Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cBVGhcB-ecf_XhMVZ_lKU2Ov8Y.roa
File: 4cBVGhcB-ecf_XhMVZ_lKU2Ov8Y.roa (raw, json)
Hash identifier: Qlu1jjYYw0O1xIMN1NgaUXbLQR6vHZ0Uhd7EQoYnG4o=
Subject key identifier: E1:C0:55:1A:17:01:F9:E7:1F:FD:78:4C:55:9F:E5:29:4D:8E:BF:C6
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F243644DF8CD40CA0793B8706E4FD5C22
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cBVGhcB-ecf_XhMVZ_lKU2Ov8Y.roa
Signing time: Thu 02 Jul 2026 19:02:44 +0000
ROA not before: Thu 02 Jul 2026 19:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 87.229.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:36:44:df:8c:d4:0c:a0:79:3b:87:06:e4:fd:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 2 19:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1c0551a1701f9e71ffd784c559fe5294d8ebfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:39:38:1b:a4:d8:a3:64:3a:b8:ce:ca:71:
10:45:1b:d0:f9:6b:a1:da:24:1f:c0:5e:c3:c3:51:
f1:3b:8f:01:fb:42:1b:22:7f:fe:ed:8b:81:cf:6c:
16:a7:7b:30:9a:90:33:c5:d1:89:a7:2a:96:27:89:
f2:e8:03:f2:70:04:46:4c:2a:73:9b:2d:ce:2f:d1:
e4:19:0b:9a:7a:cd:28:59:32:52:b7:e0:0c:cb:71:
11:41:07:bf:47:5f:b5:a4:df:45:42:c1:43:32:05:
b8:42:12:c2:cf:82:79:b2:6c:31:89:37:f7:91:90:
98:40:13:75:1f:3d:10:0f:54:b4:f8:81:ad:4f:11:
61:de:99:ec:2c:31:77:e5:50:80:8c:b5:55:04:31:
e8:81:b2:a7:fd:9d:ad:0c:15:a9:ab:97:35:2a:12:
83:04:20:69:f1:c6:53:5a:bd:76:40:0a:50:14:ed:
5b:de:7b:22:39:49:c8:55:9a:37:e8:7a:14:e1:1e:
b8:08:6a:2d:2c:33:3b:0f:86:99:0e:43:85:6e:3f:
05:c0:f7:10:ec:89:b2:2c:78:a4:68:bf:79:20:a6:
9d:84:84:58:57:30:5b:0d:d3:ae:ea:36:e3:92:ea:
e0:97:a6:be:60:7f:4c:2a:6c:24:df:4d:3c:53:b3:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:55:1A:17:01:F9:E7:1F:FD:78:4C:55:9F:E5:29:4D:8E:BF:C6
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4cBVGhcB-ecf_XhMVZ_lKU2Ov8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:c7:b2:ac:d9:f4:7d:b4:85:3a:a9:67:cc:02:f5:47:bd:
3b:a8:96:f9:fe:7e:3a:0f:d0:84:5c:77:63:c3:bc:3b:6f:7a:
a2:3e:90:35:c0:26:c1:a2:09:81:8e:d1:f8:a7:35:a4:e2:a8:
da:61:8d:08:0a:ab:f0:54:98:a1:81:98:8e:3f:ce:ac:e5:3f:
06:85:a0:db:a9:98:2d:df:ca:6b:d9:0b:31:9b:98:6c:10:95:
9a:88:fc:27:f3:ae:35:85:29:21:a8:f9:d5:22:16:59:61:cc:
99:11:e3:34:8d:f2:78:24:f8:8d:74:09:bc:a7:02:cb:8e:79:
34:91:87:c3:20:ce:17:f7:d0:15:9f:b1:4d:35:4c:4c:26:7f:
25:02:88:d3:30:43:d0:f2:f9:e5:57:75:fe:f5:58:6f:dd:28:
99:cc:d7:4d:1d:94:ae:c8:4a:55:cc:90:7e:ad:ae:a0:1e:64:
30:5b:b9:6a:ca:7c:94:21:7e:74:85:d1:70:cf:bd:ee:17:cf:
d7:7f:c4:06:b3:a2:10:86:6d:46:95:41:3e:7d:0a:62:7b:37:
ca:b3:68:fe:9e:5c:d3:7c:a7:22:78:57:de:95:88:0d:56:8c:
f4:76:bb:59:87:8e:b9:32:0c:2a:30:f0:5c:b8:7e:1f:ee:4f:
e9:da:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:33 2026 by rpki-client