Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/VqfndgI1WXWYkkNQ7P51RtzLV7s.roa
File: VqfndgI1WXWYkkNQ7P51RtzLV7s.roa (raw, json)
Hash identifier: Tf8vSneLEZ7pp74+YG36uAKrUxWg7jfHCnPEuoLOpSw=
Subject key identifier: 56:A7:E7:76:02:35:59:75:98:92:43:50:EC:FE:75:46:DC:CB:57:BB
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019A21B3CDCFA453CA3CC86358A5A2EFAFCD
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/VqfndgI1WXWYkkNQ7P51RtzLV7s.roa
Signing time: Sun 26 Oct 2025 18:07:03 +0000
ROA not before: Sun 26 Oct 2025 18:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214196
IP address blocks: 83.142.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:b3:cd:cf:a4:53:ca:3c:c8:63:58:a5:a2:ef:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 26 18:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56a7e7760235597598924350ecfe7546dccb57bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:ef:72:0a:ab:7f:3a:ab:07:25:d6:65:ce:
a3:8e:a4:9f:52:33:82:1f:8f:41:98:19:c8:fc:84:
de:4a:dd:bd:6c:a1:06:28:2c:91:b9:ab:e6:e6:39:
14:6a:a9:d6:a5:9d:3f:15:15:ab:3b:cb:5c:f5:b3:
03:7d:71:31:0f:6c:39:63:51:ec:22:00:93:05:50:
2a:7d:5a:f8:be:09:ab:87:82:5b:2d:19:62:4a:b5:
3a:71:9d:16:e6:79:e1:47:ef:a3:11:b4:ea:69:aa:
b1:68:f8:66:7e:e5:49:fc:7f:72:ae:25:85:56:bb:
a6:0d:92:2b:66:2f:57:66:71:9c:23:ad:d1:2c:e1:
03:5f:0f:e5:7d:5c:7c:66:ac:29:ec:24:b8:dd:f8:
cb:84:6f:d4:23:5e:ae:6f:c4:a6:56:f7:e5:a5:d3:
ed:1c:90:b8:ab:9b:b7:29:e0:56:9b:81:22:cf:5c:
dc:87:14:2c:03:a8:d3:b5:ff:d0:58:27:19:b3:aa:
12:5b:59:42:03:93:99:f2:fc:de:d8:5e:fa:f6:29:
02:cb:d5:f6:4b:ec:b4:4e:a0:9b:08:e8:15:c9:d6:
af:0c:10:5d:45:40:25:48:81:2b:f5:ce:05:70:f3:
8f:2d:24:75:98:51:9f:2c:cd:79:88:e8:46:ae:ad:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A7:E7:76:02:35:59:75:98:92:43:50:EC:FE:75:46:DC:CB:57:BB
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/VqfndgI1WXWYkkNQ7P51RtzLV7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.214.0/24
Signature Algorithm: sha256WithRSAEncryption
12:84:86:ac:f4:a2:f7:de:76:ed:ec:7c:24:c4:10:d9:a4:21:
77:02:7d:8a:e7:5d:41:3e:49:7a:73:a5:18:54:a3:8a:89:7c:
8a:7e:4e:5f:83:81:50:2f:ff:23:e6:1d:a8:e3:40:8f:50:f4:
7d:be:91:18:c1:72:ef:66:4b:a8:47:4e:2a:87:85:2e:46:27:
72:9d:a6:d5:83:40:8e:88:d4:91:da:2a:50:57:e5:85:c2:0f:
cf:43:dd:a7:30:28:3c:74:45:7d:60:03:22:db:d4:68:8e:a7:
29:22:83:ef:b1:5a:1a:f1:e2:38:42:4f:d4:d9:29:cb:28:6a:
ec:b9:86:73:d9:18:ed:70:84:bc:1b:54:f6:4c:11:08:e8:86:
c6:13:80:3d:a0:4c:1c:bf:7c:8d:a5:cb:7c:86:87:3a:e1:6c:
60:21:a2:f2:e4:26:c9:cc:82:90:7f:99:40:d9:a9:f8:45:ae:
15:eb:cf:c1:5c:fa:b9:af:06:19:3a:27:b2:3d:4b:10:21:5f:
b3:61:04:75:cd:f3:33:d3:ab:7f:49:6d:be:64:7d:9d:e7:bf:
af:cf:3f:b8:6a:ad:f9:a8:b5:b8:40:2e:2d:8a:8d:83:24:29:
f8:98:d4:dd:de:7b:62:92:f6:38:43:f3:27:c4:52:0f:da:8f:
1b:ea:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:43:20 2025 by rpki-client