Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/VQlcAscFdh0J4xPTNEltNmOm0pM.roa
File: VQlcAscFdh0J4xPTNEltNmOm0pM.roa (raw, json)
Hash identifier: FpJBUNA/PxvqCTcDhgg5jBSXRUYz8a5StP5dcgti0hc=
Subject key identifier: 55:09:5C:02:C7:05:76:1D:09:E3:13:D3:34:49:6D:36:63:A6:D2:93
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019A16AB66FC85051679387E7F55378BB7E9
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/VQlcAscFdh0J4xPTNEltNmOm0pM.roa
Signing time: Fri 24 Oct 2025 14:42:02 +0000
ROA not before: Fri 24 Oct 2025 14:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/20 maxlen: 20
31.44.44.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.22.0/24 maxlen: 24
46.21.29.0/24 maxlen: 24
185.155.176.0/22 maxlen: 22
185.155.184.0/23 maxlen: 23
193.222.104.0/23 maxlen: 23
193.222.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:ab:66:fc:85:05:16:79:38:7e:7f:55:37:8b:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Oct 24 14:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55095c02c705761d09e313d334496d3663a6d293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:66:82:76:cf:65:a1:44:97:d5:67:d4:c3:
7f:eb:cd:5c:38:e4:81:8f:a8:c7:16:7e:b0:96:f5:
46:0e:24:5f:cc:0a:e8:81:ec:aa:48:35:f9:eb:e3:
27:31:7d:db:10:96:82:58:65:93:2b:c7:d8:3d:f7:
d7:90:e7:5b:4b:ed:b2:a3:97:95:9a:ba:31:8a:27:
d3:c0:54:c2:4f:d7:f7:3f:82:67:cf:e6:95:35:27:
09:46:b0:5b:09:32:2a:37:ef:73:1f:64:1c:1d:47:
f2:c7:e7:79:c3:f9:5a:3b:13:d2:6d:a5:28:95:88:
24:01:d4:d5:00:03:bb:ef:83:20:54:e6:b5:9e:0c:
b9:51:f4:81:a2:ab:a3:bb:b4:32:8d:4f:75:2b:79:
98:0e:2b:80:85:61:71:3d:04:97:f3:97:51:11:bd:
e0:db:5d:19:dc:0a:ec:db:12:b1:c7:5e:84:56:17:
40:fe:6a:c3:7e:dd:5e:c9:a6:ed:13:df:a8:77:8e:
b5:3a:33:2f:af:8c:9e:43:ae:b4:f7:43:73:2e:5f:
7a:b2:08:cd:75:0d:71:69:5c:14:99:78:c1:d4:74:
76:e8:14:70:9c:40:cf:6b:f3:ff:98:d9:2b:f6:44:
00:0f:0f:23:94:a9:7d:41:44:18:ec:4d:8c:2e:67:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:5C:02:C7:05:76:1D:09:E3:13:D3:34:49:6D:36:63:A6:D2:93
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/VQlcAscFdh0J4xPTNEltNmOm0pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.22.0/24
46.21.29.0/24
185.155.176.0/22
185.155.184.0/23
193.222.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:4a:6b:9c:7b:67:50:49:b5:d9:65:f6:21:85:c3:f6:0f:c2:
6e:2b:17:61:d5:4e:0a:7a:e0:e8:2e:20:09:a0:fb:48:dd:6a:
64:8c:01:05:a2:52:f8:f8:a4:23:ea:86:6d:dc:1d:65:e2:19:
3d:e2:64:4d:ff:4f:30:d4:f1:69:00:69:9f:d7:43:12:f6:83:
a4:f3:b0:70:19:83:48:eb:a2:8a:af:ba:59:c7:4c:b2:e5:bd:
f3:11:3e:8c:e2:c1:da:d4:f2:cb:68:12:fa:cd:f8:bd:17:be:
a6:92:54:91:f4:89:9c:87:38:05:37:02:6d:5e:7f:98:84:6c:
e9:66:fa:a9:4f:f2:b0:2d:04:23:26:2f:07:e9:c8:b4:97:e8:
61:5d:2f:93:83:cc:4f:79:43:9a:15:90:b8:9c:58:7e:a2:39:
8d:fa:c7:0c:da:22:11:70:27:b3:8d:cb:bc:a9:4d:17:ce:82:
ea:9a:41:99:4c:6a:ff:d8:89:a8:ca:d4:b1:b2:5b:63:dc:4e:
ef:7a:17:7a:81:08:6f:5a:d6:cf:df:d5:30:a7:3e:6b:d9:90:
8d:27:5a:4f:cf:22:4a:f0:68:53:b1:e6:18:63:c1:24:62:03:
c9:7b:0c:3b:43:16:38:ff:3f:de:54:c4:d5:d2:72:2f:10:5a:
24:79:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:25:08 2025 by rpki-client