Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JUgSPzxlYtAqYBaYNtVPe7BhyJs.roa
File: JUgSPzxlYtAqYBaYNtVPe7BhyJs.roa (raw, json)
Hash identifier: SvkdGuQNPL27VwFNSnoCTWJVKJoTTb39b3XinEEECbE=
Subject key identifier: 25:48:12:3F:3C:65:62:D0:2A:60:16:98:36:D5:4F:7B:B0:61:C8:9B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198556AE4F7A09D15AA5A3B65D915E54C77
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JUgSPzxlYtAqYBaYNtVPe7BhyJs.roa
Signing time: Tue 29 Jul 2025 09:02:05 +0000
ROA not before: Tue 29 Jul 2025 09:02:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 87.229.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:e4:f7:a0:9d:15:aa:5a:3b:65:d9:15:e5:4c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 29 09:02:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2548123f3c6562d02a60169836d54f7bb061c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:92:78:ee:40:5c:c5:f7:4f:42:1b:67:ab:
4e:8d:fa:96:ab:78:9b:0d:5b:3b:6e:14:ca:c8:bb:
f7:25:40:30:2a:0a:07:b5:27:b4:1a:ac:b1:de:40:
68:51:dd:43:61:4e:b1:f9:a2:1a:69:9f:61:3e:5d:
42:8d:d3:88:49:4a:52:f4:a1:15:63:aa:22:26:bf:
54:b2:d0:e1:57:4c:eb:f5:c6:77:b9:24:fd:52:11:
2c:01:a0:98:23:9a:b8:eb:b2:c2:f3:8d:64:02:94:
33:d3:74:ae:e1:77:60:52:57:d4:05:0b:00:06:90:
0a:ae:b9:f1:46:b8:44:91:c5:81:20:9a:4f:8d:c6:
f2:83:14:2f:34:e5:e6:c7:2e:58:61:5f:8b:9a:94:
70:a2:58:b7:d2:6a:ef:ab:8a:cb:a6:06:01:3d:77:
b7:11:95:a2:78:b0:6e:2f:ea:0c:ff:b9:1f:50:5b:
34:79:c5:5d:85:69:45:4d:51:a5:12:d2:71:82:b0:
ca:8e:9b:f0:05:fd:b6:58:51:92:bc:fc:0c:3a:6d:
3b:9e:7f:df:76:36:36:db:2d:99:ea:6b:8c:38:48:
e3:92:f3:c3:70:7b:f4:8b:5e:00:cd:af:af:55:e5:
fa:31:2b:2f:2c:33:41:ff:98:b2:7d:d0:c9:bc:6d:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:12:3F:3C:65:62:D0:2A:60:16:98:36:D5:4F:7B:B0:61:C8:9B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JUgSPzxlYtAqYBaYNtVPe7BhyJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a8:ce:c8:39:77:05:ee:e5:6d:e8:79:31:78:4c:4f:be:78:
b1:d3:1c:15:4e:c3:cc:7c:cf:78:f3:d6:c1:74:e9:4d:91:7f:
5c:d0:77:00:a3:c4:8e:68:ba:4d:62:8e:d7:cd:8f:6f:59:2a:
09:1b:e6:ea:4d:17:ec:c5:f6:17:71:95:e0:db:65:6c:19:f9:
21:24:f7:e5:5c:64:7d:0d:a4:2d:e2:68:85:ca:8f:cd:51:de:
df:24:84:13:ca:85:43:11:cc:63:4d:0a:c4:3a:60:a8:e1:7b:
f6:62:76:25:ca:04:dd:45:33:88:08:b0:9e:b5:60:80:ed:87:
1d:39:a6:28:94:52:78:a7:64:aa:de:bc:33:82:18:33:2a:de:
f0:75:78:57:1f:14:33:12:ac:16:89:7f:66:86:33:1e:bf:b2:
8f:dc:dd:80:82:21:7c:6c:66:af:02:2e:f2:f2:5e:29:ef:0c:
38:3f:66:a7:49:e7:41:d6:74:7f:d5:0f:f3:63:bb:b9:60:ae:
71:3d:d0:2e:cc:21:bd:7a:9f:6c:25:10:04:e5:bd:0e:87:71:
1b:c5:a1:b5:76:8e:82:65:05:aa:fd:81:7e:a3:27:1e:36:bc:
b4:d7:74:6e:6c:ab:d1:dd:97:c2:1c:f6:33:0e:26:7f:c6:9c:
46:a5:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:57 2025 by rpki-client