Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/VKWObPFDBc-jGCeYU56YA-6t1Cw.roa
File: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (raw, json)
Hash identifier: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=
Subject key identifier: 54:A5:8E:6C:F1:43:05:CF:A3:18:27:98:53:9E:98:03:EE:AD:D4:2C
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019A48FBF4DF854159355230114154962AEE
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/VKWObPFDBc-jGCeYU56YA-6t1Cw.roa
Signing time: Mon 03 Nov 2025 09:11:03 +0000
ROA not before: Mon 03 Nov 2025 09:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197981
IP address blocks: 103.57.156.0/22 maxlen: 22
176.67.88.0/21 maxlen: 21
185.103.64.0/22 maxlen: 22
185.103.64.0/23 maxlen: 23
2a00:89c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:fb:f4:df:85:41:59:35:52:30:11:41:54:96:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Nov 3 09:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54a58e6cf14305cfa3182798539e9803eeadd42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:bd:f7:9e:77:4d:66:39:20:3c:d5:c1:05:
45:2b:e1:f7:76:a0:64:eb:83:f7:21:85:a6:52:eb:
67:05:af:b1:5f:a5:92:6a:b6:30:1b:c0:24:07:81:
33:c3:ab:88:44:e7:2d:cc:79:d0:fc:86:94:e9:d3:
79:31:68:0b:38:10:51:7f:89:ba:27:0d:5b:dd:9c:
13:78:19:09:d4:b9:d3:cf:6b:10:cd:f7:41:08:a9:
7c:a9:d0:67:fa:2f:fe:36:a8:48:a5:47:c4:f3:86:
66:42:7a:fd:c2:bf:b1:1d:e0:70:c6:75:b7:b3:91:
1c:a9:84:a3:78:aa:5c:62:f0:a7:e3:3a:24:2f:7c:
eb:86:12:4a:8a:cd:91:4e:67:1e:32:db:9f:63:bd:
cb:5f:18:c8:9d:f2:c2:ad:0a:50:a1:69:e7:a3:06:
e5:82:a7:20:2e:be:b9:e7:04:b8:b7:c8:e9:98:db:
73:4f:2b:06:a7:a0:14:6a:76:a7:1c:79:ef:6a:e5:
f5:24:fc:d7:dd:cd:6f:7f:d4:b1:0a:97:33:3a:bf:
03:6c:33:24:d8:bc:c6:73:3c:8e:95:93:09:72:9b:
8d:4d:40:52:39:63:e3:ed:5a:8e:90:5b:ec:22:6e:
87:72:e7:9b:8d:c6:95:f7:3e:77:1b:17:7a:a4:b0:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:8E:6C:F1:43:05:CF:A3:18:27:98:53:9E:98:03:EE:AD:D4:2C
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/VKWObPFDBc-jGCeYU56YA-6t1Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.156.0/22
176.67.88.0/21
185.103.64.0/22
IPv6:
2a00:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:b8:d3:38:85:8f:4d:bd:3a:86:0b:b0:f5:b9:d8:65:c5:c5:
4e:d2:02:c9:55:15:41:bd:30:e5:7a:89:10:b4:74:0e:db:e0:
bf:95:eb:c0:d0:50:24:10:25:bb:d3:88:60:78:d1:e5:f0:86:
47:28:36:f6:23:89:76:8a:6b:15:eb:6e:93:d6:43:b3:1d:c8:
61:ee:23:bc:33:e6:99:42:52:e2:2d:a7:e8:0d:c5:1e:52:f7:
a9:1c:8e:bd:da:35:3d:b7:b9:07:04:7f:c1:cc:49:a5:a5:20:
94:28:d1:2b:5b:0e:a9:33:c3:d2:82:20:78:a4:89:65:f4:ca:
ff:45:30:73:f1:a9:ae:a5:97:7a:0f:d0:bb:49:85:f0:82:38:
80:03:61:5b:d6:9c:c5:3e:8a:f0:be:ee:6c:aa:93:84:4f:37:
4d:76:23:7f:89:d8:62:a4:46:aa:d4:1e:39:72:96:7a:ba:c3:
8f:44:bf:ea:57:4e:36:54:be:a9:ea:54:6a:2f:22:26:89:0f:
2c:ec:70:bd:62:66:08:70:3a:db:27:5d:9f:03:b8:48:0f:a7:
50:15:b1:bf:be:80:23:95:95:5d:82:ce:d9:76:6b:52:d6:fa:
ad:ab:4b:11:4b:4d:62:f6:af:dd:d1:97:19:19:98:6e:8f:73:
e1:19:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:06 2025 by rpki-client