Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/szyp5jv7zHjOYYDR6nQSR1nrseM.roa
File: szyp5jv7zHjOYYDR6nQSR1nrseM.roa (raw, json)
Hash identifier: sDzDBub8WyquOOdeNTMq5Etn3juK/uY2wC4T2Z5M7P8=
Subject key identifier: B3:3C:A9:E6:3B:FB:CC:78:CE:61:80:D1:EA:74:12:47:59:EB:B1:E3
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197AB046AF30CF113E515D39AC95060C83A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/szyp5jv7zHjOYYDR6nQSR1nrseM.roa
Signing time: Thu 26 Jun 2025 06:54:42 +0000
ROA not before: Thu 26 Jun 2025 06:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 87.229.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:04:6a:f3:0c:f1:13:e5:15:d3:9a:c9:50:60:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 26 06:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b33ca9e63bfbcc78ce6180d1ea74124759ebb1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:f0:b0:18:c0:80:e3:e4:64:b2:a2:97:df:
5b:ea:d7:40:20:a4:72:5e:c2:d6:11:d7:c6:e5:48:
f6:0d:c5:b8:3f:20:45:fe:a7:c0:12:14:a8:3b:74:
05:df:3b:e5:60:e0:4d:04:52:da:26:31:52:e5:15:
91:88:5d:d1:3e:58:27:28:93:50:eb:e5:5c:03:fb:
19:5e:59:2a:c8:49:19:d2:77:16:54:c1:9f:ff:a0:
3a:76:9e:0b:3f:d9:66:fc:3f:ab:50:46:54:45:e9:
f1:4a:eb:16:07:82:f9:a0:00:c2:c6:94:14:9d:7a:
a0:7a:bb:45:e6:7f:e9:d8:a8:0d:00:38:c1:f7:82:
e7:05:43:d4:3f:41:59:14:82:5b:09:2c:c2:c1:df:
c6:dc:86:d7:50:ca:03:13:28:17:ea:ba:b0:e8:b8:
71:8b:e3:00:18:d4:94:de:47:cd:f3:62:2a:ed:6d:
fc:76:6d:ad:92:40:1b:26:96:77:3a:89:e1:c6:2e:
6c:27:bb:79:95:36:81:4a:50:d7:f7:fd:a1:05:80:
54:6c:68:eb:7d:6b:77:8a:c3:32:63:37:53:9d:5c:
19:53:9e:7a:5d:8c:10:8f:48:43:66:26:75:65:22:
99:7c:c4:31:50:e7:f5:e5:45:f6:59:e5:78:62:25:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:A9:E6:3B:FB:CC:78:CE:61:80:D1:EA:74:12:47:59:EB:B1:E3
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/szyp5jv7zHjOYYDR6nQSR1nrseM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5f:3d:af:bf:b1:be:92:5d:9a:f1:f1:c2:ea:4e:b6:f6:59:
97:9e:0e:85:d8:9e:69:c2:e4:8d:6f:ea:26:e6:90:66:9a:ff:
b2:71:56:c8:ca:ab:5e:48:ae:57:bf:e6:fd:f8:4d:af:95:12:
99:15:cb:d3:91:34:2b:0d:85:21:e9:6f:23:a2:7f:4e:d6:21:
4e:a9:e5:74:77:9a:0f:5b:19:ac:16:81:bf:b2:06:10:48:10:
21:9f:71:37:f5:f8:33:f8:82:c9:05:d2:72:e6:fa:03:14:f1:
6a:de:94:18:5d:38:f7:82:17:cc:83:e0:c2:5b:8f:c9:07:66:
5b:60:e3:7c:58:88:25:65:36:04:19:5c:8b:47:8c:9e:33:65:
d7:8a:a8:2f:a5:ee:e0:4e:0d:dc:57:c5:fa:6f:7a:dd:29:7e:
ea:bc:4a:98:02:45:fc:7f:df:9b:07:d6:35:f7:5a:fd:b6:fd:
63:ed:b6:44:a9:ec:55:cd:fe:b2:d4:94:76:be:31:f2:3e:cd:
d4:7f:bd:67:9d:48:ea:58:48:37:ac:e6:54:ef:0d:31:1d:e4:
f8:41:4d:c5:9e:82:44:fb:06:87:6f:94:4a:ca:d1:71:30:b0:
2f:a9:90:f1:17:3d:2c:6f:4c:fa:d1:e6:18:8c:ad:b9:28:f4:
28:9b:f2:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZerBGrzDPET5RXTmslQYMg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNjI2MDY1NDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNjYTllNjNiZmJjYzc4Y2U2MTgwZDFlYTc0MTI0NzU5ZWJiMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tbwsBjAgOPkZLKil99b6tdAIKRy
XsLWEdfG5Uj2DcW4PyBF/qfAEhSoO3QF3zvlYOBNBFLaJjFS5RWRiF3RPlgnKJNQ
6+VcA/sZXlkqyEkZ0ncWVMGf/6A6dp4LP9lm/D+rUEZURenxSusWB4L5oADCxpQU
nXqgertF5n/p2KgNADjB94LnBUPUP0FZFIJbCSzCwd/G3IbXUMoDEygX6rqw6Lhx
i+MAGNSU3kfN82Iq7W38dm2tkkAbJpZ3Oonhxi5sJ7t5lTaBSlDX9/2hBYBUbGjr
fWt3isMyYzdTnVwZU556XYwQj0hDZiZ1ZSKZfMQxUOf15UX2WeV4YiXo4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLM8qeY7+8x4zmGA0ep0EkdZ67HjMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvc3p5cDVqdjd6SGpPWVlEUjZuUVNSMW5yc2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UsMA0G
CSqGSIb3DQEBCwUAA4IBAQALXz2vv7G+kl2a8fHC6k629lmXng6F2J5pwuSNb+om
5pBmmv+ycVbIyqteSK5Xv+b9+E2vlRKZFcvTkTQrDYUh6W8jon9O1iFOqeV0d5oP
WxmsFoG/sgYQSBAhn3E39fgz+ILJBdJy5voDFPFq3pQYXTj3ghfMg+DCW4/JB2Zb
YON8WIglZTYEGVyLR4yeM2XXiqgvpe7gTg3cV8X6b3rdKX7qvEqYAkX8f9+bB9Y1
91r9tv1j7bZEqexVzf6y1JR2vjHyPs3Uf71nnUjqWEg3rOZU7w0xHeT4QU3FnoJE
+waHb5RKytFxMLAvqZDxFz0sb0z60eYYjK25KPQom/Kt
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:42:07 2025 by rpki-client