Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VJZCKgHI5gZKNjnXWiSNXJ87LIw.roa
File: VJZCKgHI5gZKNjnXWiSNXJ87LIw.roa (raw, json)
Hash identifier: JDOrimawggEZwvlSBTSfTrBYQx9beL1T5Rgh7Nxkwmc=
Subject key identifier: 54:96:42:2A:01:C8:E6:06:4A:36:39:D7:5A:24:8D:5C:9F:3B:2C:8C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019A3EC7F5A609A4B413A073A3E53C7EFCD0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VJZCKgHI5gZKNjnXWiSNXJ87LIw.roa
Signing time: Sat 01 Nov 2025 09:38:03 +0000
ROA not before: Sat 01 Nov 2025 09:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 185.190.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:c7:f5:a6:09:a4:b4:13:a0:73:a3:e5:3c:7e:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 1 09:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5496422a01c8e6064a3639d75a248d5c9f3b2c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:39:d4:f9:8a:23:45:68:de:c7:96:74:66:
68:74:3d:a5:52:6a:f6:42:9d:26:13:cb:b6:57:4f:
f2:4b:74:28:77:ad:41:05:36:97:e2:ca:d1:06:70:
a0:bb:41:d2:e2:21:d8:29:c9:d8:88:b6:01:82:76:
ad:7e:4c:18:6d:2c:5f:c9:04:85:15:ed:a1:e4:df:
45:32:34:af:4c:ec:0d:e1:4d:0b:d1:89:9c:9a:f1:
5f:25:67:19:09:48:23:21:2f:ba:1a:30:ab:55:8c:
64:f5:46:1e:05:f1:3f:28:64:ed:fd:bf:62:59:21:
5c:ad:3d:7f:f0:a9:da:05:f1:e3:47:27:9f:90:68:
72:b4:82:09:32:da:a3:f5:2b:fc:78:74:4a:35:b8:
64:80:6d:b7:86:85:64:a7:9e:74:69:8a:81:1b:24:
2e:7d:40:b6:d6:da:22:a2:4f:57:5b:88:fd:55:98:
c0:fe:08:fb:d7:e2:53:52:62:53:05:9e:9b:62:2e:
3c:5e:60:34:68:b6:50:a4:3d:b3:97:3b:f9:10:a9:
77:93:49:3d:69:67:ed:da:08:80:7d:d6:5c:fe:71:
76:0b:b6:3c:e8:22:3b:20:e2:c9:2e:eb:d9:e5:f3:
cb:c5:f3:1e:eb:d5:d9:34:3f:af:ca:34:25:5b:2f:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:42:2A:01:C8:E6:06:4A:36:39:D7:5A:24:8D:5C:9F:3B:2C:8C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VJZCKgHI5gZKNjnXWiSNXJ87LIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7d:fe:dc:26:55:fa:39:68:1d:a0:e9:38:4c:02:36:cb:b4:
67:3c:15:61:2d:15:f6:c0:49:43:6a:91:4e:d7:20:17:b7:97:
2c:a2:23:b2:d8:04:4f:b6:e2:ca:25:b9:99:d7:e1:e0:37:ed:
2d:99:dd:32:c2:70:c2:ed:14:7b:d8:18:05:f3:aa:73:41:7a:
9a:63:bf:76:e7:65:a0:67:4b:1c:db:da:52:94:e4:7f:83:c4:
42:71:66:e3:6b:b9:15:fa:33:c3:c5:60:73:3c:03:83:f4:95:
61:25:ff:6e:c5:bd:5d:d6:fd:d9:95:69:49:fd:a4:ae:90:2d:
5f:71:b2:33:2c:92:16:74:0d:82:c8:6a:3d:6d:c3:2b:a9:6e:
7f:3c:9d:02:a6:18:98:84:fe:28:0d:4a:a7:76:87:4f:2c:9e:
f9:bf:14:2e:90:8e:eb:5f:19:0b:d8:8b:cf:2d:2a:5b:23:20:
7e:4d:22:21:5d:25:32:fb:72:21:83:db:ed:a4:1d:3d:66:fc:
55:ed:24:d7:89:a7:83:94:f0:71:72:c2:5f:49:6f:b6:cc:4e:
1c:b9:3b:47:47:b3:09:5c:0b:78:27:38:47:58:9e:89:72:43:
94:b9:3b:e5:7c:32:e6:16:a4:30:b0:92:f2:3d:5c:ec:48:77:
31:fc:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:24 2025 by rpki-client