Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0MaW5DG1anbwa6l3PJ4rsfPztNo.roa
File: 0MaW5DG1anbwa6l3PJ4rsfPztNo.roa (raw, json)
Hash identifier: Jnuv6CQojRrpfYQJXhdbtYGVml+aRwWyZNwXBWzrPOg=
Subject key identifier: D0:C6:96:E4:31:B5:6A:76:F0:6B:A9:77:3C:9E:2B:B1:F3:F3:B4:DA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019ED4F697659991FF9F31AF3CC8C8E67EFA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0MaW5DG1anbwa6l3PJ4rsfPztNo.roa
Signing time: Wed 17 Jun 2026 09:43:10 +0000
ROA not before: Wed 17 Jun 2026 09:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:f6:97:65:99:91:ff:9f:31:af:3c:c8:c8:e6:7e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 17 09:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0c696e431b56a76f06ba9773c9e2bb1f3f3b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:dd:0b:9a:f7:af:f5:88:a9:23:a6:24:70:
40:46:51:3f:d2:c6:eb:74:d9:b9:f8:53:0c:ff:19:
5b:24:77:ae:61:0d:a9:7e:3e:ad:0b:6b:8a:0f:fc:
bb:a6:fa:bd:07:f3:ec:ff:99:2f:22:7b:43:d6:8a:
4e:e7:07:f9:15:ce:b7:47:3a:88:fe:f9:90:13:4e:
fa:5e:ad:b4:77:cc:4c:2d:a5:f4:34:b1:fa:44:3b:
8c:7c:b6:6f:82:08:0b:f5:7b:04:3e:22:30:e0:91:
f5:5b:fa:0d:d4:69:c0:ca:e4:29:70:5c:5f:01:01:
ce:05:99:fb:f6:d4:ce:e8:9c:7c:59:89:62:ba:96:
62:bf:8d:5f:c4:f1:43:f6:11:2f:ca:5b:01:55:4b:
a0:ff:08:ce:f4:08:7e:91:03:62:60:fc:19:fc:30:
06:3a:06:fd:db:70:70:89:d9:5a:af:f8:40:e8:57:
93:92:33:ec:4d:05:a8:a6:6e:78:12:e3:95:7c:00:
5b:42:1c:c6:fb:b5:7e:8e:b3:66:4e:c2:06:c8:7d:
3c:05:38:f6:20:58:1b:3a:61:9a:b9:53:14:2c:ba:
21:09:9b:d1:88:e1:6c:ec:e1:79:54:5c:17:be:11:
a4:46:8b:89:c6:a8:88:8e:dc:78:03:5e:f0:8a:87:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:96:E4:31:B5:6A:76:F0:6B:A9:77:3C:9E:2B:B1:F3:F3:B4:DA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0MaW5DG1anbwa6l3PJ4rsfPztNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e8:90:5a:4d:91:22:87:dd:81:c5:bc:25:da:bb:f8:8f:7c:
67:59:fe:24:86:4c:4e:d6:d9:82:83:1e:cb:b0:b8:bf:43:0c:
31:41:1e:27:7e:ff:e9:0c:06:a3:49:86:95:4c:c9:f3:93:7f:
a5:57:c9:bf:2c:21:23:f6:81:c6:bb:42:6d:dd:63:be:c2:cc:
3c:45:59:58:84:45:77:c0:20:d3:6b:f9:be:4e:dc:57:98:9f:
c8:bf:c1:35:01:f6:fb:b3:28:e6:86:7f:f9:8e:08:66:d7:e0:
0c:2e:46:ae:ab:8e:25:c8:44:46:4e:78:9b:74:4a:22:8d:1e:
82:23:8f:ee:cd:82:9e:eb:eb:06:2a:6f:ad:04:12:a7:ce:8b:
e6:90:fa:c3:73:f3:d0:54:52:bf:e1:0f:21:09:3e:2f:06:fa:
0d:f9:93:3c:0b:76:8e:e8:c7:47:30:93:40:6a:af:cf:39:27:
38:a7:2a:54:42:00:5a:42:0e:fa:9c:41:2c:89:d7:18:2d:11:
ea:8c:c9:df:ad:9f:48:56:14:2b:00:db:65:09:7e:32:53:33:
26:e4:04:34:32:16:83:67:15:c2:a4:05:4d:3d:21:25:4c:06:
85:70:00:9f:64:7f:df:47:e8:da:85:9d:74:d0:5d:1a:0f:9b:
13:7e:6a:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7U9pdlmZH/nzGvPMjI5n76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNjE3MDk0MzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGM2OTZlNDMxYjU2YTc2ZjA2YmE5NzczYzllMmJiMWYzZjNiNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+bdC5r3r/WIqSOmJHBARlE/0sbr
dNm5+FMM/xlbJHeuYQ2pfj6tC2uKD/y7pvq9B/Ps/5kvIntD1opO5wf5Fc63RzqI
/vmQE076Xq20d8xMLaX0NLH6RDuMfLZvgggL9XsEPiIw4JH1W/oN1GnAyuQpcFxf
AQHOBZn79tTO6Jx8WYliupZiv41fxPFD9hEvylsBVUug/wjO9Ah+kQNiYPwZ/DAG
Ogb923Bwidlar/hA6FeTkjPsTQWopm54EuOVfABbQhzG+7V+jrNmTsIGyH08BTj2
IFgbOmGauVMULLohCZvRiOFs7OF5VFwXvhGkRouJxqiIjtx4A17wioc9dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDGluQxtWp28GupdzyeK7Hz87TaMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvME1hVzVERzFhbmJ3YTZsM1BKNHJzZlB6dE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+U4MA0G
CSqGSIb3DQEBCwUAA4IBAQA46JBaTZEih92Bxbwl2rv4j3xnWf4khkxO1tmCgx7L
sLi/QwwxQR4nfv/pDAajSYaVTMnzk3+lV8m/LCEj9oHGu0Jt3WO+wsw8RVlYhEV3
wCDTa/m+TtxXmJ/Iv8E1Afb7syjmhn/5jghm1+AMLkauq44lyERGTnibdEoijR6C
I4/uzYKe6+sGKm+tBBKnzovmkPrDc/PQVFK/4Q8hCT4vBvoN+ZM8C3aO6MdHMJNA
aq/POSc4pypUQgBaQg76nEEsidcYLRHqjMnfrZ9IVhQrANtlCX4yUzMm5AQ0MhaD
ZxXCpAVNPSElTAaFcACfZH/fR+jahZ100F0aD5sTfmqx
-----END CERTIFICATE-----
Generated at Wed Jun 17 22:40:40 2026 by rpki-client