Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1KlV-7qDBdry9y8uhttZhtal0as.roa
File: 1KlV-7qDBdry9y8uhttZhtal0as.roa (raw, json)
Hash identifier: sWds09SspIOvrVpSPXNDvrjZ5JwHsp1oK2oOam7qbkU=
Subject key identifier: D4:A9:55:FB:BA:83:05:DA:F2:F7:2F:2E:86:DB:59:86:D6:A5:D1:AB
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01984D0F4DF3736EE6300094F533D5EF84E6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1KlV-7qDBdry9y8uhttZhtal0as.roa
Signing time: Sun 27 Jul 2025 18:05:05 +0000
ROA not before: Sun 27 Jul 2025 18:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211358
IP address blocks: 87.229.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:0f:4d:f3:73:6e:e6:30:00:94:f5:33:d5:ef:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 27 18:05:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a955fbba8305daf2f72f2e86db5986d6a5d1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:6a:c1:ce:cd:f0:1a:6e:37:9d:0a:08:53:
8f:55:bc:84:d7:ae:b0:bb:26:a0:0d:c9:6e:02:d5:
34:9b:ee:91:da:90:77:9f:e3:d1:9d:62:3e:1d:71:
94:89:3d:ed:74:bd:90:55:c9:28:20:5f:21:a2:09:
e1:2e:c6:4f:a0:d3:d7:39:e6:d5:c1:87:eb:0c:9e:
a8:68:53:00:b6:d0:b7:9b:c0:c4:4f:5b:aa:81:39:
ad:d1:bc:8f:23:bb:66:f9:32:74:36:b1:74:4d:0d:
e7:f6:e6:5a:52:5a:2b:11:48:74:5e:e6:e1:03:b0:
b6:22:d9:ab:a0:5f:8e:24:f2:0a:70:e8:ea:c4:ad:
fd:b9:c3:01:3a:4a:ae:87:e5:07:49:fa:5d:70:34:
53:3b:2b:3d:c6:a5:dc:39:4c:43:26:41:d5:98:22:
dc:b2:7e:14:4c:83:1d:5a:82:80:1b:7f:fc:a7:89:
fb:d5:ce:30:1d:9b:37:dc:d2:92:89:d7:22:39:1f:
ff:61:e1:f8:e1:be:cc:65:23:57:ba:3e:54:2a:34:
54:6f:2c:e7:3e:1d:12:67:cd:81:3c:94:25:bc:30:
41:58:a7:f5:93:f6:96:5a:b8:ef:3b:92:b2:72:f3:
3a:59:96:86:00:ce:1e:c2:ee:d6:99:ea:c9:1c:4f:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:55:FB:BA:83:05:DA:F2:F7:2F:2E:86:DB:59:86:D6:A5:D1:AB
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1KlV-7qDBdry9y8uhttZhtal0as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:28:a1:cf:c3:73:e2:d4:c9:00:04:02:26:f5:09:3c:73:75:
18:7b:39:af:8c:40:3c:da:61:78:9b:18:26:7b:23:66:e2:e6:
9f:c3:0d:46:e6:82:ba:69:8d:5b:02:ab:c7:f5:ba:74:4d:df:
08:cc:a0:60:19:06:0b:af:ff:bd:dd:dc:ca:a4:38:bc:0c:ea:
6e:0b:ef:50:97:43:a7:c3:c9:61:c2:17:5c:24:79:a7:24:cc:
0f:7e:72:32:0f:c4:7a:56:40:29:98:31:9d:e2:e1:b1:3e:54:
9f:5d:1d:bf:29:b3:25:88:38:48:f9:6f:07:9e:6f:a1:93:18:
c5:0c:4e:9e:54:a6:db:26:7e:51:ce:85:a9:b6:fc:48:0b:a3:
6c:68:88:92:84:e0:4c:3d:76:3b:5e:c4:3b:ef:63:25:f4:30:
b4:45:3f:ca:6d:b9:0b:54:f1:10:d0:45:53:26:b9:91:1e:fe:
a8:3c:07:96:71:5b:e7:dc:b2:1a:01:2f:7c:69:92:4d:07:d7:
87:47:6e:66:a1:0d:ff:75:bf:7d:0b:df:66:e6:3d:5b:2a:af:
dd:19:e6:97:da:84:5f:0e:89:8a:4b:af:8a:28:0f:64:27:a1:
20:4e:0e:a3:16:90:fa:8c:81:30:8a:87:27:20:c4:b8:04:01:
5e:f7:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:26 2025 by rpki-client