Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQAp6P83AZMrhzpHXnsNEonbWlc.roa
File: JQAp6P83AZMrhzpHXnsNEonbWlc.roa (raw, json)
Hash identifier: HYQq5gMyAAc3ltk/IwRWn9t2blc9PQbELU+0cnMzVy0=
Subject key identifier: 25:00:29:E8:FF:37:01:93:2B:87:3A:47:5E:7B:0D:12:89:DB:5A:57
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197039AF12B38565392BC14BD1E26D529F9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQAp6P83AZMrhzpHXnsNEonbWlc.roa
Signing time: Sat 24 May 2025 18:42:55 +0000
ROA not before: Sat 24 May 2025 18:42:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:9a:f1:2b:38:56:53:92:bc:14:bd:1e:26:d5:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 24 18:42:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=250029e8ff3701932b873a475e7b0d1289db5a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:58:24:23:9a:15:4d:e3:75:5e:52:64:b4:
97:47:0e:9f:70:57:98:ea:c7:59:ab:24:cb:61:e9:
d1:3b:b8:b3:88:a3:e1:d2:de:c3:b6:56:49:5e:73:
b0:9c:90:9f:e0:4d:dc:8a:95:3a:ac:f8:c0:8d:f2:
b9:65:36:7b:32:cd:13:cc:87:7a:75:9e:e0:cb:67:
5d:fc:cb:44:76:51:3f:77:33:b0:a2:02:4d:22:03:
fb:60:2c:b2:74:0f:92:c8:1f:b1:60:df:e6:c0:3b:
a6:94:6e:6b:9a:3e:ee:77:e0:52:a9:ff:b6:5d:23:
79:2a:33:7c:c8:1d:31:ae:56:7e:d7:13:58:3f:c1:
84:b5:03:c5:fe:da:ca:f9:3b:4d:f0:c7:11:36:d8:
cd:a3:ac:de:67:16:a2:ff:73:92:3c:8f:05:d6:87:
12:c5:ba:c7:1b:46:b1:22:1e:b9:73:4b:a0:20:8e:
42:09:7e:7c:38:d0:f9:d2:2f:b9:bf:e6:7e:14:78:
13:7d:b7:12:95:fc:5d:96:8b:ac:fd:34:33:f5:0f:
a3:53:93:36:c2:7a:37:cd:da:c1:95:78:e9:4b:ec:
ed:2b:c3:a6:cb:bb:96:19:ac:d5:b7:6a:bf:42:5d:
0a:d7:67:78:dc:46:77:59:4f:77:79:25:fd:e0:f5:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:29:E8:FF:37:01:93:2B:87:3A:47:5E:7B:0D:12:89:DB:5A:57
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JQAp6P83AZMrhzpHXnsNEonbWlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
17:55:4d:8f:db:4d:ef:4b:9b:f3:64:79:42:a6:f0:dc:6e:91:
62:9e:a1:c5:04:d8:c0:04:bc:49:6a:7d:d5:77:4e:41:30:90:
16:07:af:d8:b5:92:54:15:38:4c:22:13:1e:8d:5e:96:f5:b3:
6b:e8:10:6a:37:b8:55:9a:05:e1:ef:45:d9:76:c1:8b:70:d5:
0f:e9:ab:01:a0:dc:30:cf:bf:7e:f3:23:8a:84:7d:26:dc:67:
99:a1:23:8a:fe:96:fa:dd:80:71:dc:45:07:b9:9b:f3:50:aa:
d4:a1:96:0e:6a:44:66:0e:a6:3c:84:a0:8a:35:c4:5d:32:e7:
cc:e5:f2:85:a1:24:52:14:f4:c8:11:40:97:ff:e0:c9:e1:88:
5a:01:28:4e:11:dd:f6:89:99:1b:51:e3:9d:2e:63:8d:4a:a2:
a8:10:e5:f6:d6:59:bb:0c:35:35:c5:e0:f7:37:26:cc:59:88:
62:fb:37:b5:01:9e:f2:44:ff:27:97:9e:47:5b:a5:4d:d9:5f:
c1:20:6f:02:f1:5f:88:f8:3a:b2:3f:29:21:4c:09:77:f2:e5:
76:79:c8:67:8b:b7:2b:0a:b1:88:17:a4:9a:0d:88:35:0f:b5:
68:f8:34:93:da:fb:8b:cf:72:0f:29:7f:0a:a7:f0:84:4a:5b:
bd:b0:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:15:55 2025 by rpki-client