Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/V7sEyI8F_t4vSol_353f4Qx9U_8.roa
File: V7sEyI8F_t4vSol_353f4Qx9U_8.roa (raw, json)
Hash identifier: 4ldqZs123aYTDkKfZo5JSLa9NcK75X2sS/vo6vIQh/0=
Subject key identifier: 57:BB:04:C8:8F:05:FE:DE:2F:4A:89:7F:DF:9D:DF:E1:0C:7D:53:FF
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 0199DDB73EFC8287A076E893085A39032149
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/V7sEyI8F_t4vSol_353f4Qx9U_8.roa
Signing time: Mon 13 Oct 2025 13:16:37 +0000
ROA not before: Mon 13 Oct 2025 13:16:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 82.147.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:b7:3e:fc:82:87:a0:76:e8:93:08:5a:39:03:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Oct 13 13:16:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57bb04c88f05fede2f4a897fdf9ddfe10c7d53ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:5a:4e:f0:da:06:28:5b:72:e3:59:d8:4d:
58:bd:2b:5a:f9:f8:31:b0:ac:a9:e2:a5:4e:02:e7:
32:d9:9a:c7:4f:d2:44:3e:4c:dd:32:9b:3d:84:5b:
49:ca:50:7f:37:60:3e:f9:be:3b:40:c0:03:99:42:
fc:40:ff:27:5b:c7:50:89:93:4a:54:d0:0e:24:b3:
13:c8:b5:50:86:06:eb:3e:68:62:5a:63:2f:38:4b:
59:1b:33:81:91:03:40:16:47:73:26:62:f7:a8:d7:
60:11:44:9a:fe:28:3d:c7:0a:e9:d8:88:20:57:df:
36:2b:be:5b:f9:51:f7:24:8e:d4:62:47:09:98:91:
98:77:f0:e8:76:fb:bb:7a:b8:f9:d8:f0:f4:6f:28:
ad:5d:05:17:61:5b:6d:f7:ae:27:18:1e:6c:dd:85:
fb:9c:0c:17:ad:82:0c:7b:47:a3:39:4e:da:91:dd:
4d:ed:63:88:2b:c5:15:ee:94:d5:87:e4:4e:f3:21:
5a:23:c0:1f:d5:92:d3:8a:4c:b2:fa:90:8c:4c:60:
af:fa:7e:ec:0d:21:97:bb:87:aa:25:28:39:b6:c7:
48:0c:6a:13:dd:30:53:79:3c:0c:d3:e0:f4:7a:3f:
72:11:d0:08:63:8e:d5:cb:93:22:ce:54:33:a9:b6:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:04:C8:8F:05:FE:DE:2F:4A:89:7F:DF:9D:DF:E1:0C:7D:53:FF
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/V7sEyI8F_t4vSol_353f4Qx9U_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:94:66:1a:52:84:76:a2:a8:a0:53:00:30:a7:50:54:9a:1f:
f4:67:c1:08:2f:46:f6:ff:db:fa:22:02:fb:6b:62:e4:6c:f7:
38:d0:92:00:f3:d5:06:df:d3:8c:3c:3e:da:ed:50:fa:05:60:
7e:09:7a:6f:29:46:11:c7:ad:23:33:2e:1b:23:d2:8a:79:23:
bd:e4:b1:1f:20:6f:da:7a:eb:9b:9d:18:d7:6c:7c:7d:02:ab:
31:91:97:53:f0:6c:28:7f:77:c9:ad:87:d9:13:b5:c3:1a:c9:
76:13:6e:b7:68:db:30:3e:48:70:05:84:c2:8e:2b:13:ae:9a:
73:62:c6:61:d3:56:a9:64:58:de:13:af:14:ea:8c:f0:0c:bb:
df:c1:ed:00:f3:66:6d:ef:5b:74:75:76:74:5f:bd:a5:76:a4:
c1:14:42:37:57:06:c3:57:fa:69:87:c2:76:9a:60:50:21:10:
57:54:6e:0b:05:ad:32:ae:74:8c:bb:23:31:55:1a:4c:ba:3b:
23:d7:ac:d2:37:8b:fc:48:d6:b0:d8:3f:16:e0:0c:4f:b6:c7:
1b:95:a1:53:13:56:29:cb:c4:86:b0:8d:8f:7e:cf:76:39:39:
a2:b9:18:72:c8:d7:c0:33:61:e3:9d:ff:3c:08:13:89:c6:cd:
d1:5f:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:06 2025 by rpki-client