Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j12XG5Ced1EOwuH-Z04sjki4AHs.roa
File: j12XG5Ced1EOwuH-Z04sjki4AHs.roa (raw, json)
Hash identifier: ezQj6OXrKFpeqOAVaQU1D7lR7RzJqvnDID4d1pYSO+k=
Subject key identifier: 8F:5D:97:1B:90:9E:77:51:0E:C2:E1:FE:67:4E:2C:8E:48:B8:00:7B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01979453B6AAC1E9516EE6269CDE3AD2E020
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j12XG5Ced1EOwuH-Z04sjki4AHs.roa
Signing time: Sat 21 Jun 2025 21:10:03 +0000
ROA not before: Sat 21 Jun 2025 21:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.219.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:53:b6:aa:c1:e9:51:6e:e6:26:9c:de:3a:d2:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 21 21:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5d971b909e77510ec2e1fe674e2c8e48b8007b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:91:ad:b3:66:88:28:de:21:2c:0f:c2:19:
cd:ae:1f:9c:cc:c4:d1:80:8d:4b:65:c8:dd:87:e6:
da:bf:dd:30:bc:55:e6:b3:8d:18:65:76:65:09:74:
80:ee:c8:50:97:24:6b:19:0c:b3:c8:6c:14:b1:ca:
5b:b6:45:2a:30:0b:9a:7b:1b:d4:17:da:b0:77:62:
0f:5a:a0:42:80:d7:05:f6:08:2f:5f:0f:20:a4:6e:
ad:27:59:ad:9b:af:f5:5d:ee:bb:0c:04:66:4d:d6:
5b:a3:78:69:1b:70:01:0c:16:88:cc:d5:31:96:25:
31:91:e8:b7:9c:4b:63:0a:ec:ed:f3:e3:12:c3:c7:
c8:cb:69:da:34:25:39:f7:47:73:f2:ab:af:d8:d8:
e7:0c:96:9c:e8:f6:78:11:c7:ee:ce:f5:dd:cc:ce:
4c:3e:0a:dc:a3:d9:7b:67:26:30:ed:58:8b:06:91:
08:d5:03:dc:3a:e3:4f:f3:5f:ac:57:4e:b4:9b:a1:
9b:38:f6:19:6d:02:e1:e7:5c:21:20:43:4a:52:9b:
e3:c0:06:fe:ba:9c:c0:a1:8f:11:f7:15:ac:46:34:
0b:6c:19:61:49:ce:c5:ad:1d:9f:a9:79:37:ef:e1:
4b:59:85:b6:bd:c5:17:61:fa:8b:7b:52:72:58:4a:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:97:1B:90:9E:77:51:0E:C2:E1:FE:67:4E:2C:8E:48:B8:00:7B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j12XG5Ced1EOwuH-Z04sjki4AHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.219.0/24
87.229.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6d:50:ae:97:17:b6:be:08:03:36:e4:e2:ca:88:32:77:09:
f1:15:77:bb:27:11:9e:10:59:4e:c9:0f:5c:18:b8:06:b1:92:
e6:f6:94:7a:0f:7a:ec:7a:a8:06:6f:03:fe:25:e0:bb:2b:f3:
d5:d3:23:3b:b1:d0:6d:97:a1:36:aa:9e:e9:cb:9d:83:7d:d7:
68:2d:0b:e0:fa:84:3a:9f:ab:c3:3a:04:27:8f:f7:55:fc:9a:
b1:48:fa:57:fb:62:2d:b7:ba:b7:52:a4:85:f4:53:15:5c:b4:
7b:24:7c:cd:30:97:5e:df:04:82:f0:a2:3a:07:56:f7:53:d9:
53:1e:c9:38:de:1e:7e:28:5e:e7:36:09:cc:a7:06:af:49:f8:
82:51:ff:3b:37:84:69:76:14:ed:78:89:9a:e8:de:d6:ec:a8:
02:fe:94:b2:f4:be:db:0c:0b:fc:fa:99:c3:e0:dd:9b:7b:c5:
0c:17:89:2d:84:27:66:79:dd:1c:cb:a5:00:59:7c:56:5f:d7:
1c:f4:ef:d8:16:f1:9d:ca:7a:5e:37:f3:d1:59:22:1c:da:34:
f2:80:24:21:e4:bf:93:98:92:72:de:8a:b6:bc:41:cb:4e:3a:
7c:2c:f0:bc:a9:73:82:90:c7:bf:b7:1c:db:3b:df:da:3d:de:
32:ab:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:25:27 2025 by rpki-client