Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AkcbU56tJZm3ZHeKolxwbL_vDf8.roa
File: AkcbU56tJZm3ZHeKolxwbL_vDf8.roa (raw, json)
Hash identifier: X4+0xfjzIx2cqJXhEbvgiQUFt07fUcfNmE/eEIK89JM=
Subject key identifier: 02:47:1B:53:9E:AD:25:99:B7:64:77:8A:A2:5C:70:6C:BF:EF:0D:FF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019952FD9A508682EBD9A810D4BFAF116E27
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AkcbU56tJZm3ZHeKolxwbL_vDf8.roa
Signing time: Tue 16 Sep 2025 14:46:15 +0000
ROA not before: Tue 16 Sep 2025 14:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401476
IP address blocks: 87.229.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:fd:9a:50:86:82:eb:d9:a8:10:d4:bf:af:11:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 16 14:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02471b539ead2599b764778aa25c706cbfef0dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:2d:40:90:24:15:b9:e2:13:17:b3:3e:67:
2e:0f:35:59:13:ad:52:d9:36:21:b2:b4:50:bd:bf:
ed:fa:04:77:4b:46:92:a5:9d:9d:26:07:fc:d5:0f:
f9:9f:f2:b9:f0:b2:03:2f:7b:72:f4:a3:cd:50:74:
c8:88:8e:1d:d5:cd:ee:e5:58:29:2f:6a:98:77:12:
a2:9f:cb:61:36:10:96:f0:74:3a:89:52:13:99:4c:
e2:e4:52:de:88:44:c4:98:b5:9f:2d:9b:c2:12:df:
73:62:b4:21:02:ca:13:a3:2a:fb:4a:b1:e4:c2:c3:
79:5d:7c:9b:65:b9:1b:d2:4e:e7:84:05:4d:72:0b:
ef:78:ec:d2:eb:9e:80:92:d1:ef:7b:46:80:d6:de:
31:57:3e:bb:1c:eb:e6:c2:0a:cf:3b:45:7e:b2:d5:
3b:65:d7:5c:32:da:b1:bf:20:fe:0b:a7:3d:fd:e6:
21:1d:1f:12:2d:19:53:65:5a:96:d9:d4:02:e0:1b:
fb:5c:3c:f7:16:f3:ab:1d:ba:aa:de:c7:eb:3a:e2:
2f:19:ef:fc:25:8f:bb:48:fb:81:6d:0f:9a:af:3a:
3c:e4:b5:db:7a:0f:53:d6:73:02:82:25:6e:c0:cc:
99:ca:ce:6a:21:e8:d0:9c:41:29:1e:3d:8b:c1:14:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:1B:53:9E:AD:25:99:B7:64:77:8A:A2:5C:70:6C:BF:EF:0D:FF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AkcbU56tJZm3ZHeKolxwbL_vDf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.79.0/24
Signature Algorithm: sha256WithRSAEncryption
78:22:68:66:84:de:ec:c5:83:95:32:07:31:c4:d4:27:ce:e7:
d3:8d:a2:a6:b1:25:7c:c9:af:ba:df:c1:d8:08:b1:44:45:72:
b5:48:8b:e3:57:5f:2d:cd:c5:8a:3c:28:01:1c:cb:e2:40:ed:
18:bc:b8:c2:6f:15:6a:44:73:3f:c9:32:5d:be:a1:76:5a:94:
ec:a5:04:45:f8:d0:bf:d2:72:cb:31:a9:b4:31:1f:90:91:50:
f1:02:a5:12:bd:16:c8:8e:8a:d0:73:68:98:91:45:ab:de:c2:
57:94:14:e1:13:63:38:f5:76:96:a5:ad:49:fc:d6:f6:e2:28:
35:d9:03:b8:1b:a4:e1:e4:7b:df:f1:b6:b4:25:25:89:7f:59:
08:42:38:ad:38:86:66:7e:6e:ff:95:36:92:0e:1f:13:09:2f:
95:16:10:ef:84:bf:66:de:01:9f:cf:fd:8e:94:94:a2:b6:4f:
80:34:ff:1e:39:ab:c7:1c:cf:11:08:61:77:b3:75:0e:66:13:
93:f1:f8:d3:3a:b7:f4:ff:b1:1f:a1:1e:96:2e:8e:45:1f:6b:
95:7e:96:01:33:d6:f9:5c:46:aa:f9:ea:87:61:93:00:f1:11:
8b:64:68:7b:75:93:4a:40:74:2d:cb:3f:95:1b:6c:af:03:c9:
07:fd:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:07:37 2025 by rpki-client