Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Sgc2W5oJKbXOnp85mw6CSrV0W6M.roa
File: Sgc2W5oJKbXOnp85mw6CSrV0W6M.roa (raw, json)
Hash identifier: ic257dkI4cfVB/xhwMjetjWQF504gg03aYlxnnaqhm0=
Subject key identifier: 4A:07:36:5B:9A:09:29:B5:CE:9E:9F:39:9B:0E:82:4A:B5:74:5B:A3
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198A312098C295EAE1AB8806467C24272E5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Sgc2W5oJKbXOnp85mw6CSrV0W6M.roa
Signing time: Wed 13 Aug 2025 10:55:24 +0000
ROA not before: Wed 13 Aug 2025 10:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399073
IP address blocks: 87.229.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:12:09:8c:29:5e:ae:1a:b8:80:64:67:c2:42:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 13 10:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a07365b9a0929b5ce9e9f399b0e824ab5745ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:64:a0:a6:7c:6a:98:00:3a:a4:79:64:2e:
cc:1a:2e:ac:7b:a2:0c:85:91:e7:5c:38:cb:58:d0:
60:e8:ce:e8:d9:be:81:65:18:f0:08:37:4e:e0:f4:
b4:5b:20:24:65:7c:60:86:a7:33:cc:13:5e:99:c6:
f4:6a:21:2e:a8:ae:c5:0d:4e:d0:9a:0c:e2:8c:8c:
66:54:85:0e:f3:42:60:b9:25:db:06:ce:77:cf:54:
0e:ea:32:dc:64:fa:28:25:1c:db:78:1c:2b:56:0f:
a6:13:5d:22:6a:f2:bc:7e:c9:62:c3:8b:b0:e2:a6:
6a:3f:f5:5a:a9:a4:67:76:53:5b:52:cb:98:c1:a8:
f5:5b:dc:5a:02:ff:1e:f8:87:c1:5c:8f:47:3d:8e:
47:52:58:5d:0d:b9:74:b9:80:9d:43:f3:f4:e7:5b:
eb:54:08:68:b1:4b:94:5c:11:63:3f:42:18:b8:ba:
79:9a:bc:3d:f3:1e:c9:5c:18:7b:3b:ae:6f:31:32:
2a:08:12:48:65:43:4e:e3:72:7d:e5:51:77:67:4e:
70:f4:03:15:65:c4:80:1e:f1:2e:d7:9d:2e:44:1f:
c8:d4:3f:cc:95:19:13:ab:57:60:a8:d8:44:6c:6d:
86:0c:36:ea:24:e5:29:0f:41:30:26:57:83:5c:45:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:36:5B:9A:09:29:B5:CE:9E:9F:39:9B:0E:82:4A:B5:74:5B:A3
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Sgc2W5oJKbXOnp85mw6CSrV0W6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.9.0/24
Signature Algorithm: sha256WithRSAEncryption
46:94:7a:24:f7:5a:ae:89:6a:48:d1:88:99:d4:86:0b:c2:79:
00:49:76:76:26:69:83:9e:2a:6d:a9:c6:a8:bd:6e:7d:1d:2e:
34:25:23:bc:72:7a:f0:1a:f1:8e:36:56:4e:e0:d1:a6:19:35:
59:c8:9d:08:67:ec:f2:59:32:ef:a6:4f:e3:42:85:6a:85:0e:
a1:6d:0a:4c:bf:b9:a8:ef:37:aa:a8:3f:78:00:be:50:14:4a:
fc:f8:81:87:ea:2a:56:80:54:e0:04:af:d7:69:a7:95:b3:e9:
4d:7a:7c:b3:2b:a7:af:72:a3:e9:e9:98:73:86:15:6a:2f:d0:
fa:c1:28:42:f7:68:34:40:d0:91:89:87:15:42:b8:57:eb:d1:
82:27:5b:39:a7:d2:a1:00:6d:61:c0:8e:ca:25:74:f1:75:41:
ac:cb:1c:ca:1e:35:a2:44:14:b0:5a:8b:7e:86:b9:7f:fb:52:
d7:16:16:cb:f3:92:c1:e0:0e:c2:0a:7a:03:fc:9e:f3:9f:f9:
96:6c:8b:b6:c7:2e:6a:2b:88:d1:91:be:3e:38:ad:1d:b6:e7:
ec:b9:13:8a:d2:78:70:7a:08:16:d4:32:41:62:99:d1:fd:db:
c7:6d:b2:63:8c:36:08:89:e1:01:27:96:39:a5:47:89:22:56:
77:87:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:25 2025 by rpki-client