Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YYv00Z3i2Lpl8q24kZNfXnvRVYk.roa
File: YYv00Z3i2Lpl8q24kZNfXnvRVYk.roa (raw, json)
Hash identifier: iUeAyRu9wIc27S5JM+zD5WMDPXg5ScwQGgNIVtiZPUg=
Subject key identifier: 61:8B:F4:D1:9D:E2:D8:BA:65:F2:AD:B8:91:93:5F:5E:7B:D1:55:89
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199EBBD5AAB587FA08B691FE31D46B51B1A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YYv00Z3i2Lpl8q24kZNfXnvRVYk.roa
Signing time: Thu 16 Oct 2025 06:37:59 +0000
ROA not before: Thu 16 Oct 2025 06:37:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 79.172.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:bd:5a:ab:58:7f:a0:8b:69:1f:e3:1d:46:b5:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 16 06:37:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=618bf4d19de2d8ba65f2adb891935f5e7bd15589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:d1:3a:d9:fe:d0:b4:7d:67:aa:6a:dc:b0:
1f:a9:f5:b7:c3:18:89:5c:fd:84:62:b3:8f:b1:75:
2e:e3:cd:37:88:d1:df:30:06:dd:f9:29:95:2a:5e:
8c:63:bf:58:8c:76:6b:00:56:49:d0:3e:2b:0e:2b:
e4:ff:25:c7:92:56:7d:09:03:12:b1:5c:96:f4:05:
6c:2d:48:f1:34:d7:52:d4:4c:2e:52:9e:fa:73:e5:
0a:5e:d3:08:76:7b:0e:f6:cb:35:16:72:44:54:b9:
e4:58:c1:e4:31:cd:aa:de:cd:52:bf:c9:eb:6a:7b:
87:74:c9:bb:dd:51:a5:62:3f:8e:23:20:70:74:b8:
56:d8:2a:17:4b:c7:9b:9a:fc:3a:0e:cd:8e:f1:77:
33:e3:86:fc:ef:75:35:67:8d:9f:35:88:cd:b4:cd:
10:77:49:3b:29:0c:87:cd:87:94:bc:2f:dc:f4:13:
a0:bd:7e:5a:96:8b:dd:e9:64:d4:6c:c9:86:27:24:
3a:20:3c:18:bc:b4:b5:b4:2a:c4:3e:54:1c:da:90:
21:4b:3b:dd:76:62:db:5f:da:09:48:9e:ff:53:aa:
49:86:bd:3f:98:48:c4:4d:3a:7f:e7:d8:bd:c8:65:
21:d9:4d:e3:89:ee:07:a3:93:93:a9:54:cc:dc:a8:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:F4:D1:9D:E2:D8:BA:65:F2:AD:B8:91:93:5F:5E:7B:D1:55:89
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YYv00Z3i2Lpl8q24kZNfXnvRVYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e5:50:84:a7:eb:c0:ab:49:9d:cf:18:04:44:2e:f8:d0:e3:
e9:4a:6a:36:92:2c:78:1d:90:a0:71:80:93:e7:9c:bb:10:4d:
22:c3:64:44:52:e5:3b:16:42:7a:21:d7:52:57:8d:dd:82:fe:
90:ee:ee:18:50:cf:b5:7c:96:5a:35:10:9d:2c:1b:48:77:92:
4d:9b:28:20:87:25:d2:46:ec:f2:18:a2:e6:c2:71:76:bb:72:
57:63:bc:31:0c:83:f0:5f:cc:2c:b9:97:13:dc:a9:51:1f:46:
0b:00:83:82:ce:6b:cd:9f:27:dd:0c:04:7d:92:76:ee:08:a1:
d3:50:08:c2:43:97:33:83:0e:bf:f5:12:20:ab:55:d8:7f:e5:
fe:bc:29:68:a3:f2:03:e9:92:2b:70:2f:4d:80:03:e9:71:72:
d1:c7:96:39:bd:1e:76:10:ba:6c:0e:bd:1f:be:b8:e5:a5:fe:
2c:36:3c:fe:db:eb:55:e2:89:2b:0b:f9:75:3b:42:a2:1a:ac:
5d:dd:a8:50:a5:b5:c0:8c:81:ba:51:a1:3b:67:ad:e9:21:f9:
a7:8c:d8:bb:b3:5b:66:f3:75:ca:6f:e4:6e:18:b4:37:6c:17:
b2:6f:c2:fd:5e:41:d2:83:3f:e4:b0:8d:a8:e5:50:d0:07:94:
d8:04:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:10 2025 by rpki-client