Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5VfBBY8o-FF5RY7s0zaWFHorhdI.roa
File: 5VfBBY8o-FF5RY7s0zaWFHorhdI.roa (raw, json)
Hash identifier: MEJ7BA63gOy4ZsbxMVinMlFma6agN7MnA7HJhj46ixE=
Subject key identifier: E5:57:C1:05:8F:28:F8:51:79:45:8E:EC:D3:36:96:14:7A:2B:85:D2
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01977DEDFB776DD691DDA2118308E96521CC
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5VfBBY8o-FF5RY7s0zaWFHorhdI.roa
Signing time: Tue 17 Jun 2025 12:47:17 +0000
ROA not before: Tue 17 Jun 2025 12:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 89.23.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:ed:fb:77:6d:d6:91:dd:a2:11:83:08:e9:65:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 17 12:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e557c1058f28f85179458eecd33696147a2b85d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:cf:bb:0c:ac:15:48:c9:61:b9:54:6a:bd:
27:44:9d:b8:6d:ef:21:fc:98:22:41:84:1f:06:a7:
5e:61:a1:5a:82:47:84:ba:9a:d8:ce:a2:c2:88:9c:
e4:24:b8:c6:0d:de:02:ac:13:d1:d6:9e:75:a1:02:
de:c4:14:13:e2:fd:30:6b:14:b7:98:8a:36:b4:02:
01:2b:06:a8:67:47:f9:26:e0:9e:6b:8a:28:af:99:
de:50:0c:62:93:ff:be:b6:56:96:96:37:91:b8:a8:
a9:ac:57:02:03:0f:a5:15:bf:e8:32:60:4c:9e:f1:
95:f5:b9:34:83:4a:ac:9d:97:12:92:25:40:8a:01:
ee:9d:73:5c:f8:81:3e:99:23:38:4a:63:d7:e1:e3:
ae:bc:9c:31:f6:b2:2b:bc:be:89:13:20:3a:8c:b9:
50:5a:03:87:87:1e:27:cf:c6:03:e8:80:1e:c1:b6:
cf:bf:71:9f:15:45:76:68:78:6d:bb:65:e6:e3:4a:
84:0f:69:46:f2:a7:2d:b2:39:af:8c:1e:03:7f:6e:
38:b8:73:ca:3c:bf:5f:9c:e1:30:e9:a0:79:9d:d1:
f7:84:1a:b1:91:c9:ab:ab:9a:37:a1:00:bf:c2:da:
16:a1:03:9e:3d:6c:1a:13:5f:cf:ee:fa:97:13:49:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:C1:05:8F:28:F8:51:79:45:8E:EC:D3:36:96:14:7A:2B:85:D2
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5VfBBY8o-FF5RY7s0zaWFHorhdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.81.0/24
Signature Algorithm: sha256WithRSAEncryption
48:22:90:5e:2e:71:d6:c9:d0:c4:f6:c2:5a:a3:6a:d4:d5:9c:
78:7d:7e:a9:4b:86:15:e6:3e:f9:0e:12:ef:8e:79:63:be:1f:
c3:6d:26:f6:87:df:86:90:75:91:51:b5:a6:a9:14:02:3e:6c:
b0:74:b0:ee:b3:41:b7:7a:81:28:08:7c:30:61:93:6a:8d:53:
66:a8:31:21:48:77:76:d8:88:1e:5b:34:f2:e7:b5:be:63:af:
d7:8c:59:4c:98:80:96:1e:ee:44:25:0e:f2:4a:48:d3:a3:36:
8b:dc:91:13:bd:90:3b:87:2b:72:8c:88:e9:b7:2b:75:3b:4c:
82:79:59:a6:3d:49:80:30:4b:d6:52:57:8d:b6:76:a5:b1:94:
ac:5d:71:55:85:23:33:34:d6:9c:85:e3:b7:03:c9:04:c7:29:
4c:22:12:d7:ef:f6:14:2c:f3:78:10:81:ae:f6:8c:6e:6c:00:
22:b8:09:a7:78:18:4f:3b:4c:22:c1:9d:48:43:4c:5e:19:cd:
cf:47:9a:9e:be:b8:43:dc:c4:dd:67:92:52:b8:62:d3:1d:e1:
7b:99:79:f1:76:2c:c0:c1:c8:b3:c4:5e:05:7c:c6:9d:2b:a1:
cd:05:be:f9:cb:7a:0f:b8:b7:31:c9:ac:71:5d:b6:a6:62:b3:
a2:bb:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:53:56 2025 by rpki-client