Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KQotbvkLfytLnyDP-zzBbZHLGxA.roa
File: KQotbvkLfytLnyDP-zzBbZHLGxA.roa (raw, json)
Hash identifier: H7v+Db25YnfV8ZipfASvM1nqenpsFd8dV7mt6ntjYNw=
Subject key identifier: 29:0A:2D:6E:F9:0B:7F:2B:4B:9F:20:CF:FB:3C:C1:6D:91:CB:1B:10
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199059BBDEC39C8CAD0CFA9216321CD4CDB
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KQotbvkLfytLnyDP-zzBbZHLGxA.roa
Signing time: Mon 01 Sep 2025 14:08:36 +0000
ROA not before: Mon 01 Sep 2025 14:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51031
IP address blocks: 79.172.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:9b:bd:ec:39:c8:ca:d0:cf:a9:21:63:21:cd:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 1 14:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=290a2d6ef90b7f2b4b9f20cffb3cc16d91cb1b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:68:d4:26:3f:42:98:04:a8:42:0a:23:f4:
cf:96:0a:00:7d:fb:d1:f7:0b:05:b7:af:48:ea:4b:
07:99:e2:85:79:74:67:de:c7:b5:f9:c9:eb:e1:08:
43:65:20:a5:57:fc:cb:b1:2c:95:e2:45:70:5e:97:
de:5b:7a:78:84:4d:98:12:c9:19:3d:b4:21:f6:e5:
db:9e:45:52:90:76:64:a7:ef:2f:78:2f:b0:ca:b4:
92:03:b8:40:06:5a:a6:f7:fa:b6:dc:9f:ad:66:53:
f8:7c:45:bd:78:d1:d5:d8:cd:6f:90:b6:e7:ea:46:
83:30:7a:be:ff:ae:c3:8f:5f:fe:29:06:0c:36:b4:
05:01:dc:8e:cb:25:a9:20:5f:f4:e0:ed:65:52:20:
a8:5d:1d:c8:a0:55:d7:77:56:00:ef:e5:d4:dc:35:
f0:dc:96:60:c8:90:7e:a2:a4:e9:cd:8e:ce:85:3a:
13:ee:15:e9:b3:c7:e1:f8:5a:09:7a:d8:46:45:e2:
6a:97:06:05:62:d2:14:77:45:16:b0:d0:ba:bd:73:
b3:f1:ff:9a:8b:3e:a4:87:6d:f4:ac:9b:88:8b:2b:
db:d5:0d:87:ce:83:0a:a6:1b:db:0e:2b:15:a1:fd:
31:38:49:83:6d:fb:37:33:8d:2a:46:fe:23:f6:44:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:2D:6E:F9:0B:7F:2B:4B:9F:20:CF:FB:3C:C1:6D:91:CB:1B:10
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KQotbvkLfytLnyDP-zzBbZHLGxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2f:f3:e9:a5:fd:88:f7:ff:45:48:0e:13:9b:9a:96:d6:00:
cc:90:37:3d:81:fd:84:71:88:15:10:c7:89:48:75:89:20:2d:
20:75:20:c0:26:a4:ba:0e:9a:78:d2:85:d9:b7:28:91:b7:04:
ae:bf:0f:61:fd:23:6c:b4:96:77:80:c8:60:43:f9:c5:bf:06:
01:5b:17:a4:75:66:3d:29:ba:ce:89:bc:11:54:1d:2c:db:af:
d4:e5:b8:65:89:14:ea:1c:60:bd:27:d1:c5:d2:d7:31:5c:12:
09:a0:73:4b:e5:26:a2:f4:53:1d:0d:38:26:e5:e9:4d:48:8e:
e8:21:46:47:22:b0:73:c3:49:f5:6d:f3:35:49:cb:3c:90:42:
ed:9d:26:5a:50:b7:c2:52:cc:ff:ea:df:87:a2:5c:94:5d:ac:
ce:49:b6:fd:e7:fb:e4:2d:f0:78:e2:bb:4f:66:dd:01:d3:4d:
dd:ec:4a:83:b1:f8:fd:d1:1b:24:df:9e:40:a8:44:98:b7:ae:
3a:ea:61:f7:ce:6d:8b:ab:50:68:d1:30:64:5a:df:b4:67:7f:
86:ee:ea:ec:cb:e0:60:d5:33:cb:ed:6b:5f:d9:14:75:4d:e6:
cb:1b:f6:d0:dd:05:37:2e:25:8d:b7:9b:13:c2:09:71:43:ab:
36:6e:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:39:53 2025 by rpki-client