Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQCYhwCVDHFxmA_3_VObdzgIxeU.roa
File: JQCYhwCVDHFxmA_3_VObdzgIxeU.roa (raw, json)
Hash identifier: NhaOHRXdnDUG4RoTpo2t3BGHwst5ASYSsAUjPcUhCBg=
Subject key identifier: 25:00:98:87:00:95:0C:71:71:98:0F:F7:FD:53:9B:77:38:08:C5:E5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01984FED8E4333FDAABA389CFEEC5416AEF6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQCYhwCVDHFxmA_3_VObdzgIxeU.roa
Signing time: Mon 28 Jul 2025 07:27:05 +0000
ROA not before: Mon 28 Jul 2025 07:27:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 79.172.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:ed:8e:43:33:fd:aa:ba:38:9c:fe:ec:54:16:ae:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 28 07:27:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2500988700950c7171980ff7fd539b773808c5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:9c:71:81:7b:d3:64:87:2f:cf:92:4a:cc:
59:ab:57:49:fe:d6:2d:11:1c:c3:ec:59:49:89:29:
b4:a2:f7:1f:65:8f:34:90:49:5a:35:44:ae:e6:b6:
98:e3:07:5e:bb:a4:92:2f:09:a0:c4:59:7f:4f:16:
27:01:f8:d5:92:3d:20:4d:3d:34:7f:f4:5e:42:30:
e5:8c:12:ae:2b:5c:f3:2b:13:1d:88:9a:f6:dd:68:
4f:e4:1d:f4:db:f0:8b:4f:c2:2f:7c:6f:be:3f:01:
aa:d9:90:c9:5f:90:f5:3b:53:56:26:5f:c9:f5:9e:
59:46:ba:73:da:68:74:e6:da:55:df:67:38:ec:07:
95:a8:4f:b6:5b:e8:88:01:ab:a6:36:d6:14:cb:2a:
f0:9b:76:1b:61:fc:fe:55:39:34:dd:05:70:2e:eb:
27:a0:8d:1c:be:e8:bd:f6:eb:38:86:ea:a1:8d:6d:
b8:f7:47:73:ec:0e:7a:2d:64:93:0b:b8:27:e2:e4:
95:37:51:4f:29:59:01:39:7a:d9:aa:39:bb:f4:59:
97:6e:bf:4b:8f:c7:81:27:46:b7:7f:1a:53:bb:2a:
6b:fe:66:a5:59:4c:2d:e2:46:3a:dd:bc:b8:ce:53:
30:25:1e:50:8c:f5:c6:45:be:27:56:11:d0:c1:2d:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:98:87:00:95:0C:71:71:98:0F:F7:FD:53:9B:77:38:08:C5:E5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQCYhwCVDHFxmA_3_VObdzgIxeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.228.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ca:46:61:e2:05:f2:91:52:d3:49:b2:c0:2e:a5:f8:7d:f6:
e7:2f:b7:28:26:34:d5:f3:9a:45:63:31:a9:9a:89:b9:7b:fc:
62:ce:9a:52:f3:98:d6:74:08:61:97:3a:c7:bd:e7:86:fb:1f:
bb:99:d8:44:76:83:77:7f:9d:d8:aa:97:33:25:7a:c1:a1:38:
fd:b4:65:a7:8d:08:ad:30:bf:14:09:a0:9f:bd:0b:b2:71:8f:
97:b0:5c:2f:de:65:73:34:da:ea:c4:66:dd:7e:a6:01:10:13:
9f:69:a1:c8:5a:11:1f:18:1d:b3:af:38:34:a7:59:9c:d8:52:
9a:29:e4:37:be:53:a7:90:c4:c0:33:dc:14:58:db:9d:16:fb:
cd:b2:17:e6:84:5c:a9:c5:a4:fb:b9:cf:f2:55:ae:ab:9f:02:
bc:1c:e9:34:98:13:fd:81:bb:5d:1e:8d:09:0a:c7:1f:36:c9:
78:23:62:d1:76:ea:dd:a6:40:d0:13:eb:43:4a:db:69:2b:37:
09:b3:bd:85:fa:8b:68:4f:14:7f:a6:e1:fe:35:7d:14:d6:18:
a1:58:f1:b3:e9:e4:b2:7a:34:42:61:14:b2:08:eb:ed:41:aa:
c1:0d:b4:3b:f1:d3:33:30:28:3c:2c:f8:8f:f4:d8:cd:73:4b:
44:09:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:07 2025 by rpki-client