Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1lqsmUAJEEQezzBv59CwssbZLKk.roa
File: 1lqsmUAJEEQezzBv59CwssbZLKk.roa (raw, json)
Hash identifier: RG8scCaR3dpLhRTVi2AOjNQsvmoNyEM2SmIJbW1LH2o=
Subject key identifier: D6:5A:AC:99:40:09:10:44:1E:CF:30:6F:E7:D0:B0:B2:C6:D9:2C:A9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197E3CA69402B4E67C14FCBBBEF822D8F78
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1lqsmUAJEEQezzBv59CwssbZLKk.roa
Signing time: Mon 07 Jul 2025 07:29:42 +0000
ROA not before: Mon 07 Jul 2025 07:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 87.229.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:ca:69:40:2b:4e:67:c1:4f:cb:bb:ef:82:2d:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 7 07:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d65aac99400910441ecf306fe7d0b0b2c6d92ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:ab:9f:20:2a:9d:ae:51:a9:8f:9c:25:d3:
98:8a:12:90:cc:60:1e:e5:fc:66:85:1f:dc:5d:0c:
e9:c8:5d:35:06:a9:a7:3c:3b:83:ef:d6:41:93:77:
5a:b8:b2:6e:ab:cb:1d:23:99:75:40:94:40:d5:db:
11:ee:18:71:79:2b:38:41:fb:98:ea:20:61:5e:9b:
46:f0:3e:49:49:d4:13:c3:64:96:8f:b1:7c:b5:4e:
a4:13:fa:d1:e5:54:47:4b:89:b6:75:97:12:80:a6:
d0:23:93:bd:d9:6f:76:56:62:d5:95:4f:43:69:ed:
73:79:9a:bc:0a:1c:87:4e:26:d5:08:90:cb:36:6c:
27:5b:94:53:85:ba:ed:0f:1a:d6:23:4d:64:f6:ab:
dc:bf:99:38:66:03:4d:d7:5f:c1:51:af:13:d2:11:
8c:82:54:85:59:79:74:4c:69:de:10:eb:46:06:cb:
ad:df:84:1f:85:ae:02:c3:f9:3b:14:a5:61:d0:aa:
f2:a0:fc:58:78:59:6e:cf:95:4a:86:92:b6:ee:02:
ac:26:48:e7:e2:d4:bc:2e:b4:c3:0a:ee:44:0f:cd:
82:fa:6d:0c:82:41:d3:48:00:a8:2d:1d:f0:1c:72:
9f:52:df:e4:c0:69:a6:81:5a:50:29:00:38:55:05:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:AC:99:40:09:10:44:1E:CF:30:6F:E7:D0:B0:B2:C6:D9:2C:A9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1lqsmUAJEEQezzBv59CwssbZLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c2:3f:93:f5:5e:79:f5:02:d7:ad:2d:de:24:7a:53:25:4b:
bd:29:6e:7e:ca:34:f6:61:cc:a1:51:61:99:f0:6f:b4:90:dc:
25:07:15:cd:f3:b2:ad:84:da:7f:37:55:89:fa:10:36:14:79:
ed:72:47:ad:88:b4:07:f9:b2:45:4d:98:e2:10:0d:9c:77:45:
81:66:a5:63:e0:56:d5:f1:68:6d:6d:5e:40:de:5b:10:f4:8c:
0f:44:dd:5d:e2:1a:f2:d9:40:9b:a7:14:9f:f1:9d:2b:95:ec:
09:99:33:96:e8:71:ec:76:58:00:b2:e9:b6:89:9e:f3:24:a6:
96:86:1b:32:f2:e6:b7:d0:07:9b:1f:6f:8d:6b:3d:fd:88:99:
b9:c6:be:28:5e:74:36:5d:75:79:44:d0:f0:2b:61:1d:2b:db:
66:f8:39:6b:79:97:41:1b:a1:1f:28:dc:96:36:fe:15:02:d9:
62:e1:60:bf:6a:92:53:08:0e:0f:31:08:1b:51:96:55:25:2d:
1e:ba:d9:e6:c5:9f:d3:6e:9d:83:87:70:6a:f6:e6:51:e9:f9:
ff:68:4d:b5:e5:a4:9d:3b:a5:45:aa:25:46:37:89:ed:3a:ed:
7c:4e:37:2b:01:ba:da:66:17:11:8e:fd:3c:c8:e7:68:ec:49:
fa:63:d9:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfjymlAK05nwU/Lu++CLY94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNzA3MDcyOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjVhYWM5OTQwMDkxMDQ0MWVjZjMwNmZlN2QwYjBiMmM2ZDkyY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvGrnyAqna5RqY+cJdOYihKQzGAe
5fxmhR/cXQzpyF01BqmnPDuD79ZBk3dauLJuq8sdI5l1QJRA1dsR7hhxeSs4QfuY
6iBhXptG8D5JSdQTw2SWj7F8tU6kE/rR5VRHS4m2dZcSgKbQI5O92W92VmLVlU9D
ae1zeZq8ChyHTibVCJDLNmwnW5RThbrtDxrWI01k9qvcv5k4ZgNN11/BUa8T0hGM
glSFWXl0TGneEOtGBsut34Qfha4Cw/k7FKVh0KryoPxYeFluz5VKhpK27gKsJkjn
4tS8LrTDCu5ED82C+m0MgkHTSACoLR3wHHKfUt/kwGmmgVpQKQA4VQUluwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZarJlACRBEHs8wb+fQsLLG2SypMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvMWxxc21VQUpFRVFlenpCdjU5Q3dzc2JaTEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UJMA0G
CSqGSIb3DQEBCwUAA4IBAQBUwj+T9V559QLXrS3eJHpTJUu9KW5+yjT2YcyhUWGZ
8G+0kNwlBxXN87KthNp/N1WJ+hA2FHntcketiLQH+bJFTZjiEA2cd0WBZqVj4FbV
8WhtbV5A3lsQ9IwPRN1d4hry2UCbpxSf8Z0rlewJmTOW6HHsdlgAsum2iZ7zJKaW
hhsy8ua30AebH2+Naz39iJm5xr4oXnQ2XXV5RNDwK2EdK9tm+DlreZdBG6EfKNyW
Nv4VAtli4WC/apJTCA4PMQgbUZZVJS0eutnmxZ/Tbp2Dh3Bq9uZR6fn/aE215aSd
O6VFqiVGN4ntOu18TjcrAbraZhcRjv08yOdo7En6Y9nM
-----END CERTIFICATE-----
Generated at Mon Jul 21 00:27:24 2025 by rpki-client