Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9UJIzUygh8e0nl-cG7dwhmIyU1M.roa
File: 9UJIzUygh8e0nl-cG7dwhmIyU1M.roa (raw, json)
Hash identifier: pvlOc8wn0JGoB4VhDOqNrpGNdjhPERp+h63vwO1iY7Q=
Subject key identifier: F5:42:48:CD:4C:A0:87:C7:B4:9E:5F:9C:1B:B7:70:86:62:32:53:53
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019725B5696B84F4835F8E967354334116B7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9UJIzUygh8e0nl-cG7dwhmIyU1M.roa
Signing time: Sat 31 May 2025 09:38:55 +0000
ROA not before: Sat 31 May 2025 09:38:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 87.229.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:b5:69:6b:84:f4:83:5f:8e:96:73:54:33:41:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 31 09:38:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f54248cd4ca087c7b49e5f9c1bb7708662325353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:2b:be:0b:34:dc:2e:bc:af:bb:81:f7:8b:
0a:25:2d:a4:95:a7:17:ad:f9:c1:47:38:4f:d6:a7:
02:1e:89:49:77:a5:66:53:d6:93:d1:75:2f:0b:95:
b4:96:69:dc:3f:45:76:cd:49:5c:c6:d1:70:39:d8:
a9:16:38:0a:92:c1:d5:c4:1e:fc:1e:4b:c3:fe:07:
ab:c3:a9:02:eb:43:40:64:7e:70:c0:e8:41:4d:57:
ac:53:0d:d4:01:36:e3:93:66:41:41:8e:b7:c8:c5:
fd:ee:de:7b:73:2d:e4:1d:f9:2d:2e:6f:41:77:12:
7f:c3:96:ce:87:3f:99:74:8c:37:c1:be:2e:de:88:
4a:da:56:3d:d5:5a:72:c8:56:24:13:ff:29:53:20:
d4:ba:9d:16:85:ac:df:84:04:9f:0a:88:ce:cd:f3:
43:72:53:59:da:af:e5:91:02:26:44:e2:99:99:f4:
eb:22:3c:e2:58:02:d4:84:b2:a1:e5:cf:2d:0d:b1:
b7:1c:01:2c:8f:b6:ab:d4:78:79:b0:a4:53:36:54:
86:6c:6b:a6:22:41:ca:91:4d:f2:d0:86:2e:05:2e:
dc:65:92:7b:b7:5a:ca:aa:76:d8:9d:9d:a2:ab:6a:
c4:87:5b:35:d1:b8:b2:ee:ea:88:d2:f2:55:8d:cf:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:48:CD:4C:A0:87:C7:B4:9E:5F:9C:1B:B7:70:86:62:32:53:53
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9UJIzUygh8e0nl-cG7dwhmIyU1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
Signature Algorithm: sha256WithRSAEncryption
69:88:f3:bf:6b:f3:3b:4d:5f:19:da:88:0e:48:b7:9e:60:bc:
04:81:7b:5b:be:84:55:1b:00:7d:ae:27:71:56:cb:71:1f:07:
66:67:63:24:b8:6f:79:3d:07:44:ab:e4:25:e4:3d:d2:61:c6:
23:3e:a7:66:63:84:bd:c8:69:b5:3e:10:29:4c:47:f5:70:23:
b5:81:a4:ea:87:58:3c:a4:70:c9:fb:1a:bb:91:3c:24:d3:69:
cb:51:4f:0e:83:42:01:a6:aa:14:ee:b9:21:be:ab:40:a2:3d:
41:cb:f5:ba:c4:bc:be:5c:f3:1d:5c:6d:ea:49:4a:73:c3:10:
ab:07:f7:19:a6:d3:bd:8b:9c:6c:02:e1:d3:2e:28:43:c6:cc:
a0:57:0b:c9:29:92:4f:14:a4:65:1f:f6:8d:f7:97:60:fb:8f:
c4:73:7b:1a:00:b5:98:55:0e:4c:07:83:62:ed:47:8e:b5:71:
ff:be:14:4f:41:90:3a:d8:e5:f6:28:f3:70:96:8b:30:71:4a:
5d:98:5d:51:e7:20:b7:39:fe:b2:d2:bb:82:02:86:00:ef:f3:
e7:6b:d4:b1:2c:5e:39:93:12:47:bf:bc:25:59:30:2b:d9:b2:
bf:66:48:4d:5e:fb:0d:db:64:04:cf:cb:77:3d:12:89:a4:00:
85:1d:e4:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcltWlrhPSDX46Wc1QzQRa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNTMxMDkzODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTQyNDhjZDRjYTA4N2M3YjQ5ZTVmOWMxYmI3NzA4NjYyMzI1MzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz0rvgs03C68r7uB94sKJS2klacX
rfnBRzhP1qcCHolJd6VmU9aT0XUvC5W0lmncP0V2zUlcxtFwOdipFjgKksHVxB78
HkvD/gerw6kC60NAZH5wwOhBTVesUw3UATbjk2ZBQY63yMX97t57cy3kHfktLm9B
dxJ/w5bOhz+ZdIw3wb4u3ohK2lY91VpyyFYkE/8pUyDUup0WhazfhASfCojOzfND
clNZ2q/lkQImROKZmfTrIjziWALUhLKh5c8tDbG3HAEsj7ar1Hh5sKRTNlSGbGum
IkHKkU3y0IYuBS7cZZJ7t1rKqnbYnZ2iq2rEh1s10biy7uqI0vJVjc8IiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVCSM1MoIfHtJ5fnBu3cIZiMlNTMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvOVVKSXpVeWdoOGUwbmwtY0c3ZHdobUl5VTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UWMA0G
CSqGSIb3DQEBCwUAA4IBAQBpiPO/a/M7TV8Z2ogOSLeeYLwEgXtbvoRVGwB9ridx
VstxHwdmZ2MkuG95PQdEq+Ql5D3SYcYjPqdmY4S9yGm1PhApTEf1cCO1gaTqh1g8
pHDJ+xq7kTwk02nLUU8Og0IBpqoU7rkhvqtAoj1By/W6xLy+XPMdXG3qSUpzwxCr
B/cZptO9i5xsAuHTLihDxsygVwvJKZJPFKRlH/aN95dg+4/Ec3saALWYVQ5MB4Ni
7UeOtXH/vhRPQZA62OX2KPNwloswcUpdmF1R5yC3Of6y0ruCAoYA7/Pna9SxLF45
kxJHv7wlWTAr2bK/ZkhNXvsN22QEz8t3PRKJpACFHeTX
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:53:23 2025 by rpki-client