Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vtkF5xB1D7H9fdDA64y1mC_-PnI.roa
File: vtkF5xB1D7H9fdDA64y1mC_-PnI.roa (raw, json)
Hash identifier: OGKHwlKleDXCssmiFinFxLB6pzcbwPx2Ei0tajdkieQ=
Subject key identifier: BE:D9:05:E7:10:75:0F:B1:FD:7D:D0:C0:EB:8C:B5:98:2F:FE:3E:72
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01992E16BBBA57A1C0C756FCD2DAD472058F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vtkF5xB1D7H9fdDA64y1mC_-PnI.roa
Signing time: Tue 09 Sep 2025 10:47:45 +0000
ROA not before: Tue 09 Sep 2025 10:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 94.184.19.0/24 maxlen: 24
94.184.20.0/24 maxlen: 24
94.184.23.0/24 maxlen: 24
94.184.24.0/24 maxlen: 24
94.184.25.0/24 maxlen: 24
94.184.26.0/24 maxlen: 24
94.184.27.0/24 maxlen: 24
94.184.28.0/24 maxlen: 24
94.184.29.0/24 maxlen: 24
94.184.30.0/24 maxlen: 24
94.184.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:16:bb:ba:57:a1:c0:c7:56:fc:d2:da:d4:72:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 9 10:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed905e710750fb1fd7dd0c0eb8cb5982ffe3e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:36:4e:21:c1:f6:cb:22:69:e1:7a:25:39:d0:
db:1a:7f:e3:57:3d:f7:75:6f:e0:70:50:dc:db:88:
04:b3:25:fc:6b:7b:48:73:51:19:d8:53:43:e7:e7:
d8:2c:e5:02:97:c0:b6:ab:30:3c:9f:09:ea:3c:55:
f1:7b:d2:f5:fd:d9:33:2f:17:e4:94:c8:a3:fc:42:
98:23:3d:f9:50:28:fe:d8:78:59:35:d1:f6:f0:ab:
0c:2d:4c:31:c5:36:e4:81:01:ae:02:6c:37:95:b2:
8b:5d:02:aa:ee:03:e4:f7:98:45:3e:53:86:0e:5f:
09:a2:36:eb:08:a1:31:61:70:c1:eb:bc:dd:da:fa:
7f:bf:13:d0:b8:7a:65:e2:75:43:53:07:a1:a8:e4:
27:b0:ac:d7:f5:85:0e:ad:db:16:09:1c:78:3c:a5:
d7:4e:9a:3a:80:e0:c6:f4:98:14:9e:42:77:64:6e:
85:fc:58:37:97:c4:08:3f:ed:ed:c6:9c:bb:4a:7e:
ec:ec:c2:ba:68:08:3a:18:25:74:66:b4:46:9c:21:
d0:df:5f:d6:ff:28:f6:cb:4b:f8:35:15:8c:58:38:
62:a4:55:65:1c:78:ff:77:59:54:26:f0:7b:20:09:
d3:f6:c7:46:e3:2c:65:89:be:7b:e8:be:91:b5:e8:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:05:E7:10:75:0F:B1:FD:7D:D0:C0:EB:8C:B5:98:2F:FE:3E:72
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vtkF5xB1D7H9fdDA64y1mC_-PnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.19.0-94.184.20.255
94.184.23.0-94.184.31.255
Signature Algorithm: sha256WithRSAEncryption
32:a4:f6:26:69:1b:b9:69:21:24:5c:3f:7e:70:f1:0d:95:dd:
05:54:6a:95:25:71:23:5c:54:1f:ab:e3:00:df:e4:b7:c2:60:
8a:23:e8:fa:a6:cd:9f:1b:60:50:d8:43:9a:8d:a2:c0:d0:5c:
7e:12:6b:42:07:88:1d:5a:77:f0:c6:93:22:35:d0:7b:5b:60:
b6:3f:a3:35:05:54:99:f3:42:7e:92:96:00:54:43:e5:69:7f:
83:0c:cf:c1:e8:03:cb:ab:21:07:d5:e2:76:18:8a:df:c0:2c:
61:d2:71:41:62:02:3c:62:eb:db:86:46:cb:c1:6b:68:62:00:
39:66:e1:1d:45:bb:63:72:cf:38:95:b9:38:69:43:da:11:80:
17:76:ec:bc:a0:ff:23:3d:58:55:ae:dc:ec:12:08:f2:b6:69:
88:d6:60:f1:74:68:3f:35:ff:9e:1e:ad:61:3a:5d:e5:c2:9e:
b6:92:b8:66:fe:ce:71:3f:f8:0b:a7:2d:a3:fa:92:cc:13:2e:
93:a7:de:53:83:45:6a:81:39:4a:b5:2e:72:0c:d6:aa:c2:ad:
88:83:25:2a:b0:55:3a:15:d4:18:00:56:31:51:b3:d9:00:73:
1b:83:48:b4:25:a8:6e:1d:06:c5:71:02:ac:0e:a2:03:04:26:
db:3b:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:27:15 2025 by rpki-client