Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/92MeBkFac7cTGXFhxS1FXuBSa0I.roa
File: 92MeBkFac7cTGXFhxS1FXuBSa0I.roa (raw, json)
Hash identifier: THDYCMuLzxPNuu4ngp5/tAYm6tYSM2khr3Wnn29aih8=
Subject key identifier: F7:63:1E:06:41:5A:73:B7:13:19:71:61:C5:2D:45:5E:E0:52:6B:42
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E871F7AC86642D8BEFDA4816E759D1E57
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/92MeBkFac7cTGXFhxS1FXuBSa0I.roa
Signing time: Tue 02 Jun 2026 06:57:27 +0000
ROA not before: Tue 02 Jun 2026 06:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:1f:7a:c8:66:42:d8:be:fd:a4:81:6e:75:9d:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 2 06:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7631e06415a73b713197161c52d455ee0526b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:59:c2:c1:f5:ba:bf:d4:c9:43:79:04:72:
3e:7f:6c:77:da:ff:1a:da:d5:2b:68:b1:a0:45:1c:
02:b9:b4:11:d5:b0:71:fa:57:45:0b:6a:a9:cc:60:
4d:ff:20:d7:80:ad:e7:b2:98:6a:50:e2:71:86:0d:
52:c9:90:8b:99:98:7e:01:db:86:18:28:55:3e:e3:
ed:3a:e8:ce:e2:12:db:ed:fd:ed:de:46:21:e9:21:
2d:39:01:df:96:33:b4:de:60:d1:31:d2:9e:95:2e:
01:cc:c4:fc:f1:ad:b2:6a:df:c8:ba:8e:de:75:80:
02:0e:5d:2e:91:55:99:50:8d:ed:27:33:62:81:f6:
e9:40:0a:52:ed:3e:89:f4:b4:b8:76:2c:4f:84:89:
8f:70:8c:74:bb:eb:f8:43:77:57:1d:10:b0:a6:dc:
85:ed:82:68:da:26:93:5f:27:f0:72:fa:d7:de:2f:
bc:7d:4a:fa:af:0a:76:88:19:d0:80:6d:60:e9:e3:
8e:11:22:ec:59:3f:75:b2:86:86:13:fb:49:1f:52:
ec:48:0c:b4:91:81:34:95:cc:f5:2c:29:3e:11:da:
c3:af:ae:62:19:72:12:c7:bc:76:cf:cf:c4:b6:e7:
c0:57:5b:67:7a:cf:02:b3:fb:a5:1a:09:ef:94:30:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:1E:06:41:5A:73:B7:13:19:71:61:C5:2D:45:5E:E0:52:6B:42
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/92MeBkFac7cTGXFhxS1FXuBSa0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2d:18:2f:3e:29:d9:48:09:7b:0a:4c:59:48:87:9a:44:19:
30:77:f1:62:aa:36:98:ee:8e:06:59:a4:da:2e:18:e2:48:7d:
f6:7e:20:22:3d:ad:66:dd:69:be:1a:9d:a0:7e:87:67:8a:a6:
b7:67:0e:ed:42:4e:26:a1:3e:de:a4:25:fc:cc:5f:d8:f3:3c:
db:d9:d9:c2:0d:1b:a1:c0:5e:71:f0:31:5d:3c:b8:8b:fb:e8:
a5:bc:fd:d2:06:01:e3:c0:15:1f:e2:f9:4e:e9:8f:c7:3c:6b:
c0:6a:b2:b2:bb:a1:f9:75:98:7b:f8:97:d4:52:c8:b8:d7:16:
a3:f1:c5:db:e3:d5:4e:b5:12:0d:d8:a3:ec:42:e3:6c:b5:d4:
1d:ad:42:cd:56:6d:06:f7:a5:c2:b4:36:17:db:eb:da:aa:bf:
4b:61:ca:89:73:00:10:b2:00:d7:3b:e2:54:5c:c3:9d:5f:63:
bb:40:53:4a:a7:59:13:eb:97:fc:7e:9b:51:32:01:74:0c:c1:
ef:af:72:a9:b2:1b:ee:01:f8:81:83:5a:0a:7f:05:0d:07:12:
89:9f:97:a8:47:4f:14:04:17:5e:b2:64:0e:ee:41:82:ea:a9:
94:53:22:2f:e6:c7:49:38:53:dc:b8:9f:62:ee:99:23:06:62:
b7:ed:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:25 2026 by rpki-client