Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pITfOlYIF575J5fmWzjtQSk8CIc.roa
File: pITfOlYIF575J5fmWzjtQSk8CIc.roa (raw, json)
Hash identifier: Q9I2DxMbPSTJ3wBnN4Pk+2eKEzoFy/gxLfboZtcamM8=
Subject key identifier: A4:84:DF:3A:56:08:17:9E:F9:27:97:E6:5B:38:ED:41:29:3C:08:87
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01984D0D7914C0B18E97A5D71EF80C99A266
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pITfOlYIF575J5fmWzjtQSk8CIc.roa
Signing time: Sun 27 Jul 2025 18:03:05 +0000
ROA not before: Sun 27 Jul 2025 18:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 79.172.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:0d:79:14:c0:b1:8e:97:a5:d7:1e:f8:0c:99:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 27 18:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a484df3a5608179ef92797e65b38ed41293c0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:e8:6b:e4:78:b1:41:57:42:bd:65:b3:76:
f8:77:e4:bc:8d:f0:0b:7c:ef:e0:2f:ce:97:6e:5d:
65:51:7d:a2:e6:36:b2:03:98:69:c3:6a:1b:78:e1:
21:4c:af:1b:cd:4c:97:5e:06:f0:3d:00:d1:12:9c:
ba:dd:d9:ce:9f:88:2a:d9:e3:9a:12:94:f9:4f:b4:
ef:a5:ac:3f:59:d9:f7:bc:9f:ad:04:ec:16:05:b1:
16:e9:fb:d1:3c:60:f5:b8:97:da:c6:ec:3e:5d:8f:
a3:0b:51:ac:68:bc:ae:e8:a8:c1:57:6d:63:e9:ca:
0a:54:57:80:1f:74:9c:c2:af:c2:1e:c4:3c:d5:07:
8b:eb:c4:2e:37:91:82:18:6d:3b:58:ac:43:76:64:
b4:1c:19:2e:13:ce:cd:b5:1f:b2:83:e6:8b:60:05:
20:1e:4e:9c:a9:90:a2:25:f4:f1:7b:98:ec:cc:0a:
74:da:0e:19:43:72:ab:72:ed:5d:ff:4d:8d:c0:a2:
26:0e:b5:cc:52:02:b2:32:9e:43:da:73:b8:eb:d8:
fa:46:c4:a2:ae:87:11:8a:65:65:79:38:5e:2a:3f:
76:01:97:27:f0:96:c9:61:51:7f:ec:fa:36:e9:37:
dc:2a:ce:d7:f0:23:d7:d3:d2:8a:13:c7:2e:6b:56:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:DF:3A:56:08:17:9E:F9:27:97:E6:5B:38:ED:41:29:3C:08:87
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pITfOlYIF575J5fmWzjtQSk8CIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a4:2e:d9:12:39:b0:06:72:dd:07:e6:59:a6:ea:f5:c2:89:
da:7d:9a:aa:7f:d8:3a:d1:ba:0d:a9:fd:0e:e8:d0:3b:04:fe:
bb:17:47:ef:33:87:0d:f4:57:28:61:59:3a:49:b7:65:83:a0:
a1:12:d9:79:4b:a3:ee:86:c6:0b:a2:ad:94:09:d9:8c:43:89:
cd:c0:a4:08:41:b0:3e:e7:50:ce:38:0f:76:2d:2a:8d:8f:db:
5a:c1:75:02:77:9f:9b:11:1e:e4:d3:65:b0:16:ee:6c:fa:bd:
c5:a9:9b:67:38:cd:7b:ff:05:20:cf:ab:5a:2e:ff:30:5d:d5:
f1:18:7c:38:4f:51:67:19:d7:5d:8e:af:26:e4:f7:2f:71:2a:
b1:29:d8:1c:2d:ca:aa:0f:7a:1d:b1:53:6a:ad:8e:26:67:16:
14:4c:e7:23:3c:e0:ea:0f:2b:ab:64:8a:dd:05:29:29:c4:7b:
07:91:91:c6:2a:c9:b0:e5:2f:74:d1:c8:08:45:3f:fc:06:6e:
f8:15:a8:7c:2b:72:1d:85:51:a4:ff:f0:11:bf:2a:58:ca:24:
f1:9b:90:8c:e4:e8:a2:d3:63:fe:a7:1a:51:01:98:97:f5:ab:
54:70:16:63:51:17:36:87:06:1d:d2:3d:30:bb:a1:56:39:bf:
9c:cc:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:57 2025 by rpki-client