Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E7oPxEQfiPz1josSGA1goQcbHjA.roa
File: E7oPxEQfiPz1josSGA1goQcbHjA.roa (raw, json)
Hash identifier: TJ/UwxHpKl4uhi2S0R2El2y50Z3B0M/HQtmCCFs5xt8=
Subject key identifier: 13:BA:0F:C4:44:1F:88:FC:F5:8E:8B:12:18:0D:60:A1:07:1B:1E:30
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197777137C44BAAFA623A9408DE641559F6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E7oPxEQfiPz1josSGA1goQcbHjA.roa
Signing time: Mon 16 Jun 2025 06:33:17 +0000
ROA not before: Mon 16 Jun 2025 06:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 79.172.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:71:37:c4:4b:aa:fa:62:3a:94:08:de:64:15:59:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 16 06:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ba0fc4441f88fcf58e8b12180d60a1071b1e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:cc:15:67:0e:ad:4c:8e:36:8b:cb:12:3b:
53:50:56:b7:00:7f:89:75:72:f6:d2:9f:4f:2d:63:
71:bb:4e:a1:b5:46:ad:0f:b0:37:8c:20:86:9f:a7:
54:08:49:48:77:a5:0e:61:68:52:6c:b4:dc:96:08:
8a:78:ab:80:e9:97:6e:33:f3:5f:1e:ca:e3:fa:ac:
af:43:65:c9:e4:0d:ca:68:ce:ce:7c:6f:2a:4c:68:
4c:77:8b:ee:24:e7:f3:35:dc:1d:51:ac:81:33:a0:
0f:f0:09:bf:59:0c:99:07:1a:46:9d:a6:4c:20:fe:
17:41:98:42:f1:cd:5b:0e:9e:24:c3:87:c3:4d:37:
eb:96:78:c9:2e:aa:33:65:cb:6e:5c:e1:2b:0f:4d:
8a:67:1e:d6:66:e2:cf:d4:05:30:4b:34:72:e4:be:
fb:8f:66:61:d8:4c:82:e1:32:f1:fb:e0:9b:51:3f:
c6:6e:25:28:00:da:a1:fa:6d:ab:14:07:96:34:ef:
70:e3:39:56:e3:5b:70:80:f9:59:a3:14:6f:96:99:
2f:81:54:49:3d:e8:8d:39:7f:0c:31:a2:7a:2e:1f:
4e:47:59:db:aa:ac:e4:60:f6:05:bc:97:a0:64:a7:
e7:0b:04:20:ef:a1:bf:6a:3c:39:50:cd:4e:96:43:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:0F:C4:44:1F:88:FC:F5:8E:8B:12:18:0D:60:A1:07:1B:1E:30
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E7oPxEQfiPz1josSGA1goQcbHjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a4:f3:f4:60:9d:6c:0b:eb:12:d5:a8:08:18:e5:6c:4f:fe:
52:a6:a5:bd:7f:b2:4f:af:ef:91:55:23:4a:30:c5:f4:15:11:
16:fb:4e:dd:5b:5d:61:42:6d:60:73:08:fd:7b:2e:54:1a:ca:
a2:d8:71:de:07:3f:0e:68:fb:4c:5b:b3:d9:63:19:ea:e6:b7:
08:16:0b:89:5d:5c:f5:3c:f3:79:31:8f:7e:0a:8d:50:0b:22:
ce:75:50:f1:52:ad:9f:68:c5:c8:d3:bc:d0:77:85:73:83:15:
c9:f7:de:fd:49:d1:66:d3:08:f6:b2:8a:7c:ca:dc:8a:fc:3c:
98:c0:49:c5:f6:e7:a0:6e:f6:11:b0:4d:79:8a:1a:af:9e:53:
92:4d:26:d4:dd:a6:ab:b9:9f:08:bf:da:d2:44:7d:14:9a:3f:
d6:56:ee:b5:35:0b:fd:62:d6:cc:18:12:00:23:e6:77:80:84:
d8:7c:14:fe:f8:a2:ae:0d:89:b7:d1:b5:7f:87:0d:5e:25:00:
a0:d1:00:1c:9d:95:54:82:1f:0a:97:6b:20:f1:a1:c9:08:07:
e4:bc:23:3a:a3:cb:b3:f4:0b:25:d7:75:76:df:aa:d4:e6:c3:
87:b1:66:ac:06:98:f7:56:0a:9a:48:99:4d:6b:03:24:a8:d7:
4a:a9:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:45 2025 by rpki-client