Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7Alk35ExXfjRcyAUUyz__1ZNtU.roa
File: S7Alk35ExXfjRcyAUUyz__1ZNtU.roa (raw, json)
Hash identifier: S61Ne9hUknBLki1rq5CdaBl0sXaWYAeBgFbbgHSEBhk=
Subject key identifier: 4B:B0:25:93:7E:44:C5:77:E3:45:CC:80:51:4C:B3:FF:FD:59:36:D5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019995D75ADAC5C93F95B74005B62B9F6989
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7Alk35ExXfjRcyAUUyz__1ZNtU.roa
Signing time: Mon 29 Sep 2025 14:19:02 +0000
ROA not before: Mon 29 Sep 2025 14:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 79.172.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:d7:5a:da:c5:c9:3f:95:b7:40:05:b6:2b:9f:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 29 14:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bb025937e44c577e345cc80514cb3fffd5936d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:f0:9d:4d:66:25:3e:fd:7b:69:20:0b:e6:
1e:4e:0d:ec:bf:ed:37:86:fc:36:48:da:67:7d:43:
d8:a6:48:79:bd:d4:cb:a9:7c:5a:05:7f:80:6c:81:
bc:5f:fa:0f:37:03:01:4c:6b:eb:a5:ba:14:09:ae:
a5:f3:73:6b:41:01:9c:87:12:da:1e:b8:5a:ec:c6:
f7:88:b1:3f:71:67:c2:c5:79:d1:da:05:c1:4b:e1:
a0:2b:34:c2:e3:d4:7e:d5:ae:20:68:ad:d6:0b:dc:
74:8e:cf:d7:cc:e1:43:10:35:d7:cd:70:f2:4d:ba:
12:9f:9b:dc:b1:c3:10:e0:2d:15:89:30:58:98:f8:
4c:d2:2a:0b:ec:91:9d:c6:e9:ea:d1:90:95:05:0b:
57:f6:70:50:60:8c:f9:3d:74:8b:df:53:c2:79:20:
6a:e9:47:a9:3e:ac:cb:4b:fc:01:56:ae:f2:26:03:
83:aa:72:24:43:e0:13:5e:fb:4d:47:38:bf:dc:9d:
aa:46:a3:83:ca:67:29:ba:c5:96:d5:61:0f:d8:59:
15:70:3d:da:f8:11:71:f5:29:3b:d2:93:f8:4e:e4:
f1:a5:bd:0f:56:58:54:af:95:81:44:d2:e3:17:fc:
4a:60:eb:a4:2c:b9:9d:22:dd:9e:6b:56:d0:6f:9f:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:25:93:7E:44:C5:77:E3:45:CC:80:51:4C:B3:FF:FD:59:36:D5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7Alk35ExXfjRcyAUUyz__1ZNtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bc:a8:a9:a2:95:d6:96:1d:03:75:c6:0e:b8:70:cb:d4:57:
ea:d2:26:fd:e7:ad:3a:f3:82:83:05:06:5e:b4:fb:a9:17:4e:
f2:bc:08:18:fc:20:58:db:2e:58:f8:c2:b1:72:d1:46:99:76:
65:9d:f4:04:5a:c1:1e:ed:24:db:21:9f:13:dd:00:9b:cd:b2:
90:5d:4d:a2:9a:45:31:47:be:b2:e0:2c:bb:27:12:fa:58:ee:
90:44:3b:59:5a:59:c1:b7:da:5a:fc:91:ce:19:ec:26:58:94:
0a:a1:eb:e0:52:e1:00:4c:fb:bb:7f:52:3f:02:06:b0:9c:68:
5c:17:f2:ce:5b:68:a4:c9:45:96:d1:8b:f0:e8:48:e2:06:65:
aa:ea:0c:92:ef:7f:78:fb:8c:03:e0:96:a8:f0:aa:d3:3e:31:
6e:35:3f:2d:26:fe:2c:42:51:08:3b:b0:42:63:ca:4d:ba:ef:
0f:2d:ce:8a:de:17:cb:ad:18:e5:13:13:17:4d:5c:ae:c1:3b:
76:5b:7c:3d:7a:ee:fc:5a:0b:8d:4e:61:52:68:53:de:db:7c:
39:4b:8e:dd:ec:77:9e:f9:c5:bf:f3:a4:a0:1a:97:89:1a:c5:
a6:dd:10:ac:1d:f3:eb:58:4d:ed:ed:c2:52:8a:75:61:45:92:
64:63:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:49 2025 by rpki-client