Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3r_EWVoBd4jJROvtne5unIz1q1s.roa
File: 3r_EWVoBd4jJROvtne5unIz1q1s.roa (raw, json)
Hash identifier: lSUFnGM1JAdOjtlZEu5qycFnPVKo+FdF/d3DkilX7dE=
Subject key identifier: DE:BF:C4:59:5A:01:77:88:C9:44:EB:ED:9D:EE:6E:9C:8C:F5:AB:5B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199008985A9945EEC2F5DF67FF10DBC9B9A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3r_EWVoBd4jJROvtne5unIz1q1s.roa
Signing time: Sun 31 Aug 2025 14:30:36 +0000
ROA not before: Sun 31 Aug 2025 14:30:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198831
IP address blocks: 79.172.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:00:89:85:a9:94:5e:ec:2f:5d:f6:7f:f1:0d:bc:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 31 14:30:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=debfc4595a017788c944ebed9dee6e9c8cf5ab5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:5f:1a:2d:ba:0d:73:a3:05:37:77:27:40:
60:06:e0:91:8e:63:20:37:ba:33:d4:71:3d:de:c1:
67:f1:2a:50:6f:af:c3:ff:0b:30:dc:d6:95:7e:bd:
b6:98:f3:cc:73:4e:d7:77:4a:1e:e2:b1:2e:a7:b0:
6f:07:34:15:67:2e:bc:06:2c:0c:c7:9f:af:00:03:
2d:0d:5d:58:70:96:93:36:a3:a4:7c:49:95:68:39:
c6:71:3d:e4:56:f4:88:7f:e9:96:d4:44:fc:fc:ca:
b7:71:49:9a:2e:03:4a:34:18:1d:d3:35:e3:9f:b4:
8e:f3:17:fd:af:70:4a:59:78:14:11:d3:5d:d6:24:
f4:88:b7:88:ef:31:26:00:ff:f9:e6:a9:ad:c9:7e:
a9:37:fc:97:23:a7:a3:96:b0:61:f3:ac:ca:9c:43:
33:f8:03:65:7c:c6:ed:f4:2f:f3:19:6d:64:5a:b1:
99:6f:ea:b9:47:bb:48:74:af:36:74:3e:b0:cf:42:
32:82:82:d7:4d:0a:b9:e9:de:e4:0f:82:95:6c:9b:
37:f5:dc:92:c5:4c:8a:87:f3:70:2c:77:0e:fc:89:
1e:ba:56:50:12:f9:4c:6b:4a:22:e5:30:d9:21:f9:
07:3c:08:cf:53:35:e7:6d:d6:dc:d6:b6:35:84:35:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:C4:59:5A:01:77:88:C9:44:EB:ED:9D:EE:6E:9C:8C:F5:AB:5B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3r_EWVoBd4jJROvtne5unIz1q1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a7:11:9e:7f:15:b8:97:71:99:a6:ab:b1:69:69:0e:4d:6e:
68:78:e8:57:bb:61:a3:fd:1f:4f:07:09:9f:79:3f:d9:d5:23:
92:ab:2e:41:43:ce:e8:64:c3:e4:60:57:ac:45:fe:6a:d5:66:
8b:b6:46:0b:7f:ab:e0:64:00:f8:84:b8:42:b7:77:17:2d:39:
b8:a0:7f:c2:2c:a3:1b:3a:9d:05:39:f9:08:75:a5:b7:d0:bb:
28:03:e2:f9:aa:bb:ce:17:ce:97:d3:88:84:82:db:64:5b:60:
dc:59:73:93:d5:55:fa:0c:63:db:99:23:cd:98:69:c8:f8:a0:
c1:60:35:e9:49:34:4f:79:89:30:fe:ef:f0:95:c4:c0:f5:7e:
91:cf:91:48:89:05:df:4d:9f:53:83:f6:4d:a3:d6:41:9f:80:
6d:3e:90:72:f1:47:1a:8c:6b:d4:3a:7a:07:ab:72:57:76:23:
56:71:64:bc:f0:7e:09:88:1e:e9:26:48:45:be:8d:b8:6f:65:
35:d3:d7:9f:a9:52:8e:09:12:aa:e0:e3:7b:1a:78:02:8c:8d:
bf:99:82:b1:2d:50:b7:36:26:43:3d:2b:8e:ac:9f:c2:33:45:
48:4a:c4:80:c5:ba:6e:34:30:09:fc:c8:48:4f:48:78:6b:52:
2c:b3:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:49:30 2025 by rpki-client