Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7TG4UeiyKI-cAOSglhQL5zp2sXs.roa
File: 7TG4UeiyKI-cAOSglhQL5zp2sXs.roa (raw, json)
Hash identifier: IAG7kMuViaG4AWl9qTuFMndHsaRKXmw+DKJys7fHhsk=
Subject key identifier: ED:31:B8:51:E8:B2:28:8F:9C:00:E4:A0:96:14:0B:E7:3A:76:B1:7B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E8D3C1C80FAB3FE66BDF1AAFAE733EDBF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7TG4UeiyKI-cAOSglhQL5zp2sXs.roa
Signing time: Wed 03 Jun 2026 11:26:27 +0000
ROA not before: Wed 03 Jun 2026 11:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 87.229.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:3c:1c:80:fa:b3:fe:66:bd:f1:aa:fa:e7:33:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 3 11:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed31b851e8b2288f9c00e4a096140be73a76b17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:30:af:61:f3:71:2c:db:e6:3e:cf:86:d6:
a1:5f:50:37:d6:9b:4d:fe:e6:94:43:95:bc:12:1a:
09:a4:b4:d4:2b:dd:af:9b:88:34:77:12:10:d0:99:
28:cc:f6:e8:71:7a:9e:4b:cd:3e:77:48:6c:f1:6c:
c7:c4:aa:cc:87:6d:99:86:d7:45:29:36:18:ce:21:
fa:1a:57:0c:21:f1:3e:ae:a6:12:fa:8c:f9:1e:ff:
ca:6d:ce:94:5f:b5:d1:39:fc:08:2d:49:ed:cd:6b:
8b:1d:c2:aa:b2:48:a9:5c:a2:b2:16:ce:7f:d3:e2:
77:d8:89:5a:5e:15:d0:4d:e3:f6:e1:6b:85:cf:56:
e6:ef:e5:ec:25:ba:3c:a3:12:39:6c:7f:14:fc:1b:
55:06:b2:69:19:78:ae:00:b7:05:ae:27:59:6b:aa:
75:c0:57:4a:ec:6f:24:43:44:ee:2b:60:a9:37:91:
d3:5f:29:99:3b:72:9c:0c:1d:b6:3d:1e:3f:27:24:
7f:dd:10:26:4c:a7:68:8e:b0:bf:19:4b:cf:dd:c3:
f1:b3:d0:25:17:16:30:a7:6e:64:c5:c7:6f:ee:30:
b4:c1:18:f2:ac:0a:b5:21:fc:1a:cc:48:9d:89:68:
00:06:1f:c7:6d:8b:5b:62:0b:6f:4e:f5:6c:7b:79:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:B8:51:E8:B2:28:8F:9C:00:E4:A0:96:14:0B:E7:3A:76:B1:7B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7TG4UeiyKI-cAOSglhQL5zp2sXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:24:c7:83:8c:9d:64:5f:20:dd:f7:61:09:ef:62:0c:e3:2d:
c3:a1:ce:f9:25:ab:fb:58:e9:2c:2e:21:f9:98:60:fd:96:ae:
6d:6c:67:d5:9d:b1:43:3b:73:89:63:80:e1:88:5c:ff:7e:45:
0e:bb:f2:f6:b8:d7:4c:bc:73:ea:53:d4:86:56:6c:c5:f9:18:
84:ad:66:16:a7:c0:7e:11:df:db:e2:f3:80:dd:34:a1:81:22:
b7:bb:08:de:10:59:a1:a3:21:f9:43:ef:f5:8f:1f:7d:2b:2e:
0e:87:64:73:26:ec:bb:20:5f:99:69:56:08:2c:a5:f1:b7:d5:
0f:bf:20:70:15:36:3e:f1:7e:65:57:30:53:39:43:64:74:f2:
b5:e0:ca:33:55:b7:d1:96:6a:9d:1d:63:34:bf:00:bb:88:db:
2f:e1:44:57:c5:20:0f:5a:80:b3:7f:4f:f8:58:60:3f:09:78:
e4:4a:5f:ac:c9:95:4d:e0:c7:30:14:c1:9e:e7:82:fc:a2:4d:
0f:ed:f7:13:e1:df:19:38:23:91:97:c4:a9:5b:ef:59:15:c0:
95:cf:22:95:f2:ec:79:7b:39:b8:a3:b7:5a:40:d6:27:08:ec:
92:d9:06:da:df:c1:84:a5:ef:ea:e7:04:85:f8:9e:32:c0:84:
09:f4:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:07 2026 by rpki-client