Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6o72SxcGcy9tMJLUmhfiHiXFIRI.roa
File: 6o72SxcGcy9tMJLUmhfiHiXFIRI.roa (raw, json)
Hash identifier: JlftvaaSydfLPBN9FgbgXJ5LcfVfcu91k9hQWEdjjjg=
Subject key identifier: EA:8E:F6:4B:17:06:73:2F:6D:30:92:D4:9A:17:E2:1E:25:C5:21:12
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196172A555DC85658C01E2AA9A5D8435C1A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6o72SxcGcy9tMJLUmhfiHiXFIRI.roa
Signing time: Tue 08 Apr 2025 20:49:32 +0000
ROA not before: Tue 08 Apr 2025 20:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:2a:55:5d:c8:56:58:c0:1e:2a:a9:a5:d8:43:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 8 20:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea8ef64b1706732f6d3092d49a17e21e25c52112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:ac:96:e3:61:cf:80:14:ed:a1:2f:cf:73:
42:82:46:19:07:4a:17:c3:0e:9c:57:7f:dc:d5:00:
a3:bd:cc:39:20:9f:2b:df:af:67:21:b0:e2:bb:04:
ff:0c:55:e7:a4:21:46:01:36:fe:bf:d3:d3:7a:cb:
a6:c2:5a:7e:cf:f4:db:26:e2:23:10:85:3c:5f:56:
5c:24:6d:e9:a6:5a:e8:c5:a3:fe:65:88:a4:0b:80:
9f:45:22:03:03:0d:e7:a5:d4:d7:90:ab:93:fb:b3:
ed:fb:df:a4:e9:20:69:df:b6:2c:7d:7c:2c:a0:30:
77:af:0e:81:74:7e:42:e1:23:be:3b:aa:c1:63:03:
b4:46:b0:18:4b:4a:6e:cb:4a:93:17:e7:ad:8b:6f:
b9:c9:68:cd:b1:87:35:23:f4:1e:fd:0d:83:07:45:
9f:2d:32:9f:b1:fd:83:3e:2a:4a:10:9d:14:54:0e:
69:65:ff:df:7e:29:10:31:69:b7:42:e9:b1:92:ad:
b9:63:37:46:cf:d4:05:4f:2f:f0:82:e0:08:7c:4d:
a6:c1:ca:09:78:30:f5:ad:16:87:ea:80:b2:4b:94:
0f:1e:3d:1b:b2:5b:cb:39:f4:ab:42:a6:c0:95:0d:
a1:4c:8e:d5:ee:e5:a8:c9:24:18:0a:92:d0:df:bb:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:F6:4B:17:06:73:2F:6D:30:92:D4:9A:17:E2:1E:25:C5:21:12
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6o72SxcGcy9tMJLUmhfiHiXFIRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.11.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c1:1a:48:39:43:85:91:e2:12:49:04:fc:75:1f:36:72:b4:
ca:04:62:3b:24:9f:82:80:0f:0e:ab:fc:76:d9:7e:67:9b:cc:
53:6f:94:cc:1b:54:df:4c:f4:92:2e:59:99:20:b8:08:f2:84:
ed:a2:3c:6a:ea:5d:3c:16:c9:bc:e4:21:12:2f:89:5d:6c:d1:
94:45:09:b5:c3:99:79:68:35:23:a4:6c:e2:16:d8:0e:1b:d4:
ad:48:52:39:0e:92:51:29:f9:95:9c:07:3b:ff:39:df:3a:9d:
0c:a8:02:b7:ea:e7:68:fc:a4:80:49:ed:b7:1a:b1:78:0c:f1:
82:84:f2:4e:a9:a6:76:e0:14:e3:4d:d5:6f:f7:4a:4f:e1:ab:
58:c4:ac:89:90:65:bd:10:52:90:ed:8b:2f:cd:5c:c3:0f:a9:
eb:fa:7c:17:f0:1a:a8:48:6f:9f:e6:d5:30:39:f5:49:19:b3:
08:e2:fc:3c:3a:43:2d:d6:72:c9:33:f8:3d:b8:76:85:bf:ea:
44:84:77:18:99:d2:1f:2c:af:62:2f:de:1a:2a:1c:8d:20:4b:
08:4b:ed:6f:f6:b8:23:d3:67:69:79:7c:ac:08:f8:cc:01:40:
61:2c:92:31:ac:9d:fe:d3:58:c6:44:31:33:c8:c5:d9:d1:17:
6c:16:09:72
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZYXKlVdyFZYwB4qqaXYQ1waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNDA4MjA0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThlZjY0YjE3MDY3MzJmNmQzMDkyZDQ5YTE3ZTIxZTI1YzUyMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcSsluNhz4AU7aEvz3NCgkYZB0oX
ww6cV3/c1QCjvcw5IJ8r369nIbDiuwT/DFXnpCFGATb+v9PTesumwlp+z/TbJuIj
EIU8X1ZcJG3pplroxaP+ZYikC4CfRSIDAw3npdTXkKuT+7Pt+9+k6SBp37YsfXws
oDB3rw6BdH5C4SO+O6rBYwO0RrAYS0puy0qTF+eti2+5yWjNsYc1I/Qe/Q2DB0Wf
LTKfsf2DPipKEJ0UVA5pZf/ffikQMWm3Qumxkq25YzdGz9QFTy/wguAIfE2mwcoJ
eDD1rRaH6oCyS5QPHj0bslvLOfSrQqbAlQ2hTI7V7uWoySQYCpLQ37sfpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOqO9ksXBnMvbTCS1JoX4h4lxSESMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvNm83MlN4Y0djeTl0TUpMVW1oZmlIaVhGSVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT6zQAwQA
T6zkAwQAV+ULMA0GCSqGSIb3DQEBCwUAA4IBAQBYwRpIOUOFkeISSQT8dR82crTK
BGI7JJ+CgA8Oq/x22X5nm8xTb5TMG1TfTPSSLlmZILgI8oTtojxq6l08Fsm85CES
L4ldbNGURQm1w5l5aDUjpGziFtgOG9StSFI5DpJRKfmVnAc7/znfOp0MqAK36udo
/KSASe23GrF4DPGChPJOqaZ24BTjTdVv90pP4atYxKyJkGW9EFKQ7YsvzVzDD6nr
+nwX8BqoSG+f5tUwOfVJGbMI4vw8OkMt1nLJM/g9uHaFv+pEhHcYmdIfLK9iL94a
KhyNIEsIS+1v9rgj02dpeXysCPjMAUBhLJIxrJ3+01jGRDEzyMXZ0RdsFgly
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:24:26 2025 by rpki-client