Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F_u6av3PfdaUoFKJLgQSRTNdQBo.roa
File: F_u6av3PfdaUoFKJLgQSRTNdQBo.roa (raw, json)
Hash identifier: NtMhjw9MRfF2F65W5x+OFIR19hJO7tmrI1/tz/zw9YM=
Subject key identifier: 17:FB:BA:6A:FD:CF:7D:D6:94:A0:52:89:2E:04:12:45:33:5D:40:1A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019840505C609740D81387CBD0AB88D4F0BF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F_u6av3PfdaUoFKJLgQSRTNdQBo.roa
Signing time: Fri 25 Jul 2025 06:41:05 +0000
ROA not before: Fri 25 Jul 2025 06:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.208.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.219.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.44.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:50:5c:60:97:40:d8:13:87:cb:d0:ab:88:d4:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 25 06:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17fbba6afdcf7dd694a052892e041245335d401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:a1:3e:89:53:a6:f8:40:74:e7:05:8b:36:
6a:4f:63:2e:e1:72:8b:e0:89:b1:2a:39:31:c1:fb:
37:c0:f4:36:bf:0e:cc:9a:59:3e:d0:6c:fb:42:af:
ea:06:71:22:f5:44:f2:0f:4d:77:ac:b4:10:b8:18:
14:a1:0c:b5:1a:4f:65:0e:87:82:31:e7:06:c7:6c:
63:92:8b:af:9d:50:b3:db:b4:11:14:0a:40:86:c9:
45:be:85:3d:01:43:41:c5:17:a9:52:24:cf:b8:13:
13:46:3c:16:04:59:8c:d9:0d:a7:98:1a:4f:7a:37:
fa:53:52:c2:42:24:32:08:f0:75:3c:5c:ce:2e:03:
c3:2a:08:a0:1d:71:7c:35:20:a7:4c:ce:2b:ef:29:
1d:2e:85:90:24:f4:14:31:15:eb:57:65:00:03:cf:
ca:20:23:38:9c:b3:7a:e8:8b:83:30:7f:54:54:17:
06:c6:6c:7c:06:f8:0d:ef:81:ee:78:ee:8d:d4:0b:
e0:69:3b:26:aa:4b:15:47:22:e3:cd:62:9f:59:1a:
59:bf:b4:70:0b:26:52:1f:91:d7:c4:2f:26:53:ea:
34:c0:2c:45:8b:dd:5c:a3:de:3e:e2:40:d8:86:fc:
6f:9b:d5:ae:86:58:e3:b0:ae:f3:4e:64:e8:72:dc:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:BA:6A:FD:CF:7D:D6:94:A0:52:89:2E:04:12:45:33:5D:40:1A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F_u6av3PfdaUoFKJLgQSRTNdQBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.208.0/24
79.172.218.0/23
79.172.228.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.23.0/24
87.229.44.0/24
87.229.97.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9f:0c:a9:b2:af:c3:60:12:16:94:7a:dd:c5:4d:71:3a:61:
3e:e5:9a:2f:ba:40:b0:4f:64:2e:f6:a6:be:56:e1:45:36:f1:
08:bd:0d:e0:bd:33:47:e1:d0:79:5a:ff:e2:57:c5:da:d8:f3:
48:1e:6e:6c:09:97:6b:6f:6c:58:73:82:43:88:f2:af:20:04:
b0:6e:7f:0f:36:10:d4:a7:db:50:99:6e:85:8b:e3:eb:7b:9f:
ae:6d:e8:18:12:45:44:08:4a:af:be:9c:60:15:7d:32:72:6d:
5c:87:3d:7e:2f:8a:9f:73:65:5e:f0:78:ed:a0:cf:8b:77:3c:
20:f5:cf:e1:1d:31:14:72:7a:5e:91:bb:e2:20:7c:57:c4:ce:
7e:e9:55:64:8b:66:d8:0d:ec:b2:a6:98:42:c3:a1:74:2a:6b:
5e:95:2b:9a:21:e0:13:b2:38:3c:ae:da:47:af:d3:76:34:12:
da:a5:b3:7d:6e:54:5f:2b:dd:67:c3:ec:ac:5c:ee:f2:80:02:
8e:4f:09:a3:43:64:70:b5:9c:06:f5:db:b5:d5:39:f4:4b:a2:
dc:02:29:e4:98:d7:9c:40:87:8d:4c:70:e5:6c:37:a1:85:9a:
bf:70:06:8a:f0:8a:c0:17:43:3e:c7:19:94:70:87:5b:9a:70:
2e:e9:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:48:34 2025 by rpki-client