Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cCeX0MjMMm62-I7Tp-iVCZPses.roa
File: 4cCeX0MjMMm62-I7Tp-iVCZPses.roa (raw, json)
Hash identifier: hvfvPYN1LHcnrhglAT6LedssXDslR1moifaThKTAlnY=
Subject key identifier: E1:C0:9E:5F:43:23:30:C9:BA:DB:E2:3B:4E:9F:A2:54:26:4F:B1:EB
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A127AAEBD5C3DE6F2CAD7BBE64F45EE9B1
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cCeX0MjMMm62-I7Tp-iVCZPses.roa
Signing time: Sat 10 Oct 2026 21:14:35 +0000
ROA not before: Sat 10 Oct 2026 21:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 87.229.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:aa:eb:d5:c3:de:6f:2c:ad:7b:be:64:f4:5e:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 10 21:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1c09e5f432330c9badbe23b4e9fa254264fb1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:2a:20:32:e8:2c:70:e2:f5:7a:4a:f9:65:
3e:93:9d:d8:b0:2e:b9:e5:43:1d:a4:9e:d9:d4:38:
c8:de:b6:96:a5:de:38:0f:62:09:44:1d:12:fb:63:
80:a0:a1:52:73:24:74:67:e9:84:40:41:46:70:38:
fa:92:4c:71:07:5a:14:ac:ac:66:89:21:05:60:84:
dd:b0:e1:64:e8:56:59:08:bb:59:fa:4d:61:2f:dd:
78:ff:7e:25:68:cd:52:59:1d:a8:86:3c:b6:8b:7e:
7f:0f:76:bb:0c:bd:ea:f2:46:49:38:a6:66:b9:bb:
4a:5e:b7:59:e9:65:1e:c8:66:e0:03:91:00:fc:22:
db:6c:0d:06:e8:5c:f6:66:84:43:16:dd:ef:0b:cf:
a0:2c:cf:30:89:01:14:a5:76:59:50:0a:e4:f7:43:
75:b2:6f:08:15:03:54:8d:54:6b:66:06:84:0e:48:
2f:d9:6d:5f:8c:03:01:cd:f7:e3:ae:2a:59:92:83:
32:51:73:e4:b3:a8:21:96:07:01:01:e4:5a:9d:e1:
96:42:2f:42:1b:e1:65:91:a6:3e:be:4a:fa:e9:aa:
a7:b6:ae:b9:5e:bf:2d:c7:32:20:18:c3:fe:ce:12:
fd:8a:ea:2d:58:97:2b:f7:fd:1b:cf:30:c0:cb:c3:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:9E:5F:43:23:30:C9:BA:DB:E2:3B:4E:9F:A2:54:26:4F:B1:EB
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cCeX0MjMMm62-I7Tp-iVCZPses.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5e:57:ab:cc:a7:d5:19:b2:51:8c:00:58:6e:42:f2:ce:3d:
24:4c:4b:ca:62:80:89:f5:38:be:77:ef:43:fc:cb:37:bf:c1:
8d:f9:43:0c:f7:59:53:11:ab:43:48:76:16:69:5b:49:fc:28:
b5:17:c2:cd:45:ca:5f:24:ef:61:c9:d4:91:2b:d5:07:a6:90:
c6:51:1b:33:8f:6b:8d:37:b4:6c:ce:ee:22:f9:c2:e2:38:fe:
ca:ac:3b:70:f9:7a:32:73:e8:25:91:32:a2:0b:31:e9:1c:31:
a5:32:e6:b3:5d:ed:5b:74:33:10:c1:71:db:5b:58:e4:57:92:
a3:28:e3:e6:5a:4e:15:02:61:18:63:87:59:97:27:d0:62:6d:
b0:7b:12:ea:43:cc:77:b4:2f:06:a0:f2:3b:ef:7d:20:0b:fe:
1f:63:40:23:16:70:08:39:7d:4e:fa:f8:76:2d:56:99:16:a8:
af:73:f7:06:17:bf:3c:6e:7d:fe:26:16:93:e1:d3:07:6a:76:
4a:96:2f:b9:a7:b8:58:8e:65:7f:5b:a9:24:c3:88:f8:61:d3:
83:3e:49:dd:1d:f7:90:e0:e3:5a:c9:31:2b:f7:a7:28:86:2f:
60:18:5e:b4:83:c1:f6:d0:6a:9c:05:d7:b7:99:50:72:c9:d3:
41:19:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:34:21 2026 by rpki-client