Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y0LFc6AUTZ68Em1C7sn-Ina9iTw.roa
File: y0LFc6AUTZ68Em1C7sn-Ina9iTw.roa (raw, json)
Hash identifier: SGd2G+tiWTXjC22hlLOXc6xPcn5Fix/g5Y5inLR9bjY=
Subject key identifier: CB:42:C5:73:A0:14:4D:9E:BC:12:6D:42:EE:C9:FE:22:76:BD:89:3C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198F4DF131869BF6BD0B63DFC194BA17056
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y0LFc6AUTZ68Em1C7sn-Ina9iTw.roa
Signing time: Fri 29 Aug 2025 08:08:36 +0000
ROA not before: Fri 29 Aug 2025 08:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 79.172.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f4:df:13:18:69:bf:6b:d0:b6:3d:fc:19:4b:a1:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 29 08:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb42c573a0144d9ebc126d42eec9fe2276bd893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:60:df:bb:b9:d4:22:7f:64:9a:1f:13:43:
67:c7:f0:cf:d2:ac:df:4a:68:e9:46:1d:b2:b2:7f:
0d:b5:a1:20:31:51:bf:c8:c7:85:70:a7:ca:32:96:
ac:a8:cd:9f:0f:b6:b6:62:64:34:89:51:02:45:10:
1b:50:e2:95:d8:62:8a:2c:be:74:3a:42:fb:a8:1e:
0d:0d:30:21:e9:bf:91:9a:a7:5a:f2:b3:1a:10:08:
1e:ba:af:31:c7:f0:59:57:d6:fe:98:ec:f9:37:a5:
73:c3:17:99:35:d1:7c:4a:b5:8a:fb:a3:71:ae:80:
dc:e5:32:4f:bd:ef:d8:78:46:43:a6:3e:db:09:86:
a5:5b:f6:4d:4c:68:70:f4:24:90:a8:64:c4:2a:0c:
95:95:e4:0b:ff:f3:ce:4a:74:35:bf:41:95:b3:39:
a1:87:ab:b3:1d:e9:98:b0:26:c4:67:26:33:4a:3b:
3e:fe:55:f4:57:9b:e9:ac:7c:da:35:46:b3:27:29:
df:6e:e3:07:f4:0e:cf:cf:d0:82:15:81:26:88:b8:
29:fd:b7:c2:49:d3:5e:00:41:53:17:4f:94:2f:e9:
97:ae:b9:0d:24:bd:ae:f2:39:eb:11:4a:49:ee:39:
11:b9:e6:a4:c7:82:4e:80:81:4a:d2:31:b0:a3:c5:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:C5:73:A0:14:4D:9E:BC:12:6D:42:EE:C9:FE:22:76:BD:89:3C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y0LFc6AUTZ68Em1C7sn-Ina9iTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1b:d4:6c:c1:1f:4a:05:80:4f:e8:46:f5:50:2b:3d:db:25:
42:55:f4:31:d2:78:90:e7:3a:1b:39:19:3f:36:1e:d3:6e:8d:
cf:7c:4d:fd:0a:24:ac:42:9d:03:7c:49:49:f7:ef:9c:9d:59:
59:de:0f:84:8a:c6:85:1f:79:b4:fb:fa:a3:70:81:e3:85:3e:
45:9e:9a:5e:9d:f3:59:e1:99:ab:51:8e:5a:ae:34:39:e3:3c:
04:76:e6:1d:70:6a:11:0f:7d:a4:e3:80:6b:6a:43:b5:93:32:
2a:be:25:46:0f:fc:a3:30:a4:06:4a:46:8c:8e:c8:12:e4:8f:
a3:fe:87:96:83:43:5d:1f:82:c0:a8:09:c1:1d:b4:06:1e:5c:
26:68:c0:3f:5d:24:bf:b4:b6:5f:74:1a:8e:a9:36:a7:b2:e5:
cb:e5:df:f1:ca:d0:ec:5b:c6:28:68:c2:44:af:ab:de:78:e4:
5b:dd:2a:8d:08:6c:dd:8c:68:5a:c3:2a:84:25:69:f8:43:e4:
02:6b:3a:df:cc:d2:6d:bc:3c:d2:0b:3d:a1:5a:b9:fb:47:74:
03:fc:43:38:f6:f3:6b:62:2a:a7:19:a4:be:44:64:32:9e:51:
66:de:84:6e:9d:b6:cd:4e:f9:52:06:b6:e1:e6:63:e8:77:66:
44:d7:d1:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZj03xMYab9r0LY9/BlLoXBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwODI5MDgwODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjQyYzU3M2EwMTQ0ZDllYmMxMjZkNDJlZWM5ZmUyMjc2YmQ4OTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bpg37u51CJ/ZJofE0Nnx/DP0qzf
SmjpRh2ysn8NtaEgMVG/yMeFcKfKMpasqM2fD7a2YmQ0iVECRRAbUOKV2GKKLL50
OkL7qB4NDTAh6b+Rmqda8rMaEAgeuq8xx/BZV9b+mOz5N6VzwxeZNdF8SrWK+6Nx
roDc5TJPve/YeEZDpj7bCYalW/ZNTGhw9CSQqGTEKgyVleQL//POSnQ1v0GVszmh
h6uzHemYsCbEZyYzSjs+/lX0V5vprHzaNUazJynfbuMH9A7Pz9CCFYEmiLgp/bfC
SdNeAEFTF0+UL+mXrrkNJL2u8jnrEUpJ7jkRueakx4JOgIFK0jGwo8XT2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtCxXOgFE2evBJtQu7J/iJ2vYk8MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEveTBMRmM2QVVUWjY4RW0xQzdzbi1JbmE5aVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zWMA0G
CSqGSIb3DQEBCwUAA4IBAQCOG9RswR9KBYBP6Eb1UCs92yVCVfQx0niQ5zobORk/
Nh7Tbo3PfE39CiSsQp0DfElJ9++cnVlZ3g+EisaFH3m0+/qjcIHjhT5FnppenfNZ
4ZmrUY5arjQ54zwEduYdcGoRD32k44BrakO1kzIqviVGD/yjMKQGSkaMjsgS5I+j
/oeWg0NdH4LAqAnBHbQGHlwmaMA/XSS/tLZfdBqOqTansuXL5d/xytDsW8YoaMJE
r6veeORb3SqNCGzdjGhawyqEJWn4Q+QCazrfzNJtvDzSCz2hWrn7R3QD/EM49vNr
YiqnGaS+RGQynlFm3oRunbbNTvlSBrbh5mPod2ZE19Fe
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:30:50 2025 by rpki-client