Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VlWoqosjKYIXxMQADkBpuG9YUtQ.roa
File: VlWoqosjKYIXxMQADkBpuG9YUtQ.roa (raw, json)
Hash identifier: dDGrrp1fe52M+c0OJup6cBDOOnOctj9p3znTmL3+SjU=
Subject key identifier: 56:55:A8:AA:8B:23:29:82:17:C4:C4:00:0E:40:69:B8:6F:58:52:D4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0198F61484EBC6E5DB289E814666063512BB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VlWoqosjKYIXxMQADkBpuG9YUtQ.roa
Signing time: Fri 29 Aug 2025 13:46:36 +0000
ROA not before: Fri 29 Aug 2025 13:46:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:1522::/48 maxlen: 48
2a12:bec4:152f::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
2a12:bec4:1654::/48 maxlen: 48
2a12:bec4:1655::/48 maxlen: 48
2a12:bec4:1656::/48 maxlen: 48
2a12:bec4:1657::/48 maxlen: 48
2a12:bec4:1658::/48 maxlen: 48
2a12:bec4:1659::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:14:84:eb:c6:e5:db:28:9e:81:46:66:06:35:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 29 13:46:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5655a8aa8b23298217c4c4000e4069b86f5852d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:5c:fc:e4:27:b6:ab:73:09:5e:6a:ca:6f:
6c:57:1d:5a:40:fd:19:94:e3:db:82:45:24:1c:65:
40:e5:10:20:d7:7f:8c:2f:de:55:d8:5a:6a:e9:ec:
1f:55:54:a7:53:21:e2:2a:ce:c4:f0:0e:36:7d:75:
c2:21:d2:51:16:ec:94:6b:7b:23:15:c8:e4:a3:a9:
0a:ac:9c:77:d4:24:4d:ea:0f:bd:30:29:e1:08:b9:
d7:92:a4:0a:4f:fb:5b:80:e1:43:8f:99:91:d7:6e:
b2:a2:93:bb:70:2b:09:20:e1:db:9e:8b:b5:b3:ab:
22:54:74:9a:ac:1b:09:2e:e3:88:87:c7:f7:2e:51:
3e:d4:12:c9:57:46:88:26:0d:13:7b:df:ef:31:83:
49:d2:92:90:82:f3:5b:04:1c:bb:0b:0f:81:9e:e9:
7e:37:c7:10:86:49:06:9c:bb:e4:b0:27:69:31:53:
75:40:1b:25:ac:af:02:2e:f3:b5:20:1e:14:33:86:
0e:23:78:75:51:60:43:71:20:4e:af:27:6e:fb:84:
1c:7b:81:2e:c7:fc:c0:33:6e:37:ce:33:53:8b:e6:
b9:0e:37:e0:1b:7e:1a:16:8b:44:3c:c3:75:4a:4e:
71:e5:24:c2:a4:0a:c3:b2:1e:c2:b5:f5:2e:92:2a:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:A8:AA:8B:23:29:82:17:C4:C4:00:0E:40:69:B8:6F:58:52:D4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VlWoqosjKYIXxMQADkBpuG9YUtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::-2a12:bec4:1522:ffff:ffff:ffff:ffff:ffff
2a12:bec4:152f::/48
2a12:bec4:1651::-2a12:bec4:1659:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:fe:10:29:4a:41:db:cb:88:a9:7d:79:1f:5b:fa:bc:b3:9a:
41:63:11:d4:c1:ce:2e:4c:fc:76:45:38:0f:eb:a2:15:05:99:
83:f3:28:e8:86:59:0c:21:cf:29:27:19:8b:96:73:d4:94:74:
ee:d4:91:fd:f4:9d:89:c6:77:d9:f3:dc:aa:a9:06:7e:1d:b0:
00:26:da:52:9c:a8:e5:5a:ef:59:3d:54:59:4b:5c:0e:24:dc:
08:88:f4:ea:89:3e:90:27:30:1a:2e:30:5b:b3:c5:08:ac:9a:
be:fb:a5:52:a3:fd:70:ff:f8:3e:d7:e3:99:fb:93:04:73:aa:
af:7c:d9:69:ce:36:c7:c2:01:09:6a:bd:2d:78:a0:09:5f:73:
29:c1:3d:0f:56:ef:19:99:38:51:6d:e5:65:f8:f4:18:10:d7:
29:27:79:2a:b7:96:26:b0:79:ad:15:27:f0:8d:d2:3f:2e:7a:
61:69:00:1a:07:a2:bf:50:7b:6f:88:11:a2:bb:68:32:7a:0d:
71:6b:00:69:51:1f:3f:08:10:8d:2b:01:33:9e:8e:70:a1:73:
69:eb:18:0f:fd:58:cc:63:b0:cb:bb:f4:1f:e5:2c:66:3f:10:
4c:81:fc:41:4f:2e:e6:93:fb:c8:69:4e:27:1d:b7:a3:f7:fd:
e4:19:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:14:21 2025 by rpki-client