41 2025 by rpki-client