Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-N1waJJF-E0Lka8AwRYkvAfwGPc.roa
File: 1-N1waJJF-E0Lka8AwRYkvAfwGPc.roa (raw, json)
Hash identifier: c7bwNltOF1yIHpfF4ORMIXhF9/lmwOnh/XYdwYVGf74=
Subject key identifier: F8:DD:70:68:92:45:F8:4D:0B:91:AF:00:C1:16:24:BC:07:F0:18:F7
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196AF4B9EEBC0C155F5DF86CE4D134D36D6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-N1waJJF-E0Lka8AwRYkvAfwGPc.roa
Signing time: Thu 08 May 2025 09:48:10 +0000
ROA not before: Thu 08 May 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:4b:9e:eb:c0:c1:55:f5:df:86:ce:4d:13:4d:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 8 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8dd70689245f84d0b91af00c11624bc07f018f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:b2:6b:c6:3d:7f:bd:d0:d0:df:95:3e:7f:
ad:be:0b:d3:08:fc:7a:5a:b4:5e:91:b8:97:37:ac:
67:20:50:9a:b6:71:9a:01:ad:96:0a:87:4f:a6:c5:
86:c2:47:7b:87:11:6c:96:f0:f5:48:60:2a:79:21:
b6:f7:52:f6:ff:14:8a:cc:82:1e:a0:2d:04:ed:95:
18:cc:f3:5f:1a:d3:84:69:88:67:7f:24:cc:46:11:
6d:88:c5:ae:6b:ab:c8:2a:d3:dc:72:c4:aa:39:9d:
8a:fb:65:e2:c7:ed:39:6b:65:18:b3:aa:6a:88:7c:
63:1b:cf:ba:25:b8:4a:09:a1:88:d1:ef:1b:66:90:
dd:5a:67:7e:b5:f4:dd:e2:e5:4c:e5:ca:5f:2d:14:
b6:30:1a:62:93:08:b9:c2:f3:54:c1:4b:1e:49:7b:
41:0c:a4:0c:de:4f:fb:1c:a6:6e:62:1b:92:90:9b:
a0:8a:17:9e:55:00:7b:d9:86:e3:28:65:82:e5:03:
e7:a2:14:e4:24:5a:c5:ad:c3:58:64:06:7e:6c:66:
4a:cd:ee:70:20:b6:53:17:53:66:54:5d:ea:e4:93:
d3:b4:d9:77:9f:5f:1f:a5:be:9a:9e:48:1c:c9:a3:
a5:34:1f:07:36:ae:51:52:a5:f8:0b:38:74:76:ad:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:70:68:92:45:F8:4D:0B:91:AF:00:C1:16:24:BC:07:F0:18:F7
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-N1waJJF-E0Lka8AwRYkvAfwGPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:2a:45:7b:26:7e:7f:0c:12:36:b2:62:ec:a3:5d:32:5b:
90:7c:73:ed:d3:cd:8d:67:fb:9b:5f:3c:a8:ac:7c:5b:ad:bf:
a7:b8:5f:41:2a:ae:b8:5f:e5:1b:9a:0d:78:6a:d1:d2:40:e5:
62:4f:b7:85:03:fa:6c:34:3d:cf:4e:e3:4f:31:21:18:72:0d:
40:ff:a1:30:c3:1e:31:03:27:33:fa:cf:dd:ae:62:41:10:43:
d9:a8:b5:ae:ce:ac:27:e9:86:d7:4c:e4:6e:d4:5e:ab:c5:80:
81:03:79:e8:b6:ea:89:96:4d:a4:1d:84:1b:2c:dc:54:d3:c0:
6f:50:fc:b7:17:19:48:bb:29:c9:63:ee:5e:3a:67:38:b4:ed:
99:1b:ca:4f:17:e4:5a:ba:a5:4e:ee:39:87:be:64:18:58:1a:
2b:ff:1c:88:57:61:91:6d:49:40:c5:5f:c2:7c:b6:23:80:80:
5a:7f:de:86:97:96:28:56:c7:11:71:12:b0:f1:0d:7e:8f:41:
26:9d:c5:3e:44:d7:1c:03:30:46:ec:e3:eb:58:58:10:41:db:
04:99:ef:c8:9a:0e:50:d2:8b:c9:d4:6a:d5:c3:a0:41:51:a8:
45:04:87:0f:31:0b:7b:32:07:b9:a3:55:41:8f:38:a1:4e:3a:
67:f0:73:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZavS57rwMFV9d+Gzk0TTTbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNTA4MDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGRkNzA2ODkyNDVmODRkMGI5MWFmMDBjMTE2MjRiYzA3ZjAxOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSmya8Y9f73Q0N+VPn+tvgvTCPx6
WrRekbiXN6xnIFCatnGaAa2WCodPpsWGwkd7hxFslvD1SGAqeSG291L2/xSKzIIe
oC0E7ZUYzPNfGtOEaYhnfyTMRhFtiMWua6vIKtPccsSqOZ2K+2Xix+05a2UYs6pq
iHxjG8+6JbhKCaGI0e8bZpDdWmd+tfTd4uVM5cpfLRS2MBpikwi5wvNUwUseSXtB
DKQM3k/7HKZuYhuSkJugiheeVQB72YbjKGWC5QPnohTkJFrFrcNYZAZ+bGZKze5w
ILZTF1NmVF3q5JPTtNl3n18fpb6ankgcyaOlNB8HNq5RUqX4Czh0dq13iwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjdcGiSRfhNC5GvAMEWJLwH8Bj3MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvMS1OMXdhSkpGLUUwTGthOEF3UllrdkFmd0dQYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTcvMjY3MjhlLWRkYzctNGIwZi05ZDFlLTk1OTNhNDg4YWZj
Yy8xL2UxNDM5dU81dlJ6emFFdWNBOEE2MGNwa0pKYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFflfTAN
BgkqhkiG9w0BAQsFAAOCAQEAFewqRXsmfn8MEjayYuyjXTJbkHxz7dPNjWf7m188
qKx8W62/p7hfQSquuF/lG5oNeGrR0kDlYk+3hQP6bDQ9z07jTzEhGHINQP+hMMMe
MQMnM/rP3a5iQRBD2ai1rs6sJ+mG10zkbtReq8WAgQN56LbqiZZNpB2EGyzcVNPA
b1D8txcZSLspyWPuXjpnOLTtmRvKTxfkWrqlTu45h75kGFgaK/8ciFdhkW1JQMVf
wny2I4CAWn/ehpeWKFbHEXESsPENfo9BJp3FPkTXHAMwRuzj61hYEEHbBJnvyJoO
UNKLydRq1cOgQVGoRQSHDzELezIHuaNVQY84oU46Z/Bzaw==
-----END CERTIFICATE-----
Generated at Sun May 11 05:37:37 2025 by rpki-client