Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeeNClDLNSBXwoOlfyEjqAWuiQw.roa
File: VeeNClDLNSBXwoOlfyEjqAWuiQw.roa (raw, json)
Hash identifier: yd4aenCh5ZWCl1Q5aoSLX4H4ErUS1Rn+3aW0AQzb0jo=
Subject key identifier: 55:E7:8D:0A:50:CB:35:20:57:C2:83:A5:7F:21:23:A8:05:AE:89:0C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019A24A632EA1792F9FD046153EEC5B5636B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeeNClDLNSBXwoOlfyEjqAWuiQw.roa
Signing time: Mon 27 Oct 2025 07:51:03 +0000
ROA not before: Mon 27 Oct 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.207.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:a6:32:ea:17:92:f9:fd:04:61:53:ee:c5:b5:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 27 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55e78d0a50cb352057c283a57f2123a805ae890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:ce:8e:89:40:0b:29:61:91:6e:b4:14:24:
3d:b8:78:51:c6:9a:bd:75:dc:22:69:fe:da:df:2e:
6a:0b:81:08:77:50:5e:03:fb:f8:ea:3c:83:96:2e:
ae:a0:a1:43:2e:5c:64:b7:59:75:fd:ed:ef:ef:a9:
30:4b:db:02:fd:1e:38:2f:20:e2:bc:3a:ec:f2:ac:
df:c9:0c:3e:57:63:3c:23:91:4f:3f:fb:dc:e4:8e:
5b:26:47:b1:a9:9a:15:df:dc:de:70:72:5c:ad:f1:
ac:c8:3b:ee:a9:5b:04:bd:aa:a1:a7:7e:8c:3f:87:
60:8d:b9:43:c6:55:9b:ba:7b:6e:25:9a:33:12:3e:
a9:8c:c2:85:aa:95:52:38:fc:c9:9c:5a:0a:95:9e:
9e:d8:ab:79:ec:9f:9f:da:19:d1:ae:47:12:37:63:
79:cb:45:2e:a0:54:49:fd:b1:7d:29:30:00:bc:79:
4b:cd:cf:95:a9:3a:d8:4c:25:c6:96:43:45:9e:7e:
b5:cb:a5:e6:49:74:b9:8e:95:2b:94:50:52:f4:aa:
22:8e:6a:e2:3b:12:42:73:93:6b:d4:8f:f4:fb:02:
88:c1:db:d5:08:c8:4e:23:35:9e:82:10:bb:2c:ad:
ed:29:10:11:85:03:11:7b:1d:62:2e:3c:30:0e:f6:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:8D:0A:50:CB:35:20:57:C2:83:A5:7F:21:23:A8:05:AE:89:0C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeeNClDLNSBXwoOlfyEjqAWuiQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.205.0-194.143.207.255
195.114.196.0-195.114.198.255
213.220.11.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ee:63:0c:96:a4:84:61:8a:44:3f:14:71:f1:0c:92:a9:cd:
90:fc:23:5a:b0:e3:c9:29:19:15:71:97:14:76:66:4c:3d:f3:
8c:2e:bb:9a:0c:16:2a:15:05:01:1c:dd:e9:0b:17:95:97:a7:
e9:02:2d:a5:d0:be:2c:f3:6e:d1:f2:e1:63:e0:7e:64:54:f1:
33:a9:84:b7:67:32:79:7d:1e:77:be:14:85:e0:8d:00:2b:fd:
67:6d:db:25:c6:32:3f:31:78:b5:af:9f:2c:c8:56:75:84:d4:
dc:84:29:e3:8e:20:53:40:d1:c9:c1:14:b4:8b:c1:6d:82:b4:
63:35:46:7b:b9:cd:4f:fa:51:c1:15:ae:32:5e:9f:c4:b1:0e:
b4:3d:66:c4:28:d2:83:7b:cd:eb:d1:37:bc:8d:1c:13:4d:7d:
90:51:03:04:aa:c7:25:79:b0:6b:94:e2:b9:f2:68:10:5d:f0:
0b:e6:a7:d4:22:62:b6:9d:68:6c:32:a6:72:cd:2c:5a:d8:b7:
99:de:2e:de:42:76:dd:8c:30:fd:83:22:a0:8e:61:33:85:92:
58:41:c9:51:b9:ee:b5:68:e9:cc:14:f1:59:08:7a:3e:52:1a:
52:b7:33:43:b8:12:57:35:0a:75:cb:19:46:3f:4d:81:5d:c5:
91:67:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:05 2025 by rpki-client