Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa
File: vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa (raw, json)
Hash identifier: EZ8noFz8pUG/Mp84LZG9CdH2CpZHNivjG9K+XxXNqrs=
Subject key identifier: BE:41:5D:E3:12:66:48:82:5D:DC:95:DC:E2:1C:BD:C4:19:D3:52:0A
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019A19E44A7C62A42859094679528C219221
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa
Signing time: Sat 25 Oct 2025 05:43:02 +0000
ROA not before: Sat 25 Oct 2025 05:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 89.18.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:e4:4a:7c:62:a4:28:59:09:46:79:52:8c:21:92:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Oct 25 05:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be415de3126648825ddc95dce21cbdc419d3520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:3a:38:83:c8:83:6c:94:50:0a:1d:64:f8:
d4:a5:56:4b:46:6b:19:a3:e9:6d:52:7c:2f:6c:60:
e9:b4:a6:46:c1:fe:63:3a:16:69:7d:4b:92:6b:52:
0d:0a:99:6f:2b:0b:5d:e2:50:2a:9f:0b:a1:f2:f2:
11:f2:f0:37:1f:1a:7b:02:e0:1a:39:b8:fb:7b:12:
10:5b:ac:06:45:c8:d6:eb:a9:2c:1a:91:9e:f8:35:
c8:8b:81:2c:a3:16:75:ee:57:5b:b2:d2:3a:62:c1:
43:35:b8:2b:91:a9:e7:5a:2f:42:4f:67:3d:5e:8c:
bd:38:40:3a:23:d7:6c:0a:af:35:8e:14:54:63:17:
b0:c2:55:51:7f:f5:f7:b6:b5:96:04:2d:d6:93:f6:
b1:83:43:4b:09:50:6a:ad:48:3f:35:c2:b3:97:cc:
6f:9b:79:d2:66:22:86:85:49:76:09:57:d5:7e:7b:
a9:0c:87:48:79:f0:41:b8:a1:f2:a4:d6:56:a3:0e:
ed:86:7c:97:fa:cf:70:16:db:9c:e9:5c:c2:e6:3c:
e1:4c:3c:6e:40:cd:57:0f:95:5e:ad:a5:00:e7:f9:
ed:6f:b0:1d:6f:e1:66:1d:7d:ac:a7:de:3b:bb:ab:
ba:08:32:46:b3:1b:f7:6c:f3:7c:a5:93:b0:64:9a:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:5D:E3:12:66:48:82:5D:DC:95:DC:E2:1C:BD:C4:19:D3:52:0A
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:a1:1b:4c:2c:81:1c:8c:fc:03:70:b2:6a:08:da:36:3a:91:
08:94:4d:0b:e6:63:e0:23:d0:11:91:23:81:33:d5:5d:5f:ce:
25:ef:5a:b4:e2:ce:79:f1:fc:8c:bf:3d:df:18:77:4a:a4:54:
7c:00:5e:95:86:60:fe:a2:f2:51:29:88:b6:1d:db:64:52:36:
52:29:d0:77:2a:be:09:b7:c4:68:cd:c4:f3:b1:64:0e:f0:76:
ac:6e:1c:04:85:64:80:fe:43:11:e1:90:4e:89:f9:1d:4a:fa:
b6:26:40:68:19:5f:d7:4d:47:24:40:c7:67:3f:17:fb:21:6a:
52:ec:75:ea:43:67:a0:06:6c:7b:c6:e7:5a:ff:8d:a8:bf:83:
fc:f1:87:17:3e:3e:fc:e5:6a:ee:e8:bd:5c:58:86:e7:ee:04:
76:c2:21:2d:b6:44:4d:11:9e:a2:a6:e0:9f:ce:43:44:31:48:
1a:8c:3a:47:d0:6c:20:b0:9c:2b:27:2d:6a:44:40:75:5b:04:
04:63:c9:46:e7:ff:af:af:5a:b0:fd:a8:b9:26:4d:e2:36:92:
0a:3c:8e:77:28:0e:1e:8b:29:0c:07:99:7a:e4:69:2c:3f:be:
b7:b9:46:83:c7:9c:1e:ef:f3:d6:c0:65:89:c6:cc:d6:7f:54:
65:97:72:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoZ5Ep8YqQoWQlGeVKMIZIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjUxMDI1MDU0MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTQxNWRlMzEyNjY0ODgyNWRkYzk1ZGNlMjFjYmRjNDE5ZDM1MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NQ6OIPIg2yUUAodZPjUpVZLRmsZ
o+ltUnwvbGDptKZGwf5jOhZpfUuSa1INCplvKwtd4lAqnwuh8vIR8vA3Hxp7AuAa
Obj7exIQW6wGRcjW66ksGpGe+DXIi4EsoxZ17ldbstI6YsFDNbgrkannWi9CT2c9
Xoy9OEA6I9dsCq81jhRUYxewwlVRf/X3trWWBC3Wk/axg0NLCVBqrUg/NcKzl8xv
m3nSZiKGhUl2CVfVfnupDIdIefBBuKHypNZWow7thnyX+s9wFtuc6VzC5jzhTDxu
QM1XD5VeraUA5/ntb7Adb+FmHX2sp947u6u6CDJGsxv3bPN8pZOwZJrWZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL5BXeMSZkiCXdyV3OIcvcQZ01IKMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvdmtGZDR4Sm1TSUpkM0pYYzRoeTl4Qm5UVWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWRI8MA0G
CSqGSIb3DQEBCwUAA4IBAQBtoRtMLIEcjPwDcLJqCNo2OpEIlE0L5mPgI9ARkSOB
M9VdX84l71q04s558fyMvz3fGHdKpFR8AF6VhmD+ovJRKYi2HdtkUjZSKdB3Kr4J
t8RozcTzsWQO8HasbhwEhWSA/kMR4ZBOifkdSvq2JkBoGV/XTUckQMdnPxf7IWpS
7HXqQ2egBmx7xuda/42ov4P88YcXPj785Wru6L1cWIbn7gR2wiEttkRNEZ6ipuCf
zkNEMUgajDpH0GwgsJwrJy1qREB1WwQEY8lG5/+vr1qw/ai5Jk3iNpIKPI53KA4e
iykMB5l65GksP763uUaDx5we7/PWwGWJxszWf1Rll3KZ
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:01 2025 by rpki-client