Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/bGZ8cdbn0fIsirAinXYsI3cVgrI.roa
File: bGZ8cdbn0fIsirAinXYsI3cVgrI.roa (raw, json)
Hash identifier: J4wWKDhMqBi2gv1qoqBgbjBWJ3PZiM0o6lUb1zQWmBc=
Subject key identifier: 6C:66:7C:71:D6:E7:D1:F2:2C:8A:B0:22:9D:76:2C:23:77:15:82:B2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199352DC5AAE4433DEAA689AEC3165E2CC5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/bGZ8cdbn0fIsirAinXYsI3cVgrI.roa
Signing time: Wed 10 Sep 2025 19:50:15 +0000
ROA not before: Wed 10 Sep 2025 19:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47629
IP address blocks: 87.229.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 22:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:2d:c5:aa:e4:43:3d:ea:a6:89:ae:c3:16:5e:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 10 19:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c667c71d6e7d1f22c8ab0229d762c23771582b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:c7:a2:aa:39:9c:73:cb:4a:7f:ff:f3:9d:
33:e0:5a:fe:bd:b3:65:41:20:00:92:89:14:57:e0:
f3:35:c2:5f:a7:7f:7e:f7:84:73:a9:ab:55:d5:f5:
a6:10:7a:ea:c4:16:df:6c:2f:dd:e7:c6:75:f1:4c:
5f:e5:cc:1a:ba:b8:d3:02:4d:c0:d3:42:cf:ce:24:
26:a0:18:bb:23:34:49:d0:99:b2:59:51:05:5b:a2:
78:bd:65:97:2f:ac:61:cd:02:62:c6:f7:fc:50:e6:
2b:a7:85:5f:76:77:ce:48:8b:43:6d:f7:bc:8e:4b:
15:36:d9:42:bd:e8:e6:4c:14:1c:16:62:10:11:65:
26:b4:5f:ed:6f:8b:58:b1:b1:61:70:98:a7:25:8d:
5c:0d:42:8e:e3:b4:bc:5e:d8:ad:a0:5e:10:89:41:
e8:73:2d:b2:71:86:06:e9:18:28:f7:33:9c:60:ec:
56:b1:96:93:7b:2c:7e:95:47:ea:9e:de:4a:7d:1a:
df:76:cb:13:6f:0d:9c:ae:35:8d:b8:cc:cc:3e:a2:
5b:97:0c:72:31:96:54:6c:02:4f:1f:e4:09:0c:58:
22:4f:2c:47:43:40:30:56:92:f2:4d:fa:47:9e:73:
99:4f:4a:41:40:fb:45:d4:5e:82:62:db:66:98:4e:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:7C:71:D6:E7:D1:F2:2C:8A:B0:22:9D:76:2C:23:77:15:82:B2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/bGZ8cdbn0fIsirAinXYsI3cVgrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.70.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2b:86:86:00:6a:a3:51:98:7b:ce:35:ca:e7:99:1e:54:26:
57:b8:4f:86:ce:5e:41:33:c9:04:a1:fd:e0:ae:e3:e5:b3:8c:
56:ca:b4:ac:eb:ec:f2:87:19:a1:e3:86:25:50:77:7d:12:da:
2d:b2:8c:af:76:fc:fb:9e:96:75:9a:d2:1e:16:d9:87:4e:f1:
81:28:ce:8d:cf:66:f5:50:48:a4:d6:3d:c2:fc:43:7e:90:06:
98:7a:05:b3:10:2f:5e:23:36:c4:60:a6:85:f9:33:a7:31:c0:
30:46:9c:e3:4f:1c:67:e0:03:3c:28:33:68:cf:a9:d7:ff:d7:
77:77:78:1e:30:7a:fc:eb:ab:93:80:60:cb:55:bd:f9:7e:72:
74:53:d5:04:e3:74:be:dd:eb:f5:a3:ff:23:6a:fa:ac:22:e1:
6b:70:6c:3d:20:94:61:21:d7:3d:f2:73:64:a7:87:6f:e5:47:
4e:ba:78:c1:f3:f5:6a:1a:76:09:10:70:5e:4f:14:81:32:83:
e9:cb:3b:5d:53:e5:0c:83:d5:1b:43:70:4a:3f:a4:49:f6:a5:
d7:46:bd:28:81:19:d9:2e:8d:e9:78:cb:50:ed:0b:2a:99:c2:
c1:97:a4:63:49:d6:56:c4:cf:14:d3:6d:06:60:4d:39:dc:a4:
73:27:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:38:50 2025 by rpki-client