Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VibhLOpGeI3keB5OfPl7So1Jn_4.roa
File: VibhLOpGeI3keB5OfPl7So1Jn_4.roa (raw, json)
Hash identifier: DO7NV9hwoqZj0udY2bZvHJpMD1KP8LzDgt2whZjtJcA=
Subject key identifier: 56:26:E1:2C:EA:46:78:8D:E4:78:1E:4E:7C:F9:7B:4A:8D:49:9F:FE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01990C76CD69E0EE22084EA4474DEB21742A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VibhLOpGeI3keB5OfPl7So1Jn_4.roa
Signing time: Tue 02 Sep 2025 22:05:36 +0000
ROA not before: Tue 02 Sep 2025 22:05:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 64.188.91.0/24 maxlen: 24
144.31.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:76:cd:69:e0:ee:22:08:4e:a4:47:4d:eb:21:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 2 22:05:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5626e12cea46788de4781e4e7cf97b4a8d499ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:33:ff:07:b4:e1:dc:30:ba:14:55:2e:ca:
18:ca:f2:6d:23:49:b6:62:00:22:ff:cf:80:d3:ec:
89:fe:2e:3b:16:db:2c:c7:51:4b:0d:f3:a5:db:da:
6f:e7:1f:10:ab:b6:ae:93:43:29:4f:e3:7f:91:50:
98:dc:8a:be:db:98:dd:fc:a5:f4:4c:c9:8f:24:69:
58:5e:16:91:f5:f5:12:35:40:86:f5:b4:1b:ca:13:
03:54:ea:d7:62:37:a2:9c:bd:32:7c:b6:5b:7c:0b:
12:a6:49:35:c0:3a:80:90:8d:85:29:37:b8:08:e4:
b6:d8:3b:64:3a:b0:63:7e:3c:ee:13:79:78:9b:6e:
f7:5b:25:a2:3b:50:43:9a:ae:87:24:e1:b3:73:e2:
3a:81:95:e3:d1:8a:25:cf:50:5f:b2:96:57:13:fe:
98:37:48:7f:5b:2a:4b:1d:e1:68:f0:e0:5d:b1:56:
19:69:50:6b:47:50:5a:ff:3f:49:5e:e0:28:c2:38:
57:1c:31:fe:3d:09:8b:c8:73:ec:f5:1a:19:c4:03:
f5:6b:5b:14:fe:2b:96:9e:30:24:2b:66:cc:39:62:
a6:6f:68:88:2f:cd:fc:9a:e4:fd:07:a3:bc:4b:fb:
29:72:e2:2f:83:a7:b8:e5:d7:f2:dc:e2:bc:32:14:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:E1:2C:EA:46:78:8D:E4:78:1E:4E:7C:F9:7B:4A:8D:49:9F:FE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VibhLOpGeI3keB5OfPl7So1Jn_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.91.0/24
144.31.0.0/21
Signature Algorithm: sha256WithRSAEncryption
98:6e:bf:c2:02:1f:04:e8:30:f2:67:1c:24:71:ec:0b:81:c4:
fc:f3:93:fd:50:c6:98:bf:65:de:09:cf:97:30:4f:c4:92:9f:
79:2c:5e:ac:6d:08:88:2b:7c:14:91:88:7d:6e:52:81:f7:d2:
e7:74:c3:e5:91:b8:0f:5b:01:7e:fc:8f:cb:34:5c:81:ee:75:
e6:9e:cf:4a:c3:b5:2b:f5:f7:ed:37:03:f9:62:cf:27:6f:44:
da:8f:98:36:59:1d:12:d1:5f:db:93:c9:ce:db:21:ca:a4:f5:
c7:5f:22:d7:b0:67:52:83:f4:67:c6:bc:0f:89:0c:07:5c:82:
91:9c:3d:42:21:4f:47:e8:2d:5a:71:fe:39:01:b2:ed:d7:4e:
32:22:a5:0c:b1:d1:09:9b:3c:ea:04:75:f5:5a:a6:2f:a8:7b:
f3:32:3f:ff:3b:61:58:a3:c2:7f:19:cf:ce:d7:e6:38:3a:4a:
37:27:c0:a8:95:ee:23:d5:8b:81:a0:92:3f:d0:d6:f9:21:02:
f6:f2:fb:b9:e5:85:57:3a:9d:c0:9b:f7:dd:34:68:4a:c4:01:
57:9d:e9:bb:b8:59:4a:4b:9e:38:87:a6:b9:5d:f1:d6:da:62:
91:f8:53:1b:a9:84:47:77:36:99:91:7f:61:77:10:b7:8c:2f:
51:5f:e8:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkMds1p4O4iCE6kR03rIXQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwOTAyMjIwNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjI2ZTEyY2VhNDY3ODhkZTQ3ODFlNGU3Y2Y5N2I0YThkNDk5ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Uz/we04dwwuhRVLsoYyvJtI0m2
YgAi/8+A0+yJ/i47Ftssx1FLDfOl29pv5x8Qq7auk0MpT+N/kVCY3Iq+25jd/KX0
TMmPJGlYXhaR9fUSNUCG9bQbyhMDVOrXYjeinL0yfLZbfAsSpkk1wDqAkI2FKTe4
COS22DtkOrBjfjzuE3l4m273WyWiO1BDmq6HJOGzc+I6gZXj0Yolz1BfspZXE/6Y
N0h/WypLHeFo8OBdsVYZaVBrR1Ba/z9JXuAowjhXHDH+PQmLyHPs9RoZxAP1a1sU
/iuWnjAkK2bMOWKmb2iIL838muT9B6O8S/spcuIvg6e45dfy3OK8MhSyVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFYm4SzqRniN5HgeTnz5e0qNSZ/+MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVmliaExPcEdlSTNrZUI1T2ZQbDdTbzFKbl80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQLxbAwQD
kB8AMA0GCSqGSIb3DQEBCwUAA4IBAQCYbr/CAh8E6DDyZxwkcewLgcT885P9UMaY
v2XeCc+XME/Ekp95LF6sbQiIK3wUkYh9blKB99LndMPlkbgPWwF+/I/LNFyB7nXm
ns9Kw7Ur9fftNwP5Ys8nb0Taj5g2WR0S0V/bk8nO2yHKpPXHXyLXsGdSg/RnxrwP
iQwHXIKRnD1CIU9H6C1acf45AbLt104yIqUMsdEJmzzqBHX1WqYvqHvzMj//O2FY
o8J/Gc/O1+Y4Oko3J8Cole4j1YuBoJI/0Nb5IQL28vu55YVXOp3Am/fdNGhKxAFX
nem7uFlKS544h6a5XfHW2mKR+FMbqYRHdzaZkX9hdxC3jC9RX+gt
-----END CERTIFICATE-----
Generated at Fri Sep 5 22:06:15 2025 by rpki-client