Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/57poyjJYhI5XQCEp_7WYyWgDwW4.roa
File: 57poyjJYhI5XQCEp_7WYyWgDwW4.roa (raw, json)
Hash identifier: GLXoOJuQfc/0pKIcTk49XJcw4EIQdjuDsMxuP+XgxWg=
Subject key identifier: E7:BA:68:CA:32:58:84:8E:57:40:21:29:FF:B5:98:C9:68:03:C1:6E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019952C042997229EA5137EE0A9B7D946FBB
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/57poyjJYhI5XQCEp_7WYyWgDwW4.roa
Signing time: Tue 16 Sep 2025 13:39:15 +0000
ROA not before: Tue 16 Sep 2025 13:39:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 64.137.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:c0:42:99:72:29:ea:51:37:ee:0a:9b:7d:94:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 16 13:39:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ba68ca3258848e57402129ffb598c96803c16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ab:a4:8a:6e:6c:1f:bc:73:83:1c:c9:96:0b:
47:02:7b:bc:29:72:e2:61:b5:2d:37:68:55:f9:cb:
f8:44:02:c8:13:fe:e3:d1:77:4d:83:a1:6b:c2:47:
ae:40:3d:0d:35:9d:a2:59:c6:8e:08:ad:14:7c:6f:
4f:e8:85:44:53:cd:71:57:e6:1c:85:53:5c:00:bf:
8d:ed:c7:14:ca:0f:34:0a:cb:e1:91:f3:88:f6:db:
cd:90:0f:c6:36:67:fd:40:08:01:45:2a:7f:e3:0a:
90:ec:81:9a:38:87:a6:3d:e1:04:a0:29:e7:a7:cb:
0f:9f:48:83:1c:0f:56:ac:c2:96:e4:3b:3b:c1:72:
ce:40:e6:bc:ce:4f:99:03:c1:6e:86:58:50:bd:dc:
92:0e:98:4c:13:69:de:b5:d3:36:bb:a3:9f:9e:ba:
2e:53:4e:94:a8:4e:19:7a:bb:11:11:78:1e:5b:ba:
aa:c4:c3:1e:2c:5b:b0:90:14:13:e7:b2:2c:90:54:
21:63:c9:5d:71:5b:7d:89:92:68:65:51:82:24:0b:
33:df:9d:4a:0e:4f:71:4a:34:e2:9d:d1:26:a7:ce:
1e:74:e0:1d:d2:2c:f4:bb:16:c2:08:41:a2:23:53:
d2:3b:30:8c:63:f0:8b:f7:77:5b:63:b9:3c:8e:d3:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:68:CA:32:58:84:8E:57:40:21:29:FF:B5:98:C9:68:03:C1:6E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/57poyjJYhI5XQCEp_7WYyWgDwW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.111.0/24
Signature Algorithm: sha256WithRSAEncryption
09:41:cf:e7:82:cb:9f:69:13:aa:fb:6a:d7:4a:46:d7:ce:92:
b0:fd:9c:d3:9c:3c:a2:34:ab:c4:05:16:96:61:0d:b8:65:05:
0c:96:66:c0:db:40:a7:46:5c:ec:0a:36:76:be:63:73:a0:85:
c2:88:85:c9:3c:5c:57:b3:20:f8:07:4f:d0:d0:c8:d7:df:6f:
f7:0e:3e:75:ae:0f:82:a7:e2:2f:27:23:08:cb:de:ea:c9:2a:
c8:de:97:5c:4f:17:80:56:97:be:f1:ee:84:4d:b1:50:b0:e9:
a6:0b:51:78:98:6c:0f:6e:c9:ff:5a:9b:f9:74:b2:8b:b8:0c:
e8:22:4e:f6:ec:35:e5:c1:25:20:a7:56:d5:21:0a:d8:e1:2f:
68:6f:78:9a:ee:ca:43:80:49:8a:47:fb:c4:28:a1:ba:09:12:
4b:31:49:7e:15:5a:63:32:2a:4d:cd:2d:3d:87:17:2f:86:03:
b1:1d:1e:99:51:ca:77:59:2f:7a:5e:0b:c2:3f:5e:c5:48:89:
62:98:fa:41:74:57:d1:23:70:7c:f5:c1:c3:22:d8:1f:9d:5f:
de:3d:3c:3e:33:ad:78:22:74:4c:be:28:aa:e1:b9:72:02:40:
b5:67:98:e2:53:0d:d8:4b:91:4b:32:42:03:1c:ea:c8:47:22:
aa:76:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:12:02 2025 by rpki-client