Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/el3s5FU97XWZHwIp4vnzG1ZyhVA.roa
File: el3s5FU97XWZHwIp4vnzG1ZyhVA.roa (raw, json)
Hash identifier: Un8MbL+EOz96ZIqKNXFdGfjM2fM+efAGzm2lPyUt4cY=
Subject key identifier: 7A:5D:EC:E4:55:3D:ED:75:99:1F:02:29:E2:F9:F3:1B:56:72:85:50
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0199707C133E9626DB87DC635BE2F0F25C6D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/el3s5FU97XWZHwIp4vnzG1ZyhVA.roa
Signing time: Mon 22 Sep 2025 08:13:23 +0000
ROA not before: Mon 22 Sep 2025 08:13:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 77.111.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:7c:13:3e:96:26:db:87:dc:63:5b:e2:f0:f2:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 22 08:13:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a5dece4553ded75991f0229e2f9f31b56728550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:b0:3d:6f:5a:e3:07:4b:9e:b4:28:86:4a:
b6:a3:2d:0b:d0:ef:74:b2:b4:a3:c7:92:d7:05:73:
6a:e2:67:48:02:9e:d3:66:90:ae:f1:1b:6c:66:53:
a4:e7:41:2e:9b:7b:92:0f:ac:92:34:4d:6a:20:a4:
a2:f9:d5:ea:e5:4f:8d:e9:37:7d:65:f2:d2:6d:34:
d2:d1:94:bc:5d:4e:6b:0e:d7:64:c2:85:b2:ad:74:
7b:ac:fc:00:f8:82:6b:e6:6f:68:25:b6:90:6d:fc:
2e:da:b7:2d:ce:b0:08:e7:93:f7:e1:8a:77:6b:c7:
e3:f5:91:ea:30:bb:4e:82:3f:2c:c8:3f:d5:11:dc:
81:f6:5d:37:e5:ed:62:a8:96:ae:28:e1:db:37:c2:
8a:23:26:30:1b:24:84:66:20:7c:dd:10:94:a9:4b:
1b:d2:29:23:9f:5f:8c:9f:e1:ba:59:11:a9:15:fd:
11:59:32:eb:bd:07:bf:0c:0d:05:c7:20:c3:a6:81:
87:c7:93:84:96:97:74:51:42:65:a6:71:f3:3e:d4:
cc:fc:f2:ed:01:5e:cd:c6:a1:a1:03:fb:32:51:0c:
41:79:58:b6:5a:13:8a:87:a4:26:ff:45:23:2b:a3:
ab:38:77:4d:61:7e:8c:b4:98:83:4f:00:69:da:ba:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:EC:E4:55:3D:ED:75:99:1F:02:29:E2:F9:F3:1B:56:72:85:50
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/el3s5FU97XWZHwIp4vnzG1ZyhVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1d:1c:b2:36:5c:88:61:42:e5:c1:b6:42:a0:c5:fd:f3:45:
dd:b5:43:1e:c7:f3:d9:e6:ea:ff:0a:e6:1e:e9:2f:5a:8c:fe:
64:e7:7b:de:2c:08:70:e5:ee:94:c1:de:7b:32:12:44:68:fc:
30:21:59:d6:54:eb:20:60:f3:a0:63:e0:a6:b0:8b:bf:50:b6:
99:a9:c9:4a:5c:ae:a7:ef:8d:fa:9e:e3:32:ea:6c:5e:55:d2:
a4:8b:72:c7:d6:a0:0b:b0:e2:09:d3:9f:cf:dd:29:d7:5e:19:
11:31:af:70:2d:13:d3:cb:d9:24:0d:b5:47:78:99:01:e9:62:
bb:4b:dc:70:1d:43:85:eb:3e:ff:6b:40:36:19:97:bc:34:05:
81:18:88:16:54:0f:63:72:aa:ca:8a:d2:fc:e4:5a:8e:ba:45:
98:79:c8:a1:17:1d:1f:02:a7:b3:0e:e4:32:ea:c4:19:36:cc:
5b:c8:f6:be:36:37:2e:96:11:2b:af:9b:df:95:f0:a6:98:bf:
4c:b2:f1:74:ff:6e:01:00:cc:51:2a:f6:af:79:68:b2:89:e2:
66:ce:9d:4c:66:d2:7c:42:b1:13:e4:02:59:b9:77:32:c5:19:
e5:87:68:28:04:2c:a8:45:95:b0:7c:a1:d1:03:8c:0a:bc:85:
95:bb:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:01 2025 by rpki-client