Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Mddh9ZdI0kOyD14aCWdijS8xKD8.roa
File: Mddh9ZdI0kOyD14aCWdijS8xKD8.roa (raw, json)
Hash identifier: 5VwwwCIDEw82DqZe00uBRWQV1tK9jLhtgjUT7JyWhrk=
Subject key identifier: 31:D7:61:F5:97:48:D2:43:B2:0F:5E:1A:09:67:62:8D:2F:31:28:3F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019952FD99E17E577B334118B6F2CA3BD5F9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Mddh9ZdI0kOyD14aCWdijS8xKD8.roa
Signing time: Tue 16 Sep 2025 14:46:15 +0000
ROA not before: Tue 16 Sep 2025 14:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:fd:99:e1:7e:57:7b:33:41:18:b6:f2:ca:3b:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 16 14:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d761f59748d243b20f5e1a0967628d2f31283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:f7:05:85:aa:09:8f:42:18:17:8c:61:2f:
3d:97:66:99:43:44:08:75:43:c9:ad:de:b4:3e:d7:
b2:af:e8:c3:82:52:40:ff:46:13:2a:d6:b5:90:67:
a8:9d:f9:77:d0:59:cc:55:7c:29:ee:fd:73:2c:ca:
37:98:b2:3e:ca:f6:69:14:39:2d:4b:de:ee:32:45:
17:80:b7:5e:2e:cd:8c:27:b7:2b:7a:ec:64:77:87:
68:64:9a:51:3f:49:18:9a:66:b9:c2:36:0c:0b:22:
b8:99:8a:46:99:1c:53:f9:6f:5b:83:53:8b:49:da:
97:9a:b0:be:53:7b:1e:39:a4:a5:2d:c9:15:53:1f:
03:08:0c:a3:0a:8f:7c:dc:b8:7e:40:74:48:26:e9:
78:00:91:81:ff:7e:4d:e9:16:ae:76:8d:c1:ba:02:
8b:91:22:bd:88:49:a5:46:a0:8c:dc:be:97:15:e0:
0e:8e:e5:18:49:ec:de:a1:fa:50:81:96:ef:4f:16:
09:f6:61:6e:0d:67:43:be:10:70:f4:be:4e:60:0d:
d3:f3:29:b1:5a:42:b5:3a:b4:cb:f7:fc:bc:f2:bc:
9d:21:24:60:ae:34:44:83:d4:67:01:9d:ee:70:92:
e0:e6:be:52:cd:5b:08:40:39:95:c7:f5:e7:cb:80:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:61:F5:97:48:D2:43:B2:0F:5E:1A:09:67:62:8D:2F:31:28:3F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Mddh9ZdI0kOyD14aCWdijS8xKD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.250.0/23
87.229.8.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c1:60:cd:b7:a6:5f:6b:e4:f4:d2:d8:80:06:64:56:58:e4:
b9:5b:c3:62:b1:94:2b:bc:b5:d9:9d:4e:ca:4b:e1:5f:18:e7:
c8:37:ae:27:96:12:cc:79:bc:43:f7:50:bb:40:0f:d4:b9:36:
8a:55:fa:58:06:e0:2e:e1:75:43:9f:d3:e2:70:7e:80:67:4d:
e8:e8:45:dd:c7:c1:51:d8:2c:87:ca:5a:4b:60:7b:b5:fb:50:
83:fa:9e:29:a0:8e:94:76:f9:e6:3e:eb:0b:8e:d0:e8:bd:62:
a4:56:81:6f:ca:56:f9:7f:3a:cf:e7:49:93:81:17:44:0c:3a:
fa:19:38:77:55:7d:10:5d:5c:86:78:12:e0:0e:68:ea:18:cf:
dd:85:54:d8:6f:88:d9:0c:63:ef:f6:4c:70:d8:2a:52:7f:54:
2b:53:e4:31:04:2a:ad:6f:af:2d:70:7b:3d:51:5d:38:35:20:
60:67:ea:2d:7e:33:fa:98:d6:12:ef:89:fa:51:b1:bc:ae:c5:
ea:c0:bf:59:e8:a2:2b:cb:af:3e:f5:3f:de:36:1e:f2:a3:c9:
a4:47:75:f9:0e:b5:57:4b:ff:12:80:b1:c5:75:e1:43:08:02:
01:1e:6e:1f:aa:21:f0:c3:76:43:d4:08:a0:1b:3d:e5:a6:b1:
e3:d2:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:12:10 2025 by rpki-client