Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Csg0aP5V8W2dAW_Yf8uZlvT7_pk.roa
File: Csg0aP5V8W2dAW_Yf8uZlvT7_pk.roa (raw, json)
Hash identifier: XF7rbUaDCJ9rsz0kAmc2K9DeS6pVxFOOp9neiDRkkds=
Subject key identifier: 0A:C8:34:68:FE:55:F1:6D:9D:01:6F:D8:7F:CB:99:96:F4:FB:FE:99
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199F66CF2B3D76E5E11B0506250C8EAECA3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Csg0aP5V8W2dAW_Yf8uZlvT7_pk.roa
Signing time: Sat 18 Oct 2025 08:25:59 +0000
ROA not before: Sat 18 Oct 2025 08:25:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 87.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:6c:f2:b3:d7:6e:5e:11:b0:50:62:50:c8:ea:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 18 08:25:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac83468fe55f16d9d016fd87fcb9996f4fbfe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:c6:02:43:f9:ce:f8:21:9c:3f:95:33:bc:
18:81:13:a2:ac:b3:58:d9:5c:fe:1a:e2:eb:10:51:
77:51:cf:4f:bb:0b:c8:73:c6:f1:8b:8a:ee:3f:f6:
65:57:11:21:eb:13:a8:a9:66:91:30:87:bb:9e:c3:
50:c2:e9:46:78:15:5d:95:26:61:03:a2:d5:4e:e1:
46:d2:d8:ea:90:21:6c:fe:12:77:82:8c:0e:42:5d:
53:fb:67:42:04:b8:1e:29:3c:ac:ea:ec:47:32:79:
e3:30:82:42:ae:3b:ad:53:c2:62:7d:d8:15:43:92:
3a:92:b3:9d:9e:8b:ec:ff:23:b8:69:96:18:04:c5:
92:76:cc:09:2c:1a:ea:46:65:01:df:a3:89:47:fd:
a3:17:fe:3a:df:de:81:67:53:85:71:31:81:b5:a6:
1b:06:26:95:eb:77:2d:d1:1b:17:eb:ad:07:f6:07:
8e:2e:58:c9:b4:48:01:f6:65:79:0b:a0:23:43:18:
8e:76:37:46:b2:d2:8c:53:fe:48:93:3b:3d:ca:f9:
e5:66:71:ec:8d:07:d2:2f:45:b8:0e:22:f8:e9:77:
9f:96:17:74:ea:c9:4f:39:55:40:ae:b7:15:d4:ff:
e6:88:de:09:3e:02:3c:cc:b8:10:5e:c2:11:6e:4c:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:34:68:FE:55:F1:6D:9D:01:6F:D8:7F:CB:99:96:F4:FB:FE:99
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Csg0aP5V8W2dAW_Yf8uZlvT7_pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:68:d4:26:16:28:2b:0b:e7:0e:03:23:1d:c3:0a:bc:e5:00:
90:4d:7f:9c:15:c4:7b:bb:9d:92:17:55:b6:8f:3b:3b:5e:d0:
7d:28:0d:51:7c:9e:57:1a:88:89:6b:ec:76:26:f7:22:45:ef:
f8:1b:37:9b:b6:a5:77:cb:51:54:36:be:2d:45:a1:5e:97:0f:
e2:4d:7d:4f:ce:49:eb:c5:9f:0c:1b:00:ff:50:c1:2c:63:70:
df:a0:1a:53:b9:da:e9:2e:a8:f7:b0:c1:dc:20:e0:93:79:b8:
fc:cc:35:07:fa:d2:7e:80:4f:66:c3:a2:a4:14:dd:ce:49:d2:
7a:4a:01:47:f8:97:94:a1:e2:5c:19:a3:2e:17:57:72:39:90:
b6:42:e2:47:f3:22:b8:72:b7:be:3b:88:e7:09:c3:06:22:a7:
f9:62:fc:f7:99:0c:ba:71:d5:a5:9b:15:ee:f4:73:7a:5f:fe:
19:09:eb:5b:34:75:7e:be:6b:47:0c:88:c8:7b:ee:c5:ab:b5:
96:8e:ce:9d:40:0b:6d:9e:d1:26:d1:77:a1:42:b8:9a:80:5d:
ae:b8:9e:d7:88:d0:82:f1:ea:ac:7e:f1:6e:d0:79:cd:d9:7f:
3f:ec:c9:43:7c:06:2b:58:49:2c:c8:af:51:d7:ab:77:e4:af:
eb:a1:a2:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZn2bPKz125eEbBQYlDI6uyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUxMDE4MDgyNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM4MzQ2OGZlNTVmMTZkOWQwMTZmZDg3ZmNiOTk5NmY0ZmJmZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ3GAkP5zvghnD+VM7wYgROirLNY
2Vz+GuLrEFF3Uc9PuwvIc8bxi4ruP/ZlVxEh6xOoqWaRMIe7nsNQwulGeBVdlSZh
A6LVTuFG0tjqkCFs/hJ3gowOQl1T+2dCBLgeKTys6uxHMnnjMIJCrjutU8JifdgV
Q5I6krOdnovs/yO4aZYYBMWSdswJLBrqRmUB36OJR/2jF/46396BZ1OFcTGBtaYb
BiaV63ct0RsX660H9geOLljJtEgB9mV5C6AjQxiOdjdGstKMU/5Ikzs9yvnlZnHs
jQfSL0W4DiL46Xeflhd06slPOVVArrcV1P/miN4JPgI8zLgQXsIRbkxmwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFArINGj+VfFtnQFv2H/LmZb0+/6ZMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvQ3NnMGFQNVY4VzJkQVdfWWY4dVpsdlQ3X3BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UiMA0G
CSqGSIb3DQEBCwUAA4IBAQCmaNQmFigrC+cOAyMdwwq85QCQTX+cFcR7u52SF1W2
jzs7XtB9KA1RfJ5XGoiJa+x2JvciRe/4GzebtqV3y1FUNr4tRaFelw/iTX1Pzknr
xZ8MGwD/UMEsY3DfoBpTudrpLqj3sMHcIOCTebj8zDUH+tJ+gE9mw6KkFN3OSdJ6
SgFH+JeUoeJcGaMuF1dyOZC2QuJH8yK4cre+O4jnCcMGIqf5Yvz3mQy6cdWlmxXu
9HN6X/4ZCetbNHV+vmtHDIjIe+7Fq7WWjs6dQAttntEm0XehQriagF2uuJ7XiNCC
8eqsfvFu0HnN2X8/7MlDfAYrWEksyK9R16t35K/roaLz
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:59 2025 by rpki-client