Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jJCpLqjSS7qVCjC9FNwsOJtpErM.roa
File: jJCpLqjSS7qVCjC9FNwsOJtpErM.roa (raw, json)
Hash identifier: aXxlJg3X1gHuSzLnIEAjqFosdhieZ5bTZYl6JfXnOkE=
Subject key identifier: 8C:90:A9:2E:A8:D2:4B:BA:95:0A:30:BD:14:DC:2C:38:9B:69:12:B3
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01977339D0048A490EF0A9F005A7AFF7CD13
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jJCpLqjSS7qVCjC9FNwsOJtpErM.roa
Signing time: Sun 15 Jun 2025 10:54:17 +0000
ROA not before: Sun 15 Jun 2025 10:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.193.0/24 maxlen: 24
79.172.254.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:39:d0:04:8a:49:0e:f0:a9:f0:05:a7:af:f7:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 15 10:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c90a92ea8d24bba950a30bd14dc2c389b6912b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:1f:11:24:4b:a0:12:2a:17:c3:8a:fc:48:
5c:ae:74:cd:6c:26:c0:b8:59:19:02:a6:cb:57:c4:
43:5e:b2:3d:78:26:09:d3:fb:7e:37:61:37:bb:af:
47:88:28:73:8b:11:bb:44:09:85:8f:9c:a9:d6:6f:
16:98:87:a4:35:1a:43:91:b9:7e:07:b2:b3:6c:e9:
7c:d3:43:e7:f0:fc:5c:7b:9a:bf:8a:28:54:37:d2:
4f:b8:36:6c:aa:b2:8a:01:66:85:86:f7:59:01:85:
ff:1b:99:de:50:02:41:c5:0d:e4:70:58:19:df:96:
1f:47:18:6c:85:6f:2f:e3:8b:1d:60:3f:f8:ee:15:
3e:d3:37:37:d4:8b:35:24:cd:3a:9b:6b:39:eb:7e:
15:aa:c1:a1:a3:af:7c:76:b2:76:98:6b:19:86:cd:
98:42:f4:aa:76:4a:ed:6c:9b:bd:b4:38:f3:92:88:
e8:b5:d0:50:e7:f1:f4:26:ff:a8:c5:30:70:6b:fc:
7d:cb:b0:54:8f:cb:3e:cf:06:c2:2e:a7:4e:fd:57:
2b:58:49:f4:20:9c:f3:59:a9:5d:d4:ca:30:f8:2b:
ca:d3:7e:44:fe:09:2f:29:9a:42:08:52:3d:9c:8a:
4c:d4:de:5d:6e:3e:c7:fb:25:f8:2e:2f:55:1f:1d:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:A9:2E:A8:D2:4B:BA:95:0A:30:BD:14:DC:2C:38:9B:69:12:B3
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jJCpLqjSS7qVCjC9FNwsOJtpErM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.193.0/24
79.172.254.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:08:f1:f5:10:64:07:23:09:40:55:3c:a1:74:69:26:f2:98:
2b:82:ed:ba:60:00:76:1e:6c:03:f5:2f:fe:74:79:52:d2:cd:
01:09:00:1a:c4:83:78:01:5c:77:c0:05:c4:4c:1d:54:6d:b4:
1c:cf:fb:16:8a:59:b4:9d:90:00:97:e9:ca:f5:0d:a1:35:eb:
f0:c3:98:46:96:e6:c3:5d:db:dc:3d:62:64:f6:c3:fd:db:6c:
28:8a:d1:6d:13:23:0f:60:a5:ae:43:3e:48:05:ad:e1:b1:cf:
f2:7a:1a:44:d3:6f:bf:d7:9c:01:4a:3b:aa:75:91:89:33:ce:
f8:5e:49:62:f5:3e:59:97:32:2a:8b:df:54:b2:5f:c5:c3:7e:
15:d2:e3:60:c4:5c:66:f1:0c:c3:c7:df:7a:39:b3:f5:33:a7:
64:36:54:4d:09:22:ea:45:c2:3e:4c:43:2e:59:cf:e6:10:5d:
22:71:9a:e6:63:cd:d5:4f:a7:85:50:5b:d8:13:42:0c:ea:5b:
56:dc:1d:67:77:20:dc:00:a8:fd:0b:f1:f8:f9:90:ad:b2:2b:
1d:62:41:83:cc:67:f4:eb:2f:7d:04:02:96:71:15:ff:33:00:
b2:e0:24:c3:8a:5e:70:21:22:2c:83:7f:71:57:b1:a1:c1:90:
de:ba:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:43:42 2025 by rpki-client