Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTPKX-p3nvccZG0sirw-yTEXb1k.roa
File: vTPKX-p3nvccZG0sirw-yTEXb1k.roa (raw, json)
Hash identifier: IZ7MivSy4Pbx4KG/aDU6dPuht/4fOtwbpo0bZKRav6w=
Subject key identifier: BD:33:CA:5F:EA:77:9E:F7:1C:64:6D:2C:8A:BC:3E:C9:31:17:6F:59
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01975F37DEE951C434E0A2D34FEC4CF37B5F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTPKX-p3nvccZG0sirw-yTEXb1k.roa
Signing time: Wed 11 Jun 2025 13:39:46 +0000
ROA not before: Wed 11 Jun 2025 13:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41171
IP address blocks: 212.90.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:37:de:e9:51:c4:34:e0:a2:d3:4f:ec:4c:f3:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 11 13:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd33ca5fea779ef71c646d2c8abc3ec931176f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:ab:71:99:e5:15:25:3a:88:d9:d0:f2:8f:
0b:8a:b2:c1:ce:14:4b:93:cd:19:29:de:d6:7d:d6:
59:a7:2c:a3:d1:d7:bb:fa:30:c1:6f:f7:cf:3d:ab:
12:6a:9b:a6:10:1e:a7:1f:cd:28:8d:2f:c2:5d:d6:
02:7f:0b:11:da:a7:eb:d1:cf:d3:45:35:7a:cb:2d:
d5:18:f8:95:5c:21:e2:53:81:ae:13:d9:f3:c6:96:
2b:30:f8:f5:5e:4b:e2:1d:cb:fc:ca:a4:e9:ea:0d:
a8:5a:50:3a:7d:0e:05:ca:c4:c8:a2:75:b1:65:e9:
22:a5:1b:18:d2:7c:11:d2:04:85:24:b7:08:12:18:
a0:2a:59:f6:ca:45:64:26:00:ea:69:06:86:68:20:
8e:70:e9:8b:aa:b3:ce:84:d7:53:85:82:56:70:5f:
c0:5b:6e:07:4d:e1:dc:31:eb:12:cf:90:22:c8:cd:
f4:54:9e:19:b7:27:12:d8:58:4e:bf:20:8e:d6:1c:
6f:e9:e7:bd:cb:bf:0c:e6:2d:5e:d3:86:4b:80:95:
a4:6d:88:9d:be:2d:3d:ad:b3:5a:1f:2b:98:5b:3c:
5b:4b:fc:6d:98:ee:f2:90:ef:bb:cf:0d:76:ef:ff:
fa:76:7d:86:9f:5a:75:f6:9e:f1:dc:6b:1c:7e:58:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:CA:5F:EA:77:9E:F7:1C:64:6D:2C:8A:BC:3E:C9:31:17:6F:59
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTPKX-p3nvccZG0sirw-yTEXb1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f2:8d:d2:6b:26:91:a6:60:af:18:cf:46:d5:ab:b3:d3:5e:
10:08:99:dc:e5:d6:8b:46:2b:6b:61:92:26:38:03:fa:1a:6a:
ed:82:c9:9f:93:90:23:b4:0e:9e:01:e3:06:44:bc:71:73:58:
10:f5:6a:34:4f:49:9b:48:27:fa:cb:47:06:a5:0e:c4:a7:b4:
cb:5b:8c:a9:49:47:cd:50:00:84:78:7f:e0:d0:90:79:cd:95:
77:94:ff:e1:8b:ad:61:e4:12:22:5b:07:cd:d2:d8:50:a4:11:
a3:4f:f4:df:e1:b4:9e:e8:a2:fe:ae:c9:2d:6b:43:1b:34:1c:
94:5a:ab:7e:d6:ff:05:79:bd:8d:a0:7e:ae:a0:9d:46:1f:99:
cc:78:0e:4d:80:08:a3:05:2a:66:da:1b:a9:85:a8:1a:7b:c2:
5b:27:3b:49:53:a9:bd:e9:f3:cb:69:02:7d:8c:7e:ea:7b:ce:
d9:dc:c6:b6:35:71:10:e2:bd:4d:62:7d:b9:cf:27:ca:01:e3:
9c:9d:ba:5e:ad:1a:a7:93:0a:91:89:8c:fd:bf:cf:f7:b8:67:
5e:3f:81:14:17:56:8c:bd:b3:7e:84:02:9a:63:f3:8c:67:85:
a9:73:87:5e:a9:b0:5c:1b:1e:00:67:eb:04:30:35:76:40:f0:
1c:dd:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:48:34 2025 by rpki-client