Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa
File: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (raw, json)
Hash identifier: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=
Subject key identifier: 55:65:69:F4:2B:34:4B:D3:EF:41:21:11:53:82:93:18:6C:D0:F0:92
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 01975DFCB9D0D34885DB68EEE67CFC1F5213
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa
Signing time: Wed 11 Jun 2025 07:55:33 +0000
ROA not before: Wed 11 Jun 2025 07:55:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41174
IP address blocks: 185.84.52.0/23 maxlen: 23
185.84.54.0/24 maxlen: 24
185.84.55.0/24 maxlen: 24
2a05:a140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:fc:b9:d0:d3:48:85:db:68:ee:e6:7c:fc:1f:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Jun 11 07:55:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556569f42b344bd3ef412111538293186cd0f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:b1:12:99:6a:75:1f:2f:ae:bf:bd:0b:a8:
9a:6d:3c:ee:01:75:9b:62:20:dd:01:aa:c7:c6:ba:
e3:35:0f:c7:f5:bd:dc:b0:ce:68:11:13:b7:2f:03:
86:a9:42:41:aa:e4:a5:07:80:bd:3b:ec:72:a3:f3:
b7:35:10:3d:01:28:8e:e8:7b:41:fa:57:07:0b:47:
73:fd:05:c9:84:94:c0:4f:60:53:31:14:fa:b5:62:
4b:4a:61:09:70:c4:69:87:7f:2a:ab:e7:92:6b:3e:
e1:b5:74:4c:71:e5:62:6e:6c:b0:cb:e5:b2:13:5e:
6a:c8:7a:d3:3a:31:fa:ed:48:35:e5:b6:0c:d0:ad:
34:8a:08:17:d8:bd:89:84:63:85:06:0f:d6:46:fc:
48:f9:af:3d:53:2b:73:2f:2e:d3:57:32:b1:90:9a:
4f:34:9f:2b:48:25:f0:fe:ce:be:24:e4:ef:8f:ea:
c3:6c:09:78:36:20:48:de:e9:09:be:59:b9:c9:22:
90:f4:3b:19:d6:cc:fa:a2:0d:ac:19:09:fd:b1:e4:
b0:bd:79:db:ca:5a:b1:27:84:b7:91:90:6c:1e:f9:
af:98:b3:4e:0b:92:a2:6d:c0:90:bf:e1:fb:c9:30:
71:ff:9d:e9:81:cc:37:88:8c:86:02:de:26:2f:14:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:69:F4:2B:34:4B:D3:EF:41:21:11:53:82:93:18:6C:D0:F0:92
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.52.0/22
IPv6:
2a05:a140::/29
Signature Algorithm: sha256WithRSAEncryption
25:95:bb:57:cd:b1:f8:79:0c:86:7c:a4:aa:a8:23:e9:23:67:
f5:51:f4:43:79:6e:c0:ab:a2:97:1c:6a:86:fc:87:1c:32:1f:
d1:e8:ce:61:bc:f9:4f:14:7e:00:45:6d:62:f0:c6:93:83:b7:
0c:b6:7e:4c:73:db:c8:ce:8d:26:bd:8a:9a:21:20:cd:4c:86:
54:dc:6a:e7:9b:8c:d6:60:41:0c:ed:23:67:b8:c8:7c:1b:a5:
d4:dd:76:60:b8:dc:fb:f9:39:2b:32:78:fa:15:9d:9d:7b:43:
01:9a:2a:6a:04:bb:75:b9:b0:20:ea:57:29:e3:7f:96:3b:c0:
08:14:ad:33:42:02:e6:66:76:a4:0d:4f:b1:61:58:df:26:6c:
8f:08:88:e0:f4:ed:3d:66:4f:a7:79:f6:f9:ad:cd:ac:a6:32:
53:9b:81:6c:9d:a1:7a:7b:85:13:58:ee:9b:a0:29:33:5f:11:
8d:e5:71:72:c1:be:00:62:fd:b0:c1:52:6a:d3:02:6f:2b:8b:
65:aa:fb:01:d2:88:3d:4d:bd:7e:85:9f:c1:01:54:6c:cc:d7:
ee:20:3d:07:84:78:1b:08:45:b3:4d:fe:65:92:4b:1e:c0:c9:
74:90:44:ea:d6:68:92:7d:69:8e:c4:84:fd:27:36:71:1d:08:
cd:1a:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:17:29 2025 by rpki-client