Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RsPFcZ3tHArp-z91SZ-NT37aJ1w.roa
File: RsPFcZ3tHArp-z91SZ-NT37aJ1w.roa (raw, json)
Hash identifier: CPJtV+o8l7vUgLc3hiPXpvwvmEuwuQjlFxpalvZ8/7I=
Subject key identifier: 46:C3:C5:71:9D:ED:1C:0A:E9:FB:3F:75:49:9F:8D:4F:7E:DA:27:5C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198565C0A855681CCEB1BF9DE4B49D3EB67
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RsPFcZ3tHArp-z91SZ-NT37aJ1w.roa
Signing time: Tue 29 Jul 2025 13:25:29 +0000
ROA not before: Tue 29 Jul 2025 13:25:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202791
IP address blocks: 87.229.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:5c:0a:85:56:81:cc:eb:1b:f9:de:4b:49:d3:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 29 13:25:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46c3c5719ded1c0ae9fb3f75499f8d4f7eda275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:3d:e7:32:f4:6c:79:14:5c:aa:03:89:b8:
36:3f:18:de:7e:67:e1:9f:fa:8f:08:29:d6:11:97:
07:f6:a5:56:2a:2e:9b:e0:4f:7d:e8:2f:c1:9a:16:
5d:13:2a:01:21:71:05:8b:24:7d:6d:3e:b3:f5:e2:
f0:08:e7:3e:4d:ce:29:bc:37:df:f1:ff:5b:d2:a7:
bf:5c:78:a2:d1:c1:76:f0:54:bb:83:ec:1a:73:99:
d4:02:86:65:0a:7c:a2:8f:39:bc:11:8e:e9:f6:1d:
1f:82:36:e3:65:08:ae:24:5d:7b:a1:8a:58:a6:59:
9e:43:8a:f6:e5:9a:9d:29:6a:0a:23:73:28:62:58:
1d:b8:77:77:f6:3e:d5:60:b3:bf:e8:e6:02:32:3d:
27:a2:f5:97:6a:49:cd:62:89:1f:f1:72:21:c1:7c:
76:4d:2c:bf:a3:97:ea:a6:e4:4d:28:8c:b2:4b:3f:
0b:df:94:53:e5:3b:39:ba:05:04:e7:aa:48:82:a9:
c9:ef:12:35:6b:2c:04:c3:55:ad:82:51:72:e2:19:
fa:75:c1:39:cc:9c:ab:c8:70:e5:54:3c:b4:59:b6:
1f:04:15:c2:76:6c:4e:1b:31:e9:35:07:b3:f2:04:
71:d9:00:b7:0c:bb:4a:d6:60:a1:9b:17:27:89:4e:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:C5:71:9D:ED:1C:0A:E9:FB:3F:75:49:9F:8D:4F:7E:DA:27:5C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RsPFcZ3tHArp-z91SZ-NT37aJ1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.108.0/24
Signature Algorithm: sha256WithRSAEncryption
62:41:33:1e:65:85:d6:e5:6d:62:8e:ee:fc:f9:8e:36:38:e2:
4c:65:b0:e7:2d:06:e5:ce:f3:20:1d:cf:d1:d8:e5:a1:57:93:
45:4b:6e:07:e8:b5:08:15:fc:03:5a:80:00:61:1b:1a:79:75:
c9:a2:d3:86:55:f1:b0:9b:84:55:8a:c6:e0:25:5b:44:26:71:
54:ec:fd:dd:fd:99:9c:45:ff:d4:ff:a1:d3:81:64:b5:62:03:
1b:e1:74:b9:bc:a2:4e:b5:23:3a:06:5d:4a:b8:43:e6:d6:8d:
a8:b3:c7:23:7b:e6:94:60:db:f4:54:74:ea:c2:4a:cd:52:cc:
07:dd:7f:87:87:54:20:66:c8:10:dc:35:03:29:df:98:39:45:
1f:b8:9a:33:3a:6c:01:44:ca:dc:9a:90:22:f2:12:d9:3e:96:
d0:09:62:48:5a:30:34:ae:3b:20:06:a6:f5:3f:7b:28:17:e5:
12:97:64:1b:a4:93:0b:88:07:9e:a9:64:d9:ee:83:d8:1e:0e:
8c:a4:be:22:77:c6:80:5e:de:78:ea:77:56:f3:e9:88:17:75:
26:e0:a1:7a:f5:3a:91:e7:52:31:9f:bd:96:d5:38:2c:38:75:
54:0f:89:46:c1:56:a9:56:8c:66:d1:a7:88:6e:b4:b9:04:a1:
e0:f5:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:53 2025 by rpki-client