Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/elJZVsJM-cu186hJqa3wLJ-HvIY.roa
File: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (raw, json)
Hash identifier: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=
Subject key identifier: 7A:52:59:56:C2:4C:F9:CB:B5:F3:A8:49:A9:AD:F0:2C:9F:87:BC:86
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019806F8D974FF5ECC1DDC2DDF0CEF2FC66E
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/elJZVsJM-cu186hJqa3wLJ-HvIY.roa
Signing time: Mon 14 Jul 2025 03:27:08 +0000
ROA not before: Mon 14 Jul 2025 03:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45593
IP address blocks: 79.170.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:06:f8:d9:74:ff:5e:cc:1d:dc:2d:df:0c:ef:2f:c6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jul 14 03:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a525956c24cf9cbb5f3a849a9adf02c9f87bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:2a:bd:50:73:ec:4e:ae:ce:ca:da:05:49:
fe:7a:ae:ca:b8:46:bc:94:58:73:3c:a7:ba:ba:6d:
8e:ef:cf:ef:fe:75:4c:00:28:ac:e6:31:b5:aa:51:
a0:32:8a:c0:79:7a:eb:63:dd:20:7c:93:51:33:3d:
20:5e:58:24:d7:10:56:ef:e2:fd:fa:98:42:d6:e8:
90:7e:20:64:9d:d0:25:9b:f0:df:ea:ea:48:01:df:
78:2e:3b:2c:43:81:1b:1b:89:cb:ca:de:ac:a6:4e:
1f:39:c0:7e:7f:61:91:9a:70:64:75:b1:71:83:1f:
25:74:14:bf:d8:fc:b7:10:bb:a4:f0:f7:da:22:3f:
9b:ea:3b:67:0a:9c:00:ee:2f:82:d1:c9:92:aa:16:
66:35:5c:39:cc:64:b3:ee:91:2d:04:40:a6:19:40:
dd:c7:16:ee:20:fc:e6:8e:51:02:be:01:9f:6e:40:
ed:69:ae:73:51:84:ac:cd:02:61:07:53:a0:1f:5e:
b3:2c:b0:73:cc:62:61:f0:f3:0b:c1:ad:62:ab:3d:
12:c5:80:a4:a2:5f:69:24:83:d5:af:65:f6:a4:31:
10:84:a5:dd:a1:76:42:89:5d:4b:3f:46:14:c1:04:
d4:ba:ed:e5:ea:0f:aa:64:94:b0:9c:d2:75:02:60:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:59:56:C2:4C:F9:CB:B5:F3:A8:49:A9:AD:F0:2C:9F:87:BC:86
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/elJZVsJM-cu186hJqa3wLJ-HvIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cc:6f:1d:58:2c:4a:51:b3:1c:39:d7:40:80:dd:b8:84:7e:
79:29:6c:d6:08:fa:cd:d8:32:0a:17:99:ba:59:ea:73:f6:87:
05:9b:53:05:bd:30:65:4c:19:d5:6c:b6:af:a4:54:ed:d3:26:
e7:b6:9a:04:3e:fa:74:df:b8:ab:45:3c:ce:46:03:54:b1:df:
af:73:3e:92:f3:d6:74:6b:05:17:ec:39:61:63:a2:c2:12:17:
8f:1a:a6:9b:66:88:68:67:85:d5:ea:77:0b:93:4d:76:68:8c:
61:68:cb:fb:c7:32:67:d5:f0:d7:e5:4e:26:60:97:d5:a4:e3:
0c:45:b0:ef:61:a4:9a:cc:93:61:7d:cc:db:4e:c9:6b:ff:8f:
22:28:dc:f8:4d:7d:a4:41:88:0b:41:18:b3:46:d6:5e:46:72:
b8:dc:a6:78:20:ac:a5:51:46:10:74:ea:26:12:a4:20:29:ea:
09:3c:be:33:46:55:1d:ab:bc:4c:29:d9:f6:18:41:91:c8:c8:
b5:59:6a:0b:83:31:fa:ae:87:dc:84:6c:e6:c4:e5:b7:bf:23:
92:a0:c6:e8:c3:af:a1:80:96:5f:d5:b0:a3:17:ab:3b:c3:fb:
0e:27:77:45:98:72:71:49:90:67:96:3d:1a:56:af:93:bc:9f:
10:3d:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:44:43 2025 by rpki-client