Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4H_zPFzouo67z98b09rH1d2ymnE.roa
File: 4H_zPFzouo67z98b09rH1d2ymnE.roa (raw, json)
Hash identifier: dmXBoQqjaaud7VwSKkhtfNO8gAh8rjkBwFvVUx5FN6M=
Subject key identifier: E0:7F:F3:3C:5C:E8:BA:8E:BB:CF:DF:1B:D3:DA:C7:D5:DD:B2:9A:71
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019760926BEE3B20E993F735C7396015F3C5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4H_zPFzouo67z98b09rH1d2ymnE.roa
Signing time: Wed 11 Jun 2025 19:58:17 +0000
ROA not before: Wed 11 Jun 2025 19:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 87.229.22.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:92:6b:ee:3b:20:e9:93:f7:35:c7:39:60:15:f3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 11 19:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e07ff33c5ce8ba8ebbcfdf1bd3dac7d5ddb29a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:8d:16:1f:bd:96:83:4c:4b:71:e3:88:c8:
67:bf:0b:bb:9b:0b:fa:b5:84:8d:7c:83:8f:35:93:
1b:f4:96:d4:ce:01:98:5c:88:e8:c1:67:f5:f4:1b:
ef:28:ee:c4:e1:e3:37:21:93:39:0a:33:91:2f:54:
de:1e:a9:ba:34:bf:f7:3b:57:ad:c8:fc:29:40:13:
be:6e:e4:db:e6:8e:6b:d3:e2:da:14:5d:bb:14:8c:
2b:16:15:47:3c:50:c8:04:c2:5f:e9:b8:55:01:f7:
d5:a2:9f:e1:28:99:b0:70:40:e5:c9:02:cb:49:25:
76:5b:89:98:bf:e0:a6:6e:4b:af:c4:55:0e:eb:dd:
9f:9c:2b:84:b0:e4:91:06:7c:4e:39:8b:6a:7c:df:
99:a2:7e:f9:b6:9d:27:e9:67:d9:53:a7:b5:23:37:
77:f8:a6:db:3d:04:c4:eb:67:47:93:34:21:45:3b:
07:e4:ba:4c:c0:46:70:c2:94:81:2e:39:f0:fd:12:
1a:70:e0:93:d6:46:c7:b8:3a:70:03:d6:90:0a:4e:
7e:42:f9:eb:bf:dc:4c:94:ec:e6:84:36:4d:9b:79:
4c:7a:ae:6a:ae:a1:16:46:c6:85:b3:35:29:9f:33:
58:57:6b:6e:ab:92:5a:1a:c5:b7:c3:38:a1:19:f9:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:F3:3C:5C:E8:BA:8E:BB:CF:DF:1B:D3:DA:C7:D5:DD:B2:9A:71
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4H_zPFzouo67z98b09rH1d2ymnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
87.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2b:cf:a9:22:1d:fb:c5:20:c2:26:30:7b:35:a3:f8:36:e6:
d1:91:b1:cc:e9:40:3a:85:2a:6e:07:8b:45:c4:18:03:06:60:
32:e4:4c:60:80:e2:c8:0c:3a:01:ef:f2:89:e5:01:7c:9a:be:
26:dc:d4:ed:f5:4e:10:b5:14:96:f7:eb:09:e0:82:34:6a:4d:
8f:2b:f6:68:8a:c9:4d:44:78:f4:cf:db:f6:c9:5b:87:8e:6e:
27:63:59:4d:06:c7:b9:7c:cf:f7:f5:e8:19:c2:8c:88:60:e0:
4e:28:0a:08:b6:75:c5:f9:02:4c:1d:94:0a:e2:4f:34:b6:75:
a6:77:f9:d9:2f:45:7c:59:4a:a3:32:20:ea:56:55:3c:38:5a:
8a:53:a0:84:89:16:8f:1d:96:db:6a:e3:55:ae:03:4e:8a:d0:
a3:2b:bc:74:61:e8:1e:9e:65:10:22:ef:3d:89:39:8e:f3:d7:
2d:c8:3a:65:6e:1f:5a:ab:3a:71:aa:35:42:71:db:f3:44:0d:
17:76:4d:45:d6:74:6e:52:47:69:7b:a1:67:f6:50:49:5c:6c:
5b:38:bf:33:f4:0f:3f:e0:02:5f:04:cc:c6:fc:5d:8b:72:aa:
1b:3c:bd:9a:d5:58:96:10:6e:8d:0a:ae:27:32:2c:ef:4f:b3:
73:71:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:02:14 2025 by rpki-client