Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa
File: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (raw, json)
Hash identifier: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=
Subject key identifier: 55:0E:C9:79:5F:ED:B2:48:DF:A5:15:5D:B2:BB:35:BF:96:0A:91:25
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0197D6C32430CF1A9DB5EF0217C56AB359C7
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa
Signing time: Fri 04 Jul 2025 18:46:42 +0000
ROA not before: Fri 04 Jul 2025 18:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:c3:24:30:cf:1a:9d:b5:ef:02:17:c5:6a:b3:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jul 4 18:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=550ec9795fedb248dfa5155db2bb35bf960a9125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:71:a8:4d:6b:2e:cd:83:fe:71:c5:e7:61:
2a:14:55:10:81:00:77:4e:98:22:c4:43:37:3e:b9:
59:55:af:8f:3b:8c:fa:22:37:8f:ea:fa:37:e7:0c:
41:5b:48:fa:94:5f:66:12:45:38:f7:55:43:2d:5e:
f3:37:fb:ce:dd:4e:bc:b0:ef:dc:ef:69:3a:de:04:
5f:f4:7b:a0:9f:2b:d3:3d:70:c3:16:12:f4:6f:9f:
dc:3d:d8:f6:63:3c:90:7a:f7:c3:44:7c:91:fd:20:
7c:a6:6b:ac:de:0a:91:c1:87:35:e5:66:e7:d4:9e:
c2:f2:11:59:0c:19:7c:a4:4b:58:b7:6f:f7:31:cf:
85:bd:f9:12:98:e4:54:94:71:d2:b2:94:73:8a:63:
dc:7f:56:63:a6:32:38:d3:8f:40:d7:3a:16:02:96:
17:4b:62:0e:f9:9d:d2:5f:05:e6:ff:9a:fb:a0:40:
a8:42:2c:ac:fa:e0:0a:5b:49:54:e1:5a:93:98:20:
5f:2c:a3:35:02:f4:b0:39:18:c7:3c:25:37:ff:c5:
59:4a:2a:94:6c:82:08:05:ac:7b:ac:cd:6f:06:67:
ce:e7:bf:f4:a5:3a:05:66:e5:7f:77:50:b4:7c:0c:
1d:fa:39:99:77:db:b8:f6:d0:fc:88:f5:ce:0a:d4:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0E:C9:79:5F:ED:B2:48:DF:A5:15:5D:B2:BB:35:BF:96:0A:91:25
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:2f:a3:6a:85:69:8d:a2:a9:0e:c5:0b:1f:8a:00:93:6b:f5:
a6:bf:b5:73:2f:8f:c1:79:b5:99:bf:1a:54:01:9d:ab:06:57:
8a:0d:7a:8e:dd:e6:ef:04:d2:36:52:f4:4a:67:50:0c:0c:89:
0d:24:25:a1:bf:15:cd:43:ac:ef:69:99:86:ee:56:fe:29:71:
86:5a:9e:88:09:94:a0:21:53:0f:d5:f0:f6:ea:34:4c:1c:0a:
32:f3:1b:89:f6:16:4f:13:96:d2:81:a7:ce:f2:43:10:de:6c:
db:bd:85:20:9f:68:fd:d9:8c:af:16:35:79:16:4c:75:88:86:
da:81:b0:bb:c4:07:2a:3a:dd:d9:82:95:e3:e7:6a:b4:b1:7e:
40:85:c7:c3:e3:81:a8:30:e7:ac:0b:8a:85:26:75:37:b7:19:
b0:d3:ff:3a:c3:84:84:ee:7c:2b:78:a3:17:ae:99:0c:77:53:
c8:a4:7b:32:36:de:ba:73:5e:58:dd:0e:a9:64:f6:9e:76:c6:
cf:14:aa:ce:3c:3c:e6:ad:ec:e7:97:91:15:fb:fa:9c:2d:81:
32:e3:77:5a:be:59:ab:2e:a0:81:4a:84:95:a4:e2:75:d6:9a:
04:3e:f0:b8:13:7b:73:4a:ff:df:24:a0:db:57:e7:c2:96:2e:
af:10:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:49 2025 by rpki-client