Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0QQvpXJhApYBwxc9Jo_tDuGoI6I.roa
File: 0QQvpXJhApYBwxc9Jo_tDuGoI6I.roa (raw, json)
Hash identifier: x/vx4WfHdu9Rwe8TGWBK/KHZwi3pLoAl8PDQ2gS+Kzg=
Subject key identifier: D1:04:2F:A5:72:61:02:96:01:C3:17:3D:26:8F:ED:0E:E1:A8:23:A2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FE037A755ED56F134F5F3A8320D362C8D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0QQvpXJhApYBwxc9Jo_tDuGoI6I.roa
Signing time: Sat 08 Aug 2026 07:12:51 +0000
ROA not before: Sat 08 Aug 2026 07:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153810
IP address blocks: 87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:37:a7:55:ed:56:f1:34:f5:f3:a8:32:0d:36:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 8 07:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1042fa57261029601c3173d268fed0ee1a823a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:3d:73:83:24:a4:5b:a7:33:91:42:90:ce:
36:93:8e:06:77:cf:82:41:53:81:27:de:83:b8:21:
12:21:70:61:05:d0:5c:5c:b5:95:0c:ef:eb:7c:f1:
73:ca:1b:e5:03:e6:d3:68:a0:9c:0a:47:50:ed:ac:
34:0c:76:f1:ee:72:7d:ba:be:ce:d2:96:94:ad:6f:
02:68:f5:e5:70:01:d2:f5:de:f4:01:d4:a0:99:87:
42:c0:df:2e:b3:0b:11:40:c9:75:c6:23:df:da:a3:
9c:b6:dd:a8:c2:01:50:49:d3:ec:38:b4:7e:d6:ab:
e3:07:97:38:23:ae:bd:10:83:6e:ff:10:ea:0c:4a:
05:06:de:5d:24:24:62:cc:5b:82:da:9f:49:79:60:
9c:25:59:c9:96:65:23:23:32:92:54:7b:27:06:d9:
04:fc:c6:76:fd:cf:e6:63:81:17:12:bf:9b:e7:e6:
0f:c1:5f:e0:63:09:90:3b:94:bb:2f:36:dc:53:5b:
f1:8d:42:66:7f:2e:7e:c6:ad:3a:7f:fa:d8:41:43:
f0:98:59:ef:a9:74:fb:34:7e:83:ca:6e:0b:6e:60:
f3:84:59:1a:e7:61:0d:a0:fc:03:f4:f7:24:eb:5e:
9d:ec:e4:84:c7:ea:d3:17:d6:24:39:ac:92:a0:65:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:04:2F:A5:72:61:02:96:01:C3:17:3D:26:8F:ED:0E:E1:A8:23:A2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0QQvpXJhApYBwxc9Jo_tDuGoI6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
37:63:69:a6:75:52:4b:11:66:97:61:48:f0:16:66:cc:c4:45:
b7:f0:4e:78:64:28:36:cd:7f:fb:31:88:49:0d:0c:27:28:09:
28:58:60:28:c8:00:a1:98:9f:b8:3b:99:6b:e1:bd:0b:69:4d:
34:bd:7e:3f:2d:3d:3f:38:eb:28:fc:d9:e5:f8:c0:82:08:40:
b2:75:bd:d3:da:49:58:56:5c:3e:79:c8:1f:c1:86:61:eb:0a:
82:9f:76:19:e5:44:ae:40:06:7d:97:73:f4:27:a8:67:27:10:
6b:b7:c9:6f:2d:50:3d:9a:08:fb:ab:51:cc:30:ca:ab:12:ea:
20:b4:5d:c3:05:4c:e6:c7:12:e9:35:c4:a9:5e:5a:bf:5e:5c:
1d:0e:b6:ef:8a:36:2d:ed:70:97:34:48:4f:33:f0:37:2b:d8:
f1:0e:df:79:33:22:99:7b:92:5d:7a:73:b4:be:b7:03:dc:34:
da:81:87:66:43:21:b9:cd:e9:31:d9:13:9b:6b:1e:3e:f5:c5:
39:06:b1:e4:da:0f:bc:50:86:36:f2:dc:ee:0b:0b:b0:ef:b0:
15:94:e2:3c:01:1b:92:a4:6a:47:3c:e5:4f:44:54:0c:e0:9d:
d5:6f:ac:02:3d:fb:3f:d1:4a:a2:72:6c:53:0d:41:67:b4:ac:
9f:48:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:49 2026 by rpki-client