Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9HWb2PsuynxM_njNujT1MDviD1E.roa
File: 9HWb2PsuynxM_njNujT1MDviD1E.roa (raw, json)
Hash identifier: TI46UaisuKaYlRr/+cd3vzRCZRFbNLPJb3BKVZK4XvY=
Subject key identifier: F4:75:9B:D8:FB:2E:CA:7C:4C:FE:78:CD:BA:34:F5:30:3B:E2:0F:51
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01985F9F4161EE5979A3139FC435620427AA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9HWb2PsuynxM_njNujT1MDviD1E.roa
Signing time: Thu 31 Jul 2025 08:35:29 +0000
ROA not before: Thu 31 Jul 2025 08:35:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 79.172.250.0/24 maxlen: 24
79.172.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:9f:41:61:ee:59:79:a3:13:9f:c4:35:62:04:27:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 31 08:35:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4759bd8fb2eca7c4cfe78cdba34f5303be20f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:13:c6:12:74:07:97:c0:dc:8f:3b:b4:42:
51:11:2d:bc:2f:ae:9e:2a:f3:bd:38:50:7a:7f:9e:
2b:8c:d0:dc:9b:9a:00:30:5e:0d:a4:28:bf:7a:22:
e0:8d:77:01:65:34:f1:2d:6a:a2:6d:83:dc:5e:5f:
59:25:e3:39:db:9a:fb:1d:72:ee:fe:6c:99:83:95:
13:bc:56:3c:89:bf:e5:dd:b8:59:fb:18:c7:93:0c:
16:52:a4:34:45:75:e3:07:49:ca:fb:7a:c1:7e:fb:
26:76:a4:f6:12:8e:20:17:66:f5:a8:f6:ac:0e:96:
be:ac:05:cc:cf:d5:57:56:a7:d3:62:8e:1e:0f:50:
07:df:f3:2b:28:1a:30:ec:a6:c8:5b:36:45:86:03:
20:b6:a0:aa:4b:97:e9:db:d0:a0:f3:ad:8b:4a:44:
0d:79:46:25:4e:78:1d:84:d5:00:92:6b:14:a3:d5:
37:3f:59:a0:60:d2:ba:5e:52:9d:81:36:23:38:89:
94:6d:8a:8f:86:d7:c3:7a:8a:89:55:37:fb:c5:6f:
c9:d6:7e:33:d9:e2:8b:10:10:10:52:c3:ad:03:ab:
cb:e2:f2:e5:3f:4c:e2:65:ae:e2:c3:95:0e:11:ff:
07:1f:30:44:19:e1:57:ac:08:95:72:ad:71:e1:b1:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:9B:D8:FB:2E:CA:7C:4C:FE:78:CD:BA:34:F5:30:3B:E2:0F:51
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9HWb2PsuynxM_njNujT1MDviD1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:d0:61:79:0d:24:ab:ef:b0:b7:d9:10:35:95:85:2f:0f:77:
4b:88:e0:8c:87:09:f3:e5:5e:28:a9:fa:a0:b4:71:c6:20:c0:
a1:2d:7c:29:20:15:c6:bf:60:31:04:c9:f8:f1:b1:a3:29:f1:
cf:ad:ef:12:fa:35:5d:6f:61:c3:89:c5:97:ed:5f:67:42:2c:
64:93:a0:e1:ea:59:dd:19:be:76:14:cf:37:7b:07:57:48:45:
33:08:6d:b2:d0:d6:07:45:eb:b7:9a:a6:98:e9:ad:1f:a7:4a:
67:7b:08:8b:83:a3:2c:99:41:74:77:a7:db:49:d9:94:a8:ad:
00:5d:81:ba:df:4b:62:86:c3:cb:c2:8a:d9:c6:b6:08:8b:bd:
e0:a1:3b:bd:e9:0c:50:b7:90:92:4e:78:ff:b4:02:5d:3b:b8:
12:e4:39:5b:9b:b9:7d:82:99:ef:83:2e:93:be:14:3d:85:66:
2c:a1:97:e0:a9:51:b8:95:da:09:23:ea:ee:4a:ca:5f:46:a8:
5a:47:17:0c:b0:66:48:1e:02:2f:60:e3:4a:b6:0d:31:e8:81:
5e:68:41:c4:e5:ba:6d:d1:f5:b9:81:ba:03:71:dd:cd:d2:cf:
9b:64:a8:8c:f7:69:2d:cf:42:45:14:cd:20:00:86:02:1f:5b:
41:be:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:10 2025 by rpki-client