Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/m3PogkJItz_iNaq0_EdnA6-ldI4.roa
File: m3PogkJItz_iNaq0_EdnA6-ldI4.roa (raw, json)
Hash identifier: nYagGPxBVRS3j7ztvVbYe4dLyrJG3Tb3hiHq/vtvQQo=
Subject key identifier: 9B:73:E8:82:42:48:B7:3F:E2:35:AA:B4:FC:47:67:03:AF:A5:74:8E
Certificate issuer: /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial: 01974A310C18A24C14CDB98BF5177E8C0BDB
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/m3PogkJItz_iNaq0_EdnA6-ldI4.roa
Signing time: Sat 07 Jun 2025 11:40:17 +0000
ROA not before: Sat 07 Jun 2025 11:40:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50943
IP address blocks: 194.169.216.0/24 maxlen: 24
2001:678:1070::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:31:0c:18:a2:4c:14:cd:b9:8b:f5:17:7e:8c:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
Validity
Not Before: Jun 7 11:40:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b73e8824248b73fe235aab4fc476703afa5748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:a8:c1:7e:5c:e5:30:54:0c:95:f4:9d:03:
59:4b:30:54:71:32:8a:f5:ce:4a:d9:fe:dc:65:99:
6c:1e:ec:dc:f9:fe:32:4c:54:c7:b1:c6:32:86:91:
78:f7:c2:d8:5e:f7:a6:69:20:7c:4e:c4:5d:ad:a0:
31:36:79:3c:75:f6:e9:c0:3a:d1:65:80:05:67:1e:
c3:f2:0b:d9:5f:bd:ee:5a:78:0d:6c:24:31:fc:e7:
46:08:4a:13:f7:0c:01:e9:93:41:d0:dc:46:a1:62:
ad:d6:64:6c:f1:01:dd:67:8d:f6:16:cd:35:c0:e9:
dd:4d:da:5e:cd:76:ce:7a:e4:c1:eb:ec:32:2d:eb:
ca:86:e0:45:9f:ea:13:f3:c5:30:fb:5f:56:84:cb:
44:81:04:47:e7:b6:fd:af:e9:f0:a7:db:c0:4d:07:
06:50:f6:e9:f1:06:03:2b:dd:98:ea:ab:7a:22:a6:
ca:6f:d2:1e:b6:00:86:0d:25:38:d6:d6:33:33:b9:
de:a7:a8:60:93:24:19:f2:88:98:cb:db:65:93:16:
ba:f0:a4:97:d1:a3:a3:c0:6f:e6:c2:28:fb:f9:3e:
f6:2a:41:83:45:29:ce:38:b3:0e:ff:5b:6c:65:a5:
05:be:03:d7:37:5f:ee:a8:50:bb:89:ec:dc:b9:60:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:E8:82:42:48:B7:3F:E2:35:AA:B4:FC:47:67:03:AF:A5:74:8E
X509v3 Authority Key Identifier:
keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/m3PogkJItz_iNaq0_EdnA6-ldI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.216.0/24
IPv6:
2001:678:1070::/48
Signature Algorithm: sha256WithRSAEncryption
8d:b7:cd:43:76:45:30:73:eb:3c:92:9b:a0:fb:ac:cc:c0:b6:
9d:d3:a5:dc:4f:31:cb:3e:02:67:e0:ef:9a:da:9e:e9:41:6d:
31:bf:e9:d3:30:de:1d:6d:d3:00:fa:0d:8f:01:f4:0f:c7:44:
f1:ff:29:b8:66:6f:ca:3c:39:f2:ee:a3:33:86:be:da:7f:f2:
1f:47:2c:7b:26:2f:e5:a6:45:34:7d:93:07:0f:23:6c:05:e1:
06:3d:24:52:87:ac:b7:24:f4:71:f6:af:86:a2:65:9f:d5:6a:
8a:c0:ec:a3:04:32:4c:a0:69:fe:f2:00:2d:fa:0d:e4:6c:1c:
d7:1c:6d:3c:4e:b8:5b:64:80:ee:99:3b:4a:10:0a:f9:f0:c4:
88:fd:f2:71:31:99:c0:86:c5:ee:5b:52:f6:0e:9c:17:2e:bb:
70:c1:d8:cb:51:32:9f:e4:1b:f8:27:7e:f0:90:11:0d:ab:e9:
b1:10:11:6d:88:49:9e:9b:43:ef:80:ba:ef:a8:14:7d:32:f1:
a6:0e:55:6b:ec:d4:0f:94:39:d6:bd:79:a6:15:cd:bd:63:1a:
17:db:4b:e5:f1:c6:08:8a:ce:b6:80:49:9f:8b:9b:26:fd:4b:
89:2b:9f:a7:b8:9c:ec:07:4f:cf:63:91:cf:91:a3:41:99:fd:
bc:fa:f8:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZdKMQwYokwUzbmL9Rd+jAvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmZiYTJjNjIwYzE4NTNkOWFkNDc1YTA1MGJlMjE3MTcx
OGI2NjIwHhcNMjUwNjA3MTE0MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjczZTg4MjQyNDhiNzNmZTIzNWFhYjRmYzQ3NjcwM2FmYTU3NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCeowX5c5TBUDJX0nQNZSzBUcTKK
9c5K2f7cZZlsHuzc+f4yTFTHscYyhpF498LYXvemaSB8TsRdraAxNnk8dfbpwDrR
ZYAFZx7D8gvZX73uWngNbCQx/OdGCEoT9wwB6ZNB0NxGoWKt1mRs8QHdZ432Fs01
wOndTdpezXbOeuTB6+wyLevKhuBFn+oT88Uw+19WhMtEgQRH57b9r+nwp9vATQcG
UPbp8QYDK92Y6qt6IqbKb9IetgCGDSU41tYzM7nep6hgkyQZ8oiYy9tlkxa68KSX
0aOjwG/mwij7+T72KkGDRSnOOLMO/1tsZaUFvgPXN1/uqFC7iezcuWAh7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJtz6IJCSLc/4jWqtPxHZwOvpXSOMB8GA1UdIwQY
MBaAFFT/uixiDBhT2a1HWgUL4hcXGLZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMt
Y2QzYWNjMTA2NWM3LzEvbTNQb2drSkl0el9pTmFxMF9FZG5BNi1sZEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMtY2QzYWNjMTA2NWM3
LzEvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwqnYMA8E
AgACMAkDBwAgAQZ4EHAwDQYJKoZIhvcNAQELBQADggEBAI23zUN2RTBz6zySm6D7
rMzAtp3TpdxPMcs+Amfg75ranulBbTG/6dMw3h1t0wD6DY8B9A/HRPH/Kbhmb8o8
OfLuozOGvtp/8h9HLHsmL+WmRTR9kwcPI2wF4QY9JFKHrLck9HH2r4aiZZ/VaorA
7KMEMkygaf7yAC36DeRsHNccbTxOuFtkgO6ZO0oQCvnwxIj98nExmcCGxe5bUvYO
nBcuu3DB2MtRMp/kG/gnfvCQEQ2r6bEQEW2ISZ6bQ++Auu+oFH0y8aYOVWvs1A+U
Oda9eaYVzb1jGhfbS+XxxgiKzraASZ+Lmyb9S4krn6e4nOwHT89jkc+Ro0GZ/bz6
+CA=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:05 2025 by rpki-client