Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6EIkVlu5uXlFvfqUjHMYL2u9s0.roa
File: I6EIkVlu5uXlFvfqUjHMYL2u9s0.roa (raw, json)
Hash identifier: 4xFUOiXAdLaoRDrzMRHXZ2Vil3yjZds+v24xklYw6UM=
Subject key identifier: 23:A1:08:91:59:6E:E6:E5:E5:16:F7:EA:52:31:CC:60:BD:AE:F6:CD
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198C177B59EB806A3E78E9C571169C84710
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6EIkVlu5uXlFvfqUjHMYL2u9s0.roa
Signing time: Tue 19 Aug 2025 08:35:04 +0000
ROA not before: Tue 19 Aug 2025 08:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 79.172.214.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:77:b5:9e:b8:06:a3:e7:8e:9c:57:11:69:c8:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 19 08:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a10891596ee6e5e516f7ea5231cc60bdaef6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:85:92:15:e3:b2:49:35:de:82:2b:55:1c:
af:30:b1:07:9a:df:d7:64:1d:0e:aa:a3:b1:3f:df:
d6:a7:da:ae:00:fb:49:7e:b4:e7:cc:43:27:bb:f5:
cf:ab:e9:5b:3b:18:79:a4:54:1c:90:f7:bb:68:d2:
6d:35:7d:ca:cb:cc:d7:d4:f0:28:88:ea:48:cd:3d:
1f:c2:08:0e:b8:73:4e:6f:2b:3a:1b:81:86:98:2f:
1f:4b:c5:5c:89:31:4a:33:54:86:1d:da:f2:39:d7:
61:11:0a:f7:60:50:56:19:09:c7:59:9d:35:2f:34:
6a:77:f2:2d:3d:8d:ea:40:b6:2c:f2:19:f9:e0:5d:
24:15:c3:c2:79:7d:ed:4d:66:53:df:b2:a9:89:d0:
54:75:40:3e:ca:b4:f7:12:24:80:54:54:41:d5:3d:
ac:91:4c:0a:02:d8:36:03:df:03:a3:39:53:da:db:
93:f2:5c:ad:e9:bd:4b:b3:64:00:77:48:a4:38:b9:
47:ae:7b:ff:aa:53:6d:05:b7:e6:22:65:95:36:5b:
7a:97:bd:ed:81:69:97:fb:0d:8e:dd:43:d9:d5:01:
31:29:ec:2d:68:f7:a6:30:51:19:c7:57:90:dd:e4:
3c:8f:3f:5b:85:a3:43:cd:ec:12:21:5e:af:53:dd:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:08:91:59:6E:E6:E5:E5:16:F7:EA:52:31:CC:60:BD:AE:F6:CD
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/I6EIkVlu5uXlFvfqUjHMYL2u9s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bf:88:e4:4d:17:65:b6:ce:b8:f8:17:05:a3:06:3e:c8:00:
c3:15:c9:27:01:6c:99:e4:21:e3:af:a5:8c:d1:15:ef:2c:80:
d4:fc:f8:b6:aa:36:f1:ce:ec:0d:6b:0c:cd:8c:d0:45:7c:8d:
d8:94:b7:86:85:89:55:bc:7e:99:27:f6:53:e1:81:9d:10:50:
39:8c:86:d7:37:62:8a:8c:e0:d9:34:df:8d:92:86:35:0d:84:
96:5f:14:2a:7f:d2:fa:28:62:33:8d:db:3d:7a:bc:2e:48:43:
fa:d3:0f:c6:74:8a:5c:e6:e0:f9:16:f1:3f:56:7a:ce:c6:32:
bd:9d:e1:d2:b8:05:79:98:df:24:67:3f:81:39:03:eb:08:96:
5e:bb:be:d3:8b:7a:e0:42:62:3e:3c:b8:57:f6:6d:c6:52:67:
4a:55:1d:1d:7f:b7:b0:39:0a:25:12:ed:cb:bc:5f:8b:18:e1:
0c:0b:e9:44:4a:93:d2:65:bc:09:23:bc:b9:a2:7c:e5:9e:7a:
44:a4:5f:cf:ba:8b:21:37:7d:82:4b:2f:6c:57:16:40:e5:92:
27:86:37:51:9a:13:f5:3a:bb:6e:32:dd:b7:00:d8:f2:d2:4c:
5f:fc:56:be:5f:6b:8c:80:49:35:06:07:94:64:cc:ad:b5:ea:
07:2d:6f:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjBd7WeuAaj546cVxFpyEcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwODE5MDgzNTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2ExMDg5MTU5NmVlNmU1ZTUxNmY3ZWE1MjMxY2M2MGJkYWVmNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYWFkhXjskk13oIrVRyvMLEHmt/X
ZB0OqqOxP9/Wp9quAPtJfrTnzEMnu/XPq+lbOxh5pFQckPe7aNJtNX3Ky8zX1PAo
iOpIzT0fwggOuHNObys6G4GGmC8fS8VciTFKM1SGHdryOddhEQr3YFBWGQnHWZ01
LzRqd/ItPY3qQLYs8hn54F0kFcPCeX3tTWZT37KpidBUdUA+yrT3EiSAVFRB1T2s
kUwKAtg2A98DozlT2tuT8lyt6b1Ls2QAd0ikOLlHrnv/qlNtBbfmImWVNlt6l73t
gWmX+w2O3UPZ1QExKewtaPemMFEZx1eQ3eQ8jz9bhaNDzewSIV6vU92SrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOhCJFZbubl5Rb36lIxzGC9rvbNMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvSTZFSWtWbHU1dVhsRnZmcVVqSE1ZTDJ1OXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6zWAwQA
V+VwMA0GCSqGSIb3DQEBCwUAA4IBAQByv4jkTRdlts64+BcFowY+yADDFcknAWyZ
5CHjr6WM0RXvLIDU/Pi2qjbxzuwNawzNjNBFfI3YlLeGhYlVvH6ZJ/ZT4YGdEFA5
jIbXN2KKjODZNN+NkoY1DYSWXxQqf9L6KGIzjds9erwuSEP60w/GdIpc5uD5FvE/
VnrOxjK9neHSuAV5mN8kZz+BOQPrCJZeu77Ti3rgQmI+PLhX9m3GUmdKVR0df7ew
OQolEu3LvF+LGOEMC+lESpPSZbwJI7y5onzlnnpEpF/PuoshN32CSy9sVxZA5ZIn
hjdRmhP1OrtuMt23ANjy0kxf/Fa+X2uMgEk1BgeUZMytteoHLW8T
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:06 2025 by rpki-client