Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52eNQBo9AFi9nqgSR73LprvGaIc.roa
File: 52eNQBo9AFi9nqgSR73LprvGaIc.roa (raw, json)
Hash identifier: UsvFZixIAvGKDADBzWbtdpiwlUDan6m3jDa+hvXeYkI=
Subject key identifier: E7:67:8D:40:1A:3D:00:58:BD:9E:A8:12:47:BD:CB:A6:BB:C6:68:87
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E965C478EF100E270F4160C7F6DF1CA71
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52eNQBo9AFi9nqgSR73LprvGaIc.roa
Signing time: Fri 05 Jun 2026 05:58:10 +0000
ROA not before: Fri 05 Jun 2026 05:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152918
IP address blocks: 87.229.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:5c:47:8e:f1:00:e2:70:f4:16:0c:7f:6d:f1:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 5 05:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7678d401a3d0058bd9ea81247bdcba6bbc66887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:62:75:8d:a7:b0:3a:68:b8:f1:c8:e2:7a:
4c:0c:f2:70:f2:f2:bc:55:66:4b:ae:eb:89:09:54:
be:b4:23:6d:1d:a4:87:d5:74:67:22:c8:5e:dd:27:
a1:3f:2a:d5:af:ae:6d:20:b7:fe:6f:f3:8e:6d:e1:
88:b4:88:c0:8c:c8:6f:75:dc:2b:1a:27:63:1e:6f:
cb:bf:36:81:e6:3f:e1:f7:2a:9e:d7:3b:50:e1:e0:
77:1f:f8:69:09:89:19:37:38:d9:f0:18:9e:73:23:
11:52:ea:59:3f:29:6e:6b:54:bd:79:99:63:18:56:
d8:b0:2d:d9:ac:fa:f2:a3:de:57:4e:79:f3:26:d7:
00:61:41:ed:d5:89:b5:f7:a5:5b:7b:64:95:d1:f4:
91:b2:88:72:e0:88:26:eb:3f:7e:38:20:56:da:d2:
f5:06:94:50:2e:1c:49:93:15:5d:68:b0:d9:64:4e:
71:be:b2:e1:39:25:5d:e6:1f:07:57:b1:ab:33:7f:
fd:eb:2c:a0:29:09:f1:8a:63:47:ac:83:9a:05:c1:
4a:c7:44:95:60:6a:66:61:c9:c4:de:3a:ba:05:49:
34:26:4c:cf:85:bc:6f:98:af:da:bf:c8:c3:05:2c:
32:93:fb:19:44:97:d5:c9:ba:72:fc:fe:af:c0:80:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:8D:40:1A:3D:00:58:BD:9E:A8:12:47:BD:CB:A6:BB:C6:68:87
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/52eNQBo9AFi9nqgSR73LprvGaIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b0:94:d3:68:8e:63:86:1e:3d:59:be:23:b2:33:4a:a0:f7:
8f:49:97:ea:d3:5d:cc:7d:1b:b6:53:d2:4b:f8:a8:e7:b1:1c:
71:fb:ae:ac:9c:d6:4e:c8:32:24:a1:38:85:c3:f1:e4:76:3d:
59:48:67:5f:48:68:6d:6c:3a:80:55:04:14:1f:90:e8:19:7d:
52:98:c0:69:8d:7c:fa:a8:b8:ce:cc:ca:57:f7:e6:8b:f5:54:
9c:d9:7b:49:e3:01:14:09:66:f9:a4:a5:85:8b:3e:20:b4:a8:
2b:b3:e8:e9:f6:72:25:d3:a6:fa:4c:1b:98:39:70:91:79:9a:
1f:9c:43:f7:13:69:b9:76:15:cc:8b:c0:d9:5b:04:3c:a1:2f:
61:80:2c:13:33:fa:c0:7a:9e:3d:e6:57:11:fb:01:4a:2b:dd:
5c:6b:b4:b4:bd:ad:be:ea:a1:a5:d1:b3:12:81:5f:89:76:6b:
6f:27:a2:37:e4:f2:76:1f:a8:3b:9a:a7:30:a4:54:df:36:14:
26:71:60:01:4c:b6:1d:96:8a:e4:53:f2:17:6a:9f:76:41:90:
de:15:05:a4:a9:10:1f:9d:3c:54:3a:7c:9b:21:be:32:e1:14:
b6:36:e6:40:4c:9e:66:09:0c:4d:c3:a9:62:e0:fa:7d:c2:58:
0d:b3:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:34 2026 by rpki-client