Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/he47BFcL7h2RGMNNMqpjr9QfUjU.roa
File: he47BFcL7h2RGMNNMqpjr9QfUjU.roa (raw, json)
Hash identifier: fCYDkydFulfaZ81lkPysM/WIPvk6e259hcTtvrRcfFQ=
Subject key identifier: 85:EE:3B:04:57:0B:EE:1D:91:18:C3:4D:32:AA:63:AF:D4:1F:52:35
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 0197449BE90770091D4C4030841B0630E648
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/he47BFcL7h2RGMNNMqpjr9QfUjU.roa
Signing time: Fri 06 Jun 2025 09:39:17 +0000
ROA not before: Fri 06 Jun 2025 09:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.85.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:9b:e9:07:70:09:1d:4c:40:30:84:1b:06:30:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Jun 6 09:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85ee3b04570bee1d9118c34d32aa63afd41f5235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:c5:7a:e6:37:d0:9f:05:ff:8c:f5:0a:05:
03:44:9c:2f:78:54:d6:1b:11:9b:f9:c6:0c:c2:71:
b7:7a:24:94:9b:c8:8d:d0:bf:dc:94:2f:0f:b2:16:
63:20:3f:93:85:ff:98:c1:41:c5:8c:66:11:eb:6f:
c6:15:35:d6:95:a9:55:84:6d:de:3b:2c:f0:5c:1c:
59:3e:8c:a4:6b:29:01:b4:04:d9:80:26:5c:24:fd:
8a:17:f1:5f:0d:9d:62:b1:ea:5b:ee:e6:d6:c0:5b:
85:ee:a6:73:82:6d:4f:69:fd:ad:aa:0f:d2:b7:db:
0d:68:40:c5:9e:69:1b:0f:7e:bb:e4:4c:9a:7c:8c:
20:ec:d5:db:26:3a:2b:72:75:19:79:9a:81:7d:ec:
4f:d1:40:ba:ed:8c:54:ed:15:65:44:61:76:32:72:
b2:6a:79:33:5a:ef:09:fd:14:fa:42:11:e6:7d:bb:
6f:1f:a1:f4:ed:e4:33:e9:bf:85:4b:69:df:2c:e5:
61:7b:55:49:1f:46:79:7d:ea:f2:11:88:76:f6:3e:
76:4a:f1:f4:b9:76:b7:40:5c:a9:fa:9a:e0:bb:56:
c2:b5:2d:95:2c:a5:48:36:e6:c6:4c:63:7b:5f:22:
b3:cc:54:d2:a7:18:19:d5:7e:f6:22:d9:43:89:97:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:3B:04:57:0B:EE:1D:91:18:C3:4D:32:AA:63:AF:D4:1F:52:35
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/he47BFcL7h2RGMNNMqpjr9QfUjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.224.0/19
Signature Algorithm: sha256WithRSAEncryption
56:9f:d3:30:eb:09:1b:82:4e:fd:af:fe:0b:73:e4:d5:89:13:
cf:71:0a:41:fc:3c:e0:81:73:4a:31:67:f6:7a:e0:19:72:8c:
13:b2:2a:5d:1e:ff:3f:6b:0c:b2:b0:d0:71:4c:c6:ca:79:2d:
0b:fb:bf:b8:ad:77:86:f5:3e:30:e8:77:66:24:84:8f:18:f9:
7c:70:48:87:24:63:2d:c9:94:a8:00:67:e2:14:12:75:6c:fd:
dd:fe:9c:ff:94:57:a4:f2:c2:f6:53:57:46:9e:55:ad:71:96:
7e:4b:5f:f8:e6:3e:59:0a:3a:5f:d3:31:60:62:3b:a8:44:45:
50:a7:f7:81:5d:3b:5b:f1:af:d7:99:70:8e:a6:ca:08:e2:27:
34:2f:3f:ba:09:a4:e0:b2:e8:44:46:97:50:12:11:a0:61:4d:
dc:20:e4:e2:1d:a0:1e:b9:ff:66:71:28:9c:fd:b8:5d:e7:53:
23:44:c8:40:a2:b0:3d:ab:24:71:d6:b0:85:ff:3a:e9:8f:0d:
6a:28:a2:d1:97:b0:b8:b9:6f:bc:ec:00:f0:31:49:8a:5b:5e:
ef:f1:7d:9b:ce:da:37:83:b6:98:8a:7e:6c:2d:32:97:c0:25:
24:91:4b:a8:1b:3b:9a:af:38:65:90:0d:7e:24:73:5b:40:9d:
5b:80:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:50 2025 by rpki-client