Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c9rJNabUikmqXetJaspgjpYaSjo.roa
File: c9rJNabUikmqXetJaspgjpYaSjo.roa (raw, json)
Hash identifier: av7iHef0l0Nwt+K2EQ3Wu0viKqZ8xEn8xbI9N1KPe9Q=
Subject key identifier: 73:DA:C9:35:A6:D4:8A:49:AA:5D:EB:49:6A:CA:60:8E:96:1A:4A:3A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198602EFE58EE925366DE6FDDADACDF60FB
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c9rJNabUikmqXetJaspgjpYaSjo.roa
Signing time: Thu 31 Jul 2025 11:12:29 +0000
ROA not before: Thu 31 Jul 2025 11:12:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 87.229.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:2e:fe:58:ee:92:53:66:de:6f:dd:ad:ac:df:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 31 11:12:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73dac935a6d48a49aa5deb496aca608e961a4a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:b4:72:cc:6a:03:7f:7e:19:4c:92:c3:08:
75:8b:64:e7:7a:81:c9:cc:e8:37:d4:7c:af:f8:8c:
5d:7a:c9:c3:63:1c:24:2b:17:65:a1:ff:6f:ff:dd:
b3:c9:b0:1c:ae:56:de:d5:9b:80:bc:98:e1:5e:f8:
e8:95:d4:50:d8:84:8e:d1:a2:6e:b0:b2:40:66:f2:
8f:4a:df:af:a2:77:46:b6:9b:bd:35:c2:c7:79:cb:
a7:72:f9:8f:b8:61:00:3e:f5:0e:c1:4e:6d:f2:a9:
4e:53:99:5b:86:f0:0e:72:1f:fc:83:74:13:c8:26:
e2:f6:d4:26:48:82:c7:38:84:57:e0:33:dc:14:40:
b9:f8:36:28:01:06:18:4f:d1:a3:1e:a5:fe:c6:a0:
d7:4f:54:08:be:8d:d1:02:96:78:7e:29:e2:af:23:
ee:41:5b:24:4f:dd:17:83:a9:ed:3a:2c:be:8e:4b:
f8:c3:c3:54:52:a6:f5:00:ae:43:e1:51:ff:fe:9a:
46:4b:a0:46:1a:f7:6c:e2:2e:d3:5c:b0:d0:fc:b4:
e0:15:21:8b:c9:21:e9:ee:82:c7:d2:9a:3f:90:ec:
44:82:fe:fb:37:37:db:e2:90:3a:1c:e3:8f:cd:5a:
29:eb:16:64:2e:9c:36:5f:bd:c7:df:ae:e6:50:08:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:C9:35:A6:D4:8A:49:AA:5D:EB:49:6A:CA:60:8E:96:1A:4A:3A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/c9rJNabUikmqXetJaspgjpYaSjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a6:84:d2:8f:f9:1a:ca:a3:fe:45:2d:a0:41:90:22:77:36:
be:5f:d2:3c:a5:a0:83:c9:e5:ef:ab:ec:fc:51:e3:a5:2b:6e:
4a:ee:67:c0:01:b2:4c:e5:6f:ed:b7:6c:68:51:6f:6b:66:a8:
d5:95:e7:02:7e:17:71:03:d0:a4:d4:90:c5:54:a3:00:0a:37:
24:23:a5:77:76:72:fb:8b:37:41:c0:10:f6:c8:b5:f4:a8:16:
78:83:26:51:45:7e:a3:0f:c6:7b:50:98:62:4c:28:1e:b7:08:
3a:8c:7e:c4:75:00:f1:d5:eb:46:97:fa:70:a1:f5:e7:3e:08:
24:90:81:3a:6f:0d:2a:f8:cd:6b:9b:05:26:f2:a4:f2:fe:ea:
84:24:90:b6:23:56:3b:53:f7:90:19:61:f1:4d:50:71:ff:c4:
5f:bd:d4:83:b8:d8:b0:ee:5d:a5:60:4d:e1:54:38:6f:dd:18:
7a:31:2f:9a:84:0d:58:ac:72:76:83:63:25:cd:63:08:1c:17:
84:24:9c:e4:82:b3:47:99:94:a1:e3:7c:9f:3f:8c:18:f2:55:
36:08:03:73:d2:2e:63:b9:d0:b2:d4:8b:63:37:b5:14:39:6a:
69:e4:8f:03:db:71:0e:18:89:00:e3:b8:27:87:ad:84:8b:63:
58:c0:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:13 2025 by rpki-client