Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa
File: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (raw, json)
Hash identifier: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=
Subject key identifier: 57:B6:F1:27:B7:D9:58:AA:E0:60:2D:77:68:DA:58:A5:FE:3E:43:D3
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019DCE85C721D250D124C2D5377C0065E704
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa
Signing time: Mon 27 Apr 2026 10:39:26 +0000
ROA not before: Mon 27 Apr 2026 10:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28725
IP address blocks: 80.78.150.0/24 maxlen: 24
212.96.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 14:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:85:c7:21:d2:50:d1:24:c2:d5:37:7c:00:65:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Apr 27 10:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b6f127b7d958aae0602d7768da58a5fe3e43d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:4f:81:f2:06:fa:8c:41:6f:d4:2f:f0:87:
02:dd:37:fe:6b:2c:0b:af:12:23:a4:83:42:3b:56:
10:49:8f:c4:d6:20:cb:68:57:70:8f:62:e2:dd:3e:
34:8a:ce:95:b0:25:af:cb:03:ea:2b:4d:60:72:0d:
65:6d:f3:36:bb:c3:67:46:c5:6c:2c:2c:eb:59:76:
de:e5:e7:3a:59:b7:e3:0c:dc:93:a1:e1:95:ba:e4:
7d:bb:0d:47:0f:f8:cc:99:54:c2:58:a1:8b:f7:6d:
90:e4:d4:de:ea:74:07:73:be:f8:b6:f9:3e:ba:aa:
c5:f7:71:86:a8:93:19:dd:3d:5c:1a:d3:a3:51:5f:
8f:77:9b:66:0a:d5:d2:7a:95:b2:32:62:74:87:55:
32:db:2a:8a:71:47:c2:81:22:3e:05:ae:37:24:ec:
27:2f:f0:14:4a:ca:6c:e9:c8:a0:7c:72:f4:0e:c9:
81:a1:a7:9e:15:39:f4:67:57:0a:58:90:ad:25:81:
11:6a:1c:ec:00:ee:9f:04:51:74:fd:58:53:20:91:
8c:fc:e8:a1:38:e3:8b:e8:08:a4:d3:6f:75:4d:9f:
96:5f:33:28:e3:0f:be:68:7f:c2:2c:10:15:76:b1:
34:0e:1c:5c:8b:96:c2:35:51:50:15:d0:54:cd:23:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:F1:27:B7:D9:58:AA:E0:60:2D:77:68:DA:58:A5:FE:3E:43:D3
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.150.0/24
212.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:04:f4:96:42:d3:c2:7c:4a:08:0a:82:ce:b5:1d:5c:30:8e:
f6:74:e1:1f:cb:44:de:84:93:47:d5:97:dd:09:8b:c8:d4:2a:
a1:98:a1:c4:15:01:31:5c:1a:43:2b:5f:8f:7c:40:ab:2b:06:
91:7f:c0:73:d0:98:e0:45:73:3b:fb:3b:45:47:d2:60:df:1c:
a9:10:4c:e9:e8:88:11:52:32:ad:5f:91:29:7e:47:02:08:7a:
ba:e6:0d:f5:ad:55:b6:54:61:0d:a9:c9:00:20:3a:43:a7:9f:
16:1b:7d:08:e9:32:f7:0b:c2:a6:63:65:e5:44:56:2f:a5:58:
72:74:22:88:d4:e7:a4:98:46:fd:9b:b1:7d:01:a8:43:51:24:
6d:47:56:10:77:fd:c9:39:e4:a0:4a:ba:f4:6b:b0:98:1d:87:
81:06:b1:0f:fd:bd:a2:10:b5:94:85:8d:04:c0:8b:d3:cb:78:
85:57:3d:d8:8e:40:07:48:fd:ca:b7:22:cd:dd:7f:14:41:e9:
c4:9f:65:40:5f:c1:f9:7b:c9:ca:7d:c8:4f:d3:69:62:d7:70:
8f:ee:98:e1:6c:df:77:97:c9:cd:37:53:b5:fb:ef:a6:77:0f:
19:3e:c7:f9:f1:77:0c:26:7b:5a:34:53:6b:54:d2:1c:aa:b4:
b2:31:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 00:35:08 2026 by rpki-client