Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cHPmtnx2-56PxM6NJuUlGOSqbmk.roa
File: cHPmtnx2-56PxM6NJuUlGOSqbmk.roa (raw, json)
Hash identifier: Zupv0U9mNehFWzh2wvTnBktmTttlpIGTywOhsc9aOLA=
Subject key identifier: 70:73:E6:B6:7C:76:FB:9E:8F:C4:CE:8D:26:E5:25:18:E4:AA:6E:69
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0199F0E934D9E642CE21B52C54FA1891C39A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cHPmtnx2-56PxM6NJuUlGOSqbmk.roa
Signing time: Fri 17 Oct 2025 06:43:59 +0000
ROA not before: Fri 17 Oct 2025 06:43:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 87.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:e9:34:d9:e6:42:ce:21:b5:2c:54:fa:18:91:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 17 06:43:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7073e6b67c76fb9e8fc4ce8d26e52518e4aa6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:72:ee:9b:6a:4a:85:08:b6:4b:59:d0:11:
d9:04:f5:cb:c5:c4:8a:d3:af:42:fe:ea:10:bf:d5:
f5:9f:14:c1:50:b7:a7:53:c7:2d:75:cb:c6:46:41:
19:f7:4c:cd:f6:a6:4b:82:88:69:d3:91:54:b2:ec:
6b:fa:25:75:0c:67:31:e4:64:bf:e7:fa:a5:ed:a9:
09:14:1f:d8:4f:b6:c4:e6:75:49:d2:32:33:96:c9:
f6:b0:fb:ee:85:d1:50:e2:cd:f4:3d:b0:05:a4:d2:
84:ff:d1:93:f0:89:fe:f2:b3:b7:89:87:94:32:53:
d4:be:c6:b4:40:4d:96:2d:41:55:e8:91:ae:25:f9:
c7:98:9d:6c:4c:e9:9f:07:b9:de:70:e9:ac:52:bd:
2c:8f:31:24:76:e4:06:91:4a:1b:b1:44:9d:44:e9:
b9:2b:f5:3a:08:42:8e:7c:fb:79:05:49:30:5f:b5:
82:33:34:a5:6c:51:b9:a4:e1:bd:cb:ee:33:93:2c:
94:44:4e:37:5e:c2:e4:85:63:23:8f:f0:81:16:03:
58:21:0c:9f:b9:4b:20:cb:ec:a1:7b:25:94:d7:41:
2c:9a:0a:89:b7:dc:a9:ba:b9:91:3c:fb:ad:63:8c:
aa:65:b2:8d:97:1e:fa:6d:24:7f:49:97:41:65:f9:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:E6:B6:7C:76:FB:9E:8F:C4:CE:8D:26:E5:25:18:E4:AA:6E:69
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/cHPmtnx2-56PxM6NJuUlGOSqbmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
60:af:d2:11:47:b8:9b:09:e7:8e:c7:0e:44:45:0c:b4:0d:36:
0b:23:3a:c0:85:bf:5a:90:3a:7f:8a:1c:1f:32:63:85:3c:99:
74:e9:86:46:52:29:f2:94:d3:ee:cc:b9:a3:d1:d7:ca:78:6c:
f0:87:d2:45:1e:83:88:a4:3f:66:64:90:41:48:6a:9b:3f:d7:
07:df:55:43:66:54:9f:54:59:c3:55:20:e0:f5:00:26:04:1d:
14:0d:b4:5f:85:dd:70:56:7e:6f:27:9d:fe:63:d4:6e:03:96:
e6:d7:76:11:d1:95:a0:48:b0:2e:dd:3d:1e:78:69:22:87:b5:
cc:79:e9:58:cd:b1:43:66:a9:3d:32:a6:19:99:b6:40:9b:ab:
48:25:55:9e:99:b9:07:91:8f:b3:98:bf:28:46:51:ff:36:0d:
59:e8:e6:b7:72:57:d6:d9:9b:d7:81:1c:9b:75:4a:fc:a8:69:
b9:fb:99:a2:3f:68:f3:5b:74:e9:b9:63:d0:b4:c7:cc:c2:a8:
72:bf:08:52:13:62:d5:98:4c:36:0c:75:10:ef:5e:19:d0:c4:
8a:42:83:0e:f3:47:19:93:89:c8:ff:ab:6f:6c:4c:c6:11:a1:
4f:27:2a:4e:1f:0a:57:9c:8e:46:28:ae:73:8d:5c:ae:92:0b:
23:24:ac:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnw6TTZ5kLOIbUsVPoYkcOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUxMDE3MDY0MzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDczZTZiNjdjNzZmYjllOGZjNGNlOGQyNmU1MjUxOGU0YWE2ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ9y7ptqSoUItktZ0BHZBPXLxcSK
069C/uoQv9X1nxTBULenU8ctdcvGRkEZ90zN9qZLgohp05FUsuxr+iV1DGcx5GS/
5/ql7akJFB/YT7bE5nVJ0jIzlsn2sPvuhdFQ4s30PbAFpNKE/9GT8In+8rO3iYeU
MlPUvsa0QE2WLUFV6JGuJfnHmJ1sTOmfB7necOmsUr0sjzEkduQGkUobsUSdROm5
K/U6CEKOfPt5BUkwX7WCMzSlbFG5pOG9y+4zkyyURE43XsLkhWMjj/CBFgNYIQyf
uUsgy+yheyWU10EsmgqJt9ypurmRPPutY4yqZbKNlx76bSR/SZdBZfk0awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBz5rZ8dvuej8TOjSblJRjkqm5pMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvY0hQbXRueDItNTZQeE02Tkp1VWxHT1NxYm1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UiMA0G
CSqGSIb3DQEBCwUAA4IBAQBgr9IRR7ibCeeOxw5ERQy0DTYLIzrAhb9akDp/ihwf
MmOFPJl06YZGUinylNPuzLmj0dfKeGzwh9JFHoOIpD9mZJBBSGqbP9cH31VDZlSf
VFnDVSDg9QAmBB0UDbRfhd1wVn5vJ53+Y9RuA5bm13YR0ZWgSLAu3T0eeGkih7XM
eelYzbFDZqk9MqYZmbZAm6tIJVWembkHkY+zmL8oRlH/Ng1Z6Oa3clfW2ZvXgRyb
dUr8qGm5+5miP2jzW3TpuWPQtMfMwqhyvwhSE2LVmEw2DHUQ714Z0MSKQoMO80cZ
k4nI/6tvbEzGEaFPJypOHwpXnI5GKK5zjVyukgsjJKwA
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:48 2025 by rpki-client