Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/e59o4nflKfkRbUwhU4WwMTxJI_Y.roa
File: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (raw, json)
Hash identifier: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=
Subject key identifier: 7B:9F:68:E2:77:E5:29:F9:11:6D:4C:21:53:85:B0:31:3C:49:23:F6
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01982CDFDE444DD6326FC2F244FB5D61B1EE
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/e59o4nflKfkRbUwhU4WwMTxJI_Y.roa
Signing time: Mon 21 Jul 2025 12:05:25 +0000
ROA not before: Mon 21 Jul 2025 12:05:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215886
IP address blocks: 46.60.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:df:de:44:4d:d6:32:6f:c2:f2:44:fb:5d:61:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jul 21 12:05:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9f68e277e529f9116d4c215385b0313c4923f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:be:24:21:14:33:3d:92:f2:4d:8b:b2:90:
82:a4:8a:40:63:be:9d:62:2f:c5:f6:08:ef:7b:31:
5b:86:f1:6b:e6:ce:41:dd:26:ba:f0:cf:93:b1:a7:
f2:06:a5:ee:bf:96:df:a1:2f:2a:82:08:aa:01:48:
57:a4:31:4f:a2:85:71:b1:b4:06:c5:0d:2d:64:ac:
fc:c5:97:a4:2f:75:7d:54:f6:e4:f8:6c:23:e4:d7:
10:e4:39:8d:0b:b2:fd:3f:0b:64:ca:98:1a:ab:87:
28:d7:84:cb:10:22:4d:48:3e:7c:4d:c2:dd:7e:bb:
bb:b4:17:f1:98:b8:8c:34:84:ca:06:42:ac:26:ab:
22:b8:fe:41:23:5c:a4:bc:e5:4c:87:38:64:ed:6e:
55:c7:f9:69:6b:f7:1f:ed:33:dc:3c:97:cb:4d:ca:
ce:9b:79:02:34:9a:48:5e:19:fe:c1:62:01:08:15:
7f:6e:4f:66:8c:a6:4e:e7:e1:de:e7:b3:ac:db:90:
8d:6e:65:c1:d5:14:f8:17:88:8e:c8:dc:35:56:3e:
65:be:a4:ee:6e:31:b0:cb:54:93:d8:8d:2e:24:9f:
99:c3:0a:30:53:92:a0:7a:b2:c8:07:d3:8e:b4:63:
79:05:01:c3:07:71:d5:0c:0d:8c:fd:1c:b9:60:4b:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:68:E2:77:E5:29:F9:11:6D:4C:21:53:85:B0:31:3C:49:23:F6
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/e59o4nflKfkRbUwhU4WwMTxJI_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.60.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:41:68:f8:ae:8b:d3:c7:74:ea:37:72:cb:3b:25:ca:af:3b:
d2:bb:53:a5:9b:48:ee:bd:3d:73:11:bf:09:96:4d:ca:aa:23:
a9:37:13:58:49:48:35:88:7b:6e:16:53:00:6e:36:c7:de:9f:
15:57:3e:90:63:5e:6d:d2:10:54:a6:48:aa:bf:89:d4:b6:49:
a1:18:55:1a:54:53:49:c2:90:47:ed:ae:9b:58:ab:d8:0b:2d:
d8:1f:63:ec:b1:e3:f4:35:c5:52:f6:43:4f:d9:34:60:89:c0:
f3:0a:e9:ba:89:57:dc:40:eb:5f:74:c8:4d:bf:e5:36:a1:d0:
8f:c6:f9:d1:59:6b:3e:d8:64:d5:fc:dc:e2:49:a9:34:8d:ee:
01:47:c5:97:fe:71:87:7e:22:12:2d:d7:c9:25:b9:e8:e2:32:
56:be:cd:66:59:7a:ba:34:74:a8:87:80:ce:f5:3e:f6:1f:3f:
f2:33:0f:1f:c2:31:5d:fb:e4:6b:81:4a:f8:41:e9:99:67:ee:
41:a6:19:2e:80:dc:0b:de:58:d0:a4:00:75:42:cc:be:bf:38:
b6:ba:e2:71:53:4e:51:2b:fc:42:ce:ac:29:15:7e:10:4d:01:
a3:9d:a8:d3:f8:56:b5:42:e7:a8:28:21:7e:97:c1:3d:a4:48:
ca:27:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:54:36 2025 by rpki-client