Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/VNwylB5jzhJFsQw7XhMnpKhm9hM.roa
File: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (raw, json)
Hash identifier: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=
Subject key identifier: 54:DC:32:94:1E:63:CE:12:45:B1:0C:3B:5E:13:27:A4:A8:66:F6:13
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019909AB0538534A0B20BA805D6530E0C1D5
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/VNwylB5jzhJFsQw7XhMnpKhm9hM.roa
Signing time: Tue 02 Sep 2025 09:03:46 +0000
ROA not before: Tue 02 Sep 2025 09:03:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44090
IP address blocks: 193.107.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:ab:05:38:53:4a:0b:20:ba:80:5d:65:30:e0:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Sep 2 09:03:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54dc32941e63ce1245b10c3b5e1327a4a866f613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:81:f7:08:13:ff:2d:62:0a:fd:84:75:63:
30:b2:22:36:78:2c:7e:28:09:dc:ab:7e:1c:81:1e:
06:2a:4d:42:b0:83:be:56:70:d3:db:9f:0b:0d:3c:
a4:7c:32:9c:e0:db:a8:eb:db:79:60:8a:58:55:ca:
cf:60:25:bc:a3:2c:be:a3:c4:17:3f:b9:2f:9f:67:
a0:4e:62:d1:97:8d:67:52:5b:ec:cc:fa:86:9a:54:
f9:c2:d4:fb:7b:09:5d:3e:e4:f9:59:20:5d:a9:fb:
a5:8c:e0:2b:ba:c9:c5:47:5f:9c:d2:12:1d:d1:39:
40:06:c2:6e:28:27:da:18:11:75:0a:37:45:49:a4:
03:f7:aa:0c:af:e4:bd:55:87:9f:60:37:f3:cc:cb:
88:2c:5f:41:18:d5:89:2e:00:be:bc:00:e5:ef:45:
40:73:5c:32:b8:34:87:08:25:a5:a0:53:e0:3c:94:
00:7d:41:cb:ce:9c:73:90:51:31:d9:00:36:41:ee:
46:00:a2:4c:f1:2e:ad:2b:15:f0:dc:5b:51:6d:92:
95:0f:bc:42:a2:7c:06:48:29:70:42:ec:8d:ff:c2:
3d:9b:48:1e:72:57:06:24:f9:2d:dc:d0:ce:ab:a0:
7b:b3:c7:bf:f3:aa:f2:fe:d1:dd:f1:f1:10:d8:13:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:32:94:1E:63:CE:12:45:B1:0C:3B:5E:13:27:A4:A8:66:F6:13
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/VNwylB5jzhJFsQw7XhMnpKhm9hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.44.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7e:60:5f:be:9e:37:0a:6c:45:54:25:c0:3d:6d:8d:58:eb:
85:22:25:3d:88:60:27:ab:13:0a:7d:66:e8:31:ce:6c:9e:1a:
89:b3:92:ad:7d:39:26:24:c3:35:f9:94:3a:cb:70:c9:77:13:
c2:96:7c:04:10:4b:fb:fe:29:60:cf:b0:5e:d9:3d:52:69:74:
c7:44:ba:4c:fb:4f:fb:b3:e1:a3:94:ff:a4:26:03:66:75:e2:
91:5e:68:07:68:bd:1a:fa:51:2e:78:2c:77:b6:0f:a3:ac:ba:
69:0a:20:d9:ae:d4:04:b4:7f:21:59:45:9f:b4:79:41:17:b3:
53:a2:68:0c:70:ce:98:d4:b1:84:20:1f:79:d3:ff:3d:10:7f:
91:dc:03:5d:79:48:55:c6:c3:32:d5:b7:f1:41:be:f1:25:c2:
28:8d:be:45:2b:ac:77:86:a4:b0:cf:7e:df:0b:d9:ac:a6:af:
70:8a:72:e4:7a:76:b5:f5:f2:b5:38:8e:0e:1a:7b:55:01:39:
ae:64:d0:54:f6:2b:9f:21:ae:2b:9a:c2:10:a1:cd:86:d2:9e:
ab:91:a7:34:2c:5b:44:6e:32:9b:18:2f:7f:b4:84:66:a3:30:
93:69:bb:47:90:f4:8c:fd:10:b3:ab:67:de:b5:37:0f:14:21:
92:f7:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:04:11 2025 by rpki-client