Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/95QJIwA-jcxs7wGl2QvrCD9q7i0.roa
File: 95QJIwA-jcxs7wGl2QvrCD9q7i0.roa (raw, json)
Hash identifier: g6iIn4RdHOfcLJxnUR1+tFfHVp15ehQgtkoJa5v6YKM=
Subject key identifier: F7:94:09:23:00:3E:8D:CC:6C:EF:01:A5:D9:0B:EB:08:3F:6A:EE:2D
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 0196F714C37A3A77C2E35680291E60D61FE2
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/95QJIwA-jcxs7wGl2QvrCD9q7i0.roa
Signing time: Thu 22 May 2025 08:20:54 +0000
ROA not before: Thu 22 May 2025 08:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43708
IP address blocks: 95.85.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:14:c3:7a:3a:77:c2:e3:56:80:29:1e:60:d6:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: May 22 08:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7940923003e8dcc6cef01a5d90beb083f6aee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:a8:38:6b:61:40:e9:21:b5:2a:71:65:8f:
48:0a:b3:04:3a:82:ff:21:d9:96:70:12:f1:14:27:
46:1c:a1:4a:07:9c:93:b5:0e:d8:06:de:55:2f:28:
fc:27:d1:b3:da:c1:8c:9b:10:26:67:c0:76:7f:68:
44:3a:2c:42:2b:5c:29:16:bc:37:7b:a9:5a:06:2d:
1c:c0:01:2e:53:e4:67:0d:53:3b:c3:5e:b6:0a:22:
3d:5c:8f:03:7c:e9:9b:ed:e4:ad:74:2f:fc:b7:fe:
f5:ed:a1:78:a1:57:3d:6e:42:b2:5e:6d:00:20:64:
8d:8e:de:40:77:5b:4f:a0:cf:f5:ca:b0:42:03:0f:
23:37:4a:81:a0:17:f0:5d:ce:20:a9:92:1f:51:ff:
bf:12:fc:da:4c:fa:09:19:f1:f9:84:0e:60:33:49:
6a:1e:5a:d6:a6:f2:23:b8:f1:b5:27:32:5f:cc:2e:
82:28:59:56:75:c8:19:dd:36:9d:00:75:b2:5c:24:
14:12:6c:9d:b1:75:53:86:0f:37:80:31:f9:df:ee:
9a:79:d1:a0:37:73:b2:c6:0e:2a:b1:15:30:40:ba:
81:64:87:a2:ff:9d:e9:73:80:02:30:b3:95:47:8a:
f0:e5:f9:16:92:71:53:e7:cb:72:97:d0:ed:bc:55:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:94:09:23:00:3E:8D:CC:6C:EF:01:A5:D9:0B:EB:08:3F:6A:EE:2D
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/95QJIwA-jcxs7wGl2QvrCD9q7i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:d9:44:66:06:f1:7b:09:d7:14:74:ca:04:4e:4d:9b:3a:ed:
be:06:3d:15:60:b7:4f:6f:b3:f0:8d:5a:1b:ce:a6:83:e5:f6:
fd:26:28:af:32:1b:49:a1:ff:c8:b6:3e:59:fb:74:64:2b:34:
00:02:64:b6:9b:4a:dc:21:a7:12:72:cc:a5:3c:84:7c:93:73:
10:bd:57:0f:19:73:51:fc:9a:4e:ac:8b:03:3a:a2:13:bc:3e:
66:c1:42:19:77:e5:4d:bb:8e:57:29:72:4e:52:3c:37:63:ce:
77:b3:a0:82:31:21:9d:a7:70:6a:48:e3:d0:f9:87:0b:f3:29:
a2:33:8c:b4:9f:dc:3a:b7:0c:a4:9c:42:94:04:24:fe:09:75:
29:08:e0:c8:c8:ab:4b:86:f1:a9:27:9c:4f:26:02:c4:8d:ba:
e3:0b:61:9a:ce:f2:cf:31:cd:ff:d4:22:07:23:28:c4:af:d8:
cd:fe:de:ee:d6:cb:87:49:e2:ee:42:3e:6c:df:7e:d0:d2:c5:
cb:c0:f1:09:aa:57:fc:8d:16:48:bd:b4:d5:1f:83:ef:72:9a:
80:1b:38:c4:f3:bf:b9:95:32:dd:40:85:9f:b8:13:52:13:c1:
21:cd:a4:58:31:c5:1f:26:b6:3c:4c:ac:ce:b7:de:3b:7a:be:
1a:78:89:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb3FMN6OnfC41aAKR5g1h/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjUwNTIyMDgyMDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzk0MDkyMzAwM2U4ZGNjNmNlZjAxYTVkOTBiZWIwODNmNmFlZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/SoOGthQOkhtSpxZY9ICrMEOoL/
IdmWcBLxFCdGHKFKB5yTtQ7YBt5VLyj8J9Gz2sGMmxAmZ8B2f2hEOixCK1wpFrw3
e6laBi0cwAEuU+RnDVM7w162CiI9XI8DfOmb7eStdC/8t/717aF4oVc9bkKyXm0A
IGSNjt5Ad1tPoM/1yrBCAw8jN0qBoBfwXc4gqZIfUf+/EvzaTPoJGfH5hA5gM0lq
HlrWpvIjuPG1JzJfzC6CKFlWdcgZ3TadAHWyXCQUEmydsXVThg83gDH53+6aedGg
N3Oyxg4qsRUwQLqBZIei/53pc4ACMLOVR4rw5fkWknFT58tyl9DtvFVimQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeUCSMAPo3MbO8BpdkL6wg/au4tMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvOTVRSkl3QS1qY3hzN3dHbDJRdnJDRDlxN2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFX1XAMA0G
CSqGSIb3DQEBCwUAA4IBAQB92URmBvF7CdcUdMoETk2bOu2+Bj0VYLdPb7PwjVob
zqaD5fb9JiivMhtJof/Itj5Z+3RkKzQAAmS2m0rcIacScsylPIR8k3MQvVcPGXNR
/JpOrIsDOqITvD5mwUIZd+VNu45XKXJOUjw3Y853s6CCMSGdp3BqSOPQ+YcL8ymi
M4y0n9w6twyknEKUBCT+CXUpCODIyKtLhvGpJ5xPJgLEjbrjC2GazvLPMc3/1CIH
IyjEr9jN/t7u1suHSeLuQj5s337Q0sXLwPEJqlf8jRZIvbTVH4PvcpqAGzjE87+5
lTLdQIWfuBNSE8EhzaRYMcUfJrY8TKzOt947er4aeIm3
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:09 2025 by rpki-client