Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pF-0WxR-aIWkqJHhoO2kqkrm0Tc.roa
File: pF-0WxR-aIWkqJHhoO2kqkrm0Tc.roa (raw, json)
Hash identifier: mfeiJ5HhvT5nIZQQT7KTL/VScvKB0/UtO3xrFe8epa8=
Subject key identifier: A4:5F:B4:5B:14:7E:68:85:A4:A8:91:E1:A0:ED:A4:AA:4A:E6:D1:37
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019A4B9B0A57364180876D6726F85A44CE18
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pF-0WxR-aIWkqJHhoO2kqkrm0Tc.roa
Signing time: Mon 03 Nov 2025 21:24:03 +0000
ROA not before: Mon 03 Nov 2025 21:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:9b:0a:57:36:41:80:87:6d:67:26:f8:5a:44:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 3 21:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a45fb45b147e6885a4a891e1a0eda4aa4ae6d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:c5:a4:5f:27:9f:07:a5:23:ea:fd:50:3e:
11:37:c5:4f:ea:ba:a1:4c:ec:d7:ed:08:20:22:e2:
93:68:19:dc:5a:b9:8e:b2:56:ec:46:05:0f:a2:6f:
91:23:60:d8:70:6e:05:c9:e7:a4:fb:42:07:bb:e4:
53:0d:bf:58:cb:32:fc:01:a3:16:c7:cd:28:9e:ec:
c1:64:c4:f7:4e:84:a9:da:0c:ae:76:01:fb:dc:8b:
9a:b9:98:87:7a:07:b5:61:97:99:a2:71:e7:84:d5:
c8:1f:71:a7:9b:41:21:40:03:24:e1:0a:b1:6f:d9:
ef:43:fa:0b:40:93:fb:0f:90:26:e7:40:6e:04:83:
13:f3:dc:3c:b7:b9:e4:dd:4a:c8:90:ba:9c:e0:5d:
51:22:26:53:b2:8a:b1:b0:e8:66:5d:78:cb:9d:90:
c0:0d:4a:96:64:5a:39:03:73:de:d4:f4:d9:de:eb:
e1:1a:1c:3c:32:24:50:8f:c1:85:a9:38:8f:b7:af:
b2:b6:4f:af:92:7e:69:f7:8a:96:30:68:68:f6:f7:
d6:0f:3b:ad:c3:52:c8:1c:3f:9c:d1:a2:3b:c7:93:
2a:28:9d:a5:3c:e4:eb:16:ba:e6:14:bf:0d:e4:8b:
78:f1:63:e1:b1:70:a3:bd:4d:02:4b:23:a9:d7:3b:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:B4:5B:14:7E:68:85:A4:A8:91:E1:A0:ED:A4:AA:4A:E6:D1:37
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pF-0WxR-aIWkqJHhoO2kqkrm0Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.250.0/23
87.229.8.0/22
87.229.110.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9d:25:20:31:77:fc:11:3a:59:0d:a2:09:42:a1:3a:ac:cc:
2e:c1:a8:c3:2b:df:67:cd:a7:3d:80:78:57:0f:6e:b1:58:db:
18:aa:5e:b3:af:09:ff:4d:52:96:6a:a4:89:d3:d8:48:c2:60:
01:5a:53:0c:70:fe:2f:a4:8c:6e:e2:10:63:cf:ac:66:7b:20:
63:fe:25:97:c2:4d:cd:7c:1e:33:86:f6:aa:3e:ac:49:a1:d8:
d7:f6:4e:5f:93:76:31:36:b0:fe:ab:76:2d:f0:2c:b4:22:57:
bc:2f:b0:95:3a:92:4c:a6:f0:e6:4d:40:2d:90:1f:25:73:47:
d4:c4:9b:c4:df:08:a8:25:9a:9c:f3:15:dd:14:ce:2b:f3:6f:
fd:a1:45:13:03:04:f3:09:f7:83:34:b3:6d:4b:3b:9d:26:58:
e2:5f:db:9c:65:10:a6:d3:60:25:e4:c5:26:44:66:e5:75:0b:
99:d0:9a:c9:3f:38:8b:38:5e:a1:74:11:b7:f8:f4:31:1d:0b:
bd:ad:b4:57:75:44:2b:e8:a1:90:6e:bf:21:62:2d:7d:7f:76:
30:41:95:17:9a:d1:bf:c5:f6:84:0c:20:27:f7:71:8c:43:09:
4d:3f:bc:ef:a6:1e:d9:d9:c2:21:db:8f:ea:d2:83:06:04:a0:
35:10:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:42:10 2025 by rpki-client