Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oKTVde28BtloXoQYPwTZTScvPgg.roa
File: oKTVde28BtloXoQYPwTZTScvPgg.roa (raw, json)
Hash identifier: GrANROJwoAAjdxCdF8yEVE5v9BY26Tuf6ROiaNXCLjw=
Subject key identifier: A0:A4:D5:75:ED:BC:06:D9:68:5E:84:18:3F:04:D9:4D:27:2F:3E:08
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199326FA803489405211181E85AC96719A3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oKTVde28BtloXoQYPwTZTScvPgg.roa
Signing time: Wed 10 Sep 2025 07:03:22 +0000
ROA not before: Wed 10 Sep 2025 07:03:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.193.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.254.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.23.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6f:a8:03:48:94:05:21:11:81:e8:5a:c9:67:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 10 07:03:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a4d575edbc06d9685e84183f04d94d272f3e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:20:42:7e:67:4d:24:28:6e:39:f7:aa:03:
dd:cf:57:88:f9:49:c7:89:61:39:4d:00:cc:f1:3a:
63:5e:46:c0:19:52:00:30:e0:e0:6d:12:f2:44:46:
95:99:ff:7e:e7:e7:79:6e:4e:60:db:fd:18:4b:9d:
dd:98:36:11:2f:8d:de:19:73:55:30:61:f3:fe:41:
d5:19:a2:0e:61:c7:58:a4:2f:9a:53:53:c7:e1:f0:
a4:83:cb:dd:25:9c:fe:29:e7:de:37:8f:e6:44:12:
fd:0b:14:f4:e8:50:a2:3d:75:9b:fc:1a:fd:80:9e:
86:3d:91:a2:33:7f:eb:c3:35:e7:f9:e0:51:47:74:
62:0e:b6:b0:91:75:23:2d:11:5c:11:0b:6a:00:e9:
77:e3:1d:87:28:f6:a5:f1:56:5e:f8:8a:e8:e6:f3:
82:1a:8a:cb:e3:ac:9e:d8:cc:f2:f7:4a:09:3c:a6:
94:56:5e:04:d0:d6:3b:a9:d0:f3:a6:8e:c4:e7:20:
47:f2:54:05:41:5d:17:0e:2b:89:1d:e2:a1:4f:84:
1f:3a:9f:ee:86:ec:3c:49:6e:19:09:16:54:01:e4:
6f:ec:05:47:86:cd:d0:d3:8f:38:f5:31:a6:dc:99:
3e:77:87:a8:7f:7c:b1:40:52:3a:68:43:d3:66:4b:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A4:D5:75:ED:BC:06:D9:68:5E:84:18:3F:04:D9:4D:27:2F:3E:08
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oKTVde28BtloXoQYPwTZTScvPgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.193.0/24
79.172.228.0/24
79.172.254.0/24
87.229.11.0/24
87.229.23.0/24
87.229.37.0/24
87.229.80.0/23
87.229.112.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
93:b3:fa:e9:ce:40:9a:fe:d9:d4:59:02:74:be:79:0c:4b:a9:
1f:ca:99:82:d4:6b:a2:5c:96:60:3f:22:17:92:bb:a3:86:2b:
69:25:95:b2:39:ff:a0:2a:6a:af:1a:32:d3:a2:42:77:3e:a5:
77:21:11:bd:20:32:b7:35:bd:ef:1d:a1:54:49:86:f3:aa:9d:
73:cc:42:7c:7f:69:eb:f4:45:fb:5a:bb:fa:86:86:83:30:b0:
67:e2:73:5c:a0:21:ca:21:c0:1e:3f:eb:98:da:a4:48:d6:01:
1d:fc:aa:d3:a0:48:29:7f:8d:66:d5:99:56:18:19:53:28:49:
96:7f:d6:38:78:7d:36:93:9d:a1:a3:e4:6a:f2:0f:93:d3:b3:
79:5c:7a:67:4f:13:36:0a:3c:e8:42:6a:be:0d:57:a0:2f:f8:
b1:d6:c7:4e:c2:9e:ee:e3:77:95:73:af:e6:91:66:27:38:d6:
db:72:89:6e:e8:8f:5c:cc:71:3f:7a:fa:49:34:0d:73:69:88:
f5:b8:e7:9f:0d:94:af:1a:50:b6:f9:85:a5:64:0b:c7:7f:36:
2d:05:5d:09:bf:99:fb:66:c6:cb:f8:d2:d3:73:2f:f8:d5:c1:
ee:e2:0a:58:01:a2:62:2b:57:51:a8:22:9c:ba:95:b5:dc:47:
62:6f:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:21 2025 by rpki-client