Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9C-cc99kVSMiGKc2_Wv6JOoE9Sw.roa
File: 9C-cc99kVSMiGKc2_Wv6JOoE9Sw.roa (raw, json)
Hash identifier: Y6vBTKS0t6MkzKt/GFlhp1CkQJxdHuoByYRjyce2B3Y=
Subject key identifier: F4:2F:9C:73:DF:64:55:23:22:18:A7:36:FD:6B:FA:24:EA:04:F5:2C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196735239B1F5F50CAB3916FB576487D40F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9C-cc99kVSMiGKc2_Wv6JOoE9Sw.roa
Signing time: Sat 26 Apr 2025 18:18:10 +0000
ROA not before: Sat 26 Apr 2025 18:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:52:39:b1:f5:f5:0c:ab:39:16:fb:57:64:87:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 26 18:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42f9c73df6455232218a736fd6bfa24ea04f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:0f:ea:b4:a0:1c:bb:94:ef:41:59:53:16:
a0:79:de:e3:ce:42:13:f1:81:91:c4:70:2a:32:f3:
34:d8:ac:e8:f6:ee:6d:cf:ea:52:6d:9f:01:86:3e:
ef:66:94:fb:63:dd:db:cb:2f:2d:ed:bb:4b:89:d8:
40:b8:6a:2b:69:11:9e:29:1b:5e:96:9a:b8:10:ae:
09:49:d6:f4:4d:fd:1c:69:aa:ae:dc:d8:7b:13:98:
6f:65:71:b1:52:84:b2:01:b3:7a:1f:cb:9a:2b:b4:
00:07:7b:0f:bd:c2:ad:73:30:ab:58:0e:cb:79:12:
8b:2e:a2:b3:75:12:1a:3a:93:2f:65:73:ec:29:f9:
66:73:36:3f:72:ca:6a:1c:c9:02:09:71:b4:69:96:
89:28:ac:6c:c1:5b:d2:46:fb:95:86:42:c1:a3:b9:
b0:80:4e:dc:1b:19:e0:e1:d3:f3:f4:28:81:8a:61:
3d:50:70:04:76:f3:12:ae:ff:bf:19:c5:21:ca:6e:
70:d8:ce:3c:c8:5e:5a:32:cb:e0:9f:c2:8a:5c:bf:
df:79:18:26:42:92:82:e1:7c:49:d2:c4:71:d4:de:
1c:7a:2c:06:32:17:b0:c8:51:aa:36:63:86:69:1d:
1b:5c:91:ac:e3:9e:c3:58:f5:12:69:ac:7e:54:48:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:9C:73:DF:64:55:23:22:18:A7:36:FD:6B:FA:24:EA:04:F5:2C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9C-cc99kVSMiGKc2_Wv6JOoE9Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7c:2d:07:70:5e:44:bc:1c:0e:0e:b3:66:6a:52:91:dc:ec:
6b:eb:eb:58:02:d0:a5:03:41:b0:88:af:98:59:d0:30:c9:b9:
25:9b:54:9d:23:ed:49:a3:27:4d:25:b2:cf:f9:d7:69:e6:89:
9e:0d:f4:57:ff:bb:b4:d6:b3:b3:43:ba:ab:92:81:1d:a4:c5:
fe:a9:a0:8f:02:f5:28:2b:55:04:8b:cb:25:0f:d7:83:c1:f3:
fc:3e:22:14:11:93:8c:7c:19:cc:a7:a3:76:23:cb:c0:03:b7:
14:ad:c9:4b:44:15:7d:67:eb:24:22:cb:85:75:49:a6:c9:04:
f6:d1:e0:aa:21:1f:07:d4:fb:32:c7:22:c7:c8:2d:7b:fd:a8:
62:8b:67:22:bd:b2:8b:a2:45:a8:c5:46:15:e5:99:f5:cf:4a:
96:1d:9d:ca:e9:64:fd:47:4f:88:05:c5:c6:0d:44:61:be:4c:
1d:3c:ce:c5:41:9e:db:92:d9:18:9b:88:0e:c5:7d:e9:57:78:
67:06:38:75:25:f7:b9:97:78:b6:b6:69:51:00:2c:54:c4:ce:
94:2c:4a:0c:aa:25:54:3c:92:14:58:b0:23:33:fc:e5:39:d7:
90:0b:c5:81:77:7a:76:11:c7:9b:63:6d:70:7a:d1:06:13:ac:
8e:6d:ac:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZzUjmx9fUMqzkW+1dkh9QPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNDI2MTgxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDJmOWM3M2RmNjQ1NTIzMjIxOGE3MzZmZDZiZmEyNGVhMDRmNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssQP6rSgHLuU70FZUxaged7jzkIT
8YGRxHAqMvM02Kzo9u5tz+pSbZ8Bhj7vZpT7Y93byy8t7btLidhAuGoraRGeKRte
lpq4EK4JSdb0Tf0caaqu3Nh7E5hvZXGxUoSyAbN6H8uaK7QAB3sPvcKtczCrWA7L
eRKLLqKzdRIaOpMvZXPsKflmczY/cspqHMkCCXG0aZaJKKxswVvSRvuVhkLBo7mw
gE7cGxng4dPz9CiBimE9UHAEdvMSrv+/GcUhym5w2M48yF5aMsvgn8KKXL/feRgm
QpKC4XxJ0sRx1N4ceiwGMhewyFGqNmOGaR0bXJGs457DWPUSaax+VEjhFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPQvnHPfZFUjIhinNv1r+iTqBPUsMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvOUMtY2M5OWtWU01pR0tjMl9XdjZKT29FOVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+VsAwQA
V+VwMA0GCSqGSIb3DQEBCwUAA4IBAQABfC0HcF5EvBwODrNmalKR3Oxr6+tYAtCl
A0GwiK+YWdAwybklm1SdI+1JoydNJbLP+ddp5omeDfRX/7u01rOzQ7qrkoEdpMX+
qaCPAvUoK1UEi8slD9eDwfP8PiIUEZOMfBnMp6N2I8vAA7cUrclLRBV9Z+skIsuF
dUmmyQT20eCqIR8H1PsyxyLHyC17/ahii2civbKLokWoxUYV5Zn1z0qWHZ3K6WT9
R0+IBcXGDURhvkwdPM7FQZ7bktkYm4gOxX3pV3hnBjh1Jfe5l3i2tmlRACxUxM6U
LEoMqiVUPJIUWLAjM/zlOdeQC8WBd3p2EcebY21wetEGE6yObax6
-----END CERTIFICATE-----
Generated at Sun May 11 05:25:51 2025 by rpki-client