Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa
File: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (raw, json)
Hash identifier: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=
Subject key identifier: 54:FA:1C:E2:CA:76:6F:42:7C:21:49:81:85:81:51:09:09:EC:3C:3D
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 0196AF11050C7E4DEEF05478AD60C903539B
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa
Signing time: Thu 08 May 2025 08:44:10 +0000
ROA not before: Thu 08 May 2025 08:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.34.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:11:05:0c:7e:4d:ee:f0:54:78:ad:60:c9:03:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: May 8 08:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54fa1ce2ca766f427c2149818581510909ec3c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:10:19:d9:4c:34:84:ec:6a:79:2d:64:8c:
de:65:c2:bf:16:02:a0:8c:6d:ed:4f:25:1d:70:fb:
32:88:f7:c6:01:eb:d6:62:3a:d1:e6:ac:26:a4:48:
16:dd:99:56:04:0b:f5:a4:d8:f0:9f:4d:f1:00:de:
1c:b8:78:65:57:4c:35:b4:30:21:60:f5:ba:34:d2:
07:2e:ed:13:2b:77:ea:c3:67:d6:e4:3b:c1:07:93:
39:89:be:22:50:19:7b:06:54:76:c6:28:c3:78:8b:
15:a5:e3:b6:6e:46:99:07:2d:f8:a9:ea:25:bb:e0:
09:c5:bf:b0:30:b7:77:d7:c0:6a:63:d7:3d:63:9d:
9a:63:e2:92:39:f2:ca:c2:20:2f:98:5f:12:f2:0c:
0c:36:a4:60:79:df:19:64:89:10:c8:1f:f1:e0:c2:
25:88:1d:c8:dd:28:2c:21:eb:84:65:74:05:3f:39:
5e:0a:c0:50:17:76:3b:6c:a1:2b:ce:a3:f4:79:d5:
5d:0f:24:ec:17:a4:f7:a8:64:2d:f9:46:4f:23:b5:
85:13:b3:0b:14:26:a0:8e:2d:24:7c:d3:cb:e9:fb:
2c:1c:a2:d6:34:f7:57:11:25:3e:b9:2c:8b:3c:83:
21:7f:43:2f:f8:03:ea:1a:c4:26:b8:16:5b:5a:cb:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FA:1C:E2:CA:76:6F:42:7C:21:49:81:85:81:51:09:09:EC:3C:3D
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e7:4b:3f:a7:c1:86:22:ae:1d:43:c1:18:eb:99:7a:77:8b:
7f:75:77:8f:24:0f:29:7e:09:a9:47:91:39:29:2c:13:42:2b:
4e:13:76:8b:b3:1e:a9:16:14:85:01:fb:f9:d2:af:f3:40:9e:
81:55:31:be:10:6e:55:4e:03:61:d9:8c:2c:00:e0:46:f6:34:
dc:ca:35:8b:6a:98:b9:c2:34:8d:b2:d3:ce:ae:5d:99:3b:d3:
da:37:d8:5d:96:d6:f9:9d:b7:83:73:e7:48:92:c0:6a:8e:08:
f9:ac:4a:66:e9:87:27:d5:fb:b2:8d:fc:f4:6c:7e:0f:d2:7b:
41:ca:0a:c6:24:d8:94:99:70:c4:c0:60:04:43:5c:23:a2:0f:
63:cc:07:77:23:54:1b:35:c1:d8:10:ae:67:a4:48:e9:c1:d0:
af:4d:8f:2a:8e:44:87:c7:f7:2a:c7:a0:f2:02:a8:1c:cc:61:
5a:50:1f:23:d9:ef:71:06:03:fc:a9:46:f8:e9:b9:25:80:d0:
38:53:22:e0:e8:ee:98:2f:df:1b:fa:e0:4d:6e:f2:46:b4:36:
bb:b4:a5:b5:a2:31:a8:5d:d0:43:fb:10:16:d4:08:06:dd:5f:
df:f7:41:1f:29:74:47:b4:c3:c0:a2:23:e0:eb:69:d1:af:52:
98:6b:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:09:29 2025 by rpki-client