Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EYrA4D7EOTg9kLdOgTDsWRJ7le0.roa
File: EYrA4D7EOTg9kLdOgTDsWRJ7le0.roa (raw, json)
Hash identifier: ysbHfPhJcaujmudrUn5qHxbtT/cLpszuDJovTyXOQsU=
Subject key identifier: 11:8A:C0:E0:3E:C4:39:38:3D:90:B7:4E:81:30:EC:59:12:7B:95:ED
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01979B7630487CF16A36A1F3A8BB97515FBF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EYrA4D7EOTg9kLdOgTDsWRJ7le0.roa
Signing time: Mon 23 Jun 2025 06:25:03 +0000
ROA not before: Mon 23 Jun 2025 06:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 79.172.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:76:30:48:7c:f1:6a:36:a1:f3:a8:bb:97:51:5f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 23 06:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118ac0e03ec439383d90b74e8130ec59127b95ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:2c:98:0c:5e:6f:a7:8e:5b:cd:d2:00:16:
fb:6e:7e:60:a7:71:f3:32:ed:d1:7d:07:c1:30:a7:
42:65:ee:ee:03:35:d6:8d:fa:98:9d:08:57:dd:8f:
63:3c:4b:d6:cf:f6:ec:8a:40:de:57:dd:64:3b:e5:
2f:31:9d:4e:35:05:e9:e4:ad:ae:d6:68:c3:e5:50:
cc:fa:f2:02:89:c1:8f:41:c4:72:bc:d8:53:0d:ac:
38:b6:93:3c:e6:6a:37:07:4e:55:ba:0a:dd:0f:9b:
0d:03:45:c0:d6:8e:39:ef:7a:51:6a:73:80:3d:33:
1a:f2:80:93:bb:a9:f0:f7:70:36:73:37:f4:ae:71:
d3:4b:08:5b:5b:b0:ef:0f:e7:52:47:5a:04:ce:68:
2b:ca:35:21:15:cb:fd:ec:eb:f1:37:af:34:9f:40:
25:1c:29:4b:98:07:4a:95:6b:d2:bc:97:52:df:16:
6b:11:bf:5a:a2:8c:82:30:e0:ce:2b:30:49:db:5b:
f4:e5:dc:f4:c0:a6:d9:bc:ec:6a:41:9a:66:dc:44:
29:d9:13:c1:4c:70:9d:91:86:b5:85:c1:3d:ea:72:
85:70:fc:24:a4:f2:40:ef:42:e4:a1:24:80:a0:76:
bc:71:d5:21:fe:da:84:35:db:2e:ea:3d:1a:26:a1:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:C0:E0:3E:C4:39:38:3D:90:B7:4E:81:30:EC:59:12:7B:95:ED
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EYrA4D7EOTg9kLdOgTDsWRJ7le0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:ff:75:34:45:c9:c3:7d:d5:b1:a7:34:58:40:d6:be:fb:1c:
f9:df:c2:e0:aa:f3:75:d3:b8:2c:07:6e:29:9c:02:d3:71:6b:
34:b5:fd:2d:93:c1:d4:a2:2b:63:b3:0e:1c:39:71:e8:e0:a8:
fb:4e:70:06:c1:df:df:6f:8c:87:b2:03:62:82:ff:61:69:57:
d9:03:5f:3b:4a:5b:72:06:1d:ba:9d:a5:f3:6c:24:d0:dc:59:
a1:30:1c:f2:53:6a:ea:af:fb:b6:fa:5f:6c:bd:5c:9e:83:ef:
cd:23:bf:6b:95:9d:51:4f:a8:c9:34:b7:30:b1:60:3e:a4:b5:
7a:b6:19:2d:23:38:c7:09:ce:6f:63:4f:54:f2:c6:9b:c0:e1:
ba:a7:78:6c:3c:85:0b:5f:68:2e:55:a4:9a:fa:08:7f:36:8d:
ce:f0:e7:ff:44:fc:af:72:09:7b:e2:1c:6f:b8:72:c4:0a:f7:
d2:e0:89:57:5e:4c:cb:f4:0e:7a:3b:6f:44:9c:22:29:13:32:
e1:34:0b:e1:2c:1d:94:c4:2d:ee:69:dc:a7:bb:c7:d1:73:6d:
79:81:94:68:c9:cc:5c:bc:c5:78:cc:10:a0:0a:06:50:9c:6e:
5f:ff:cf:62:4c:7d:1b:0a:ae:bb:71:90:a9:e6:66:b9:ff:73:
62:86:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:35:39 2025 by rpki-client