Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/B3zqSZ_bL5tvd5POa7JHvoeBlOo.roa
File: B3zqSZ_bL5tvd5POa7JHvoeBlOo.roa (raw, json)
Hash identifier: 54M2GlQlE9JMsrS1sjP0j4Kk++oHfS1H+8eemIro4Gg=
Subject key identifier: 07:7C:EA:49:9F:DB:2F:9B:6F:77:93:CE:6B:B2:47:BE:87:81:94:EA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D2A3D0EDDA4639B998E9F5D47437599D9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/B3zqSZ_bL5tvd5POa7JHvoeBlOo.roa
Signing time: Thu 26 Mar 2026 13:02:17 +0000
ROA not before: Thu 26 Mar 2026 13:02:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.204.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.25.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.40.0/24 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
87.229.124.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3d:0e:dd:a4:63:9b:99:8e:9f:5d:47:43:75:99:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 26 13:02:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=077cea499fdb2f9b6f7793ce6bb247be878194ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:a0:3f:a0:9e:bf:70:71:9b:9d:e0:03:14:
55:ec:69:69:d3:5d:90:64:01:c6:ac:7b:6f:88:02:
b2:df:e6:4e:8d:fe:98:52:d2:a0:5c:8f:1a:9c:b1:
ed:a6:1c:5a:fb:98:d1:d0:a8:a1:3c:5b:f8:a7:17:
b1:97:f7:77:1b:6b:66:51:c0:f9:28:35:d5:e0:a5:
68:fd:a6:ea:4f:bd:b0:a5:58:c6:10:10:ef:1d:cb:
d2:f1:80:d3:e2:3f:25:40:5a:44:55:b8:ef:8d:87:
c3:1c:b0:60:b6:68:d4:91:7d:ba:f7:ad:ad:74:1e:
c7:0c:34:a2:85:c7:21:22:c8:97:b8:30:34:e9:43:
c9:dd:da:b0:4f:23:1e:2e:2f:bc:14:a8:04:fd:45:
e6:b8:07:13:7f:77:c7:97:d2:21:f7:3d:28:52:b1:
ab:4f:c8:f9:25:98:c4:5b:cf:36:b7:24:c9:aa:76:
97:74:73:c2:ee:83:ba:df:25:9f:76:ae:6b:5a:80:
06:61:21:c1:bf:6f:e0:51:54:fb:b2:b1:af:82:fc:
7e:4b:0d:33:bb:3c:22:c1:a0:4c:7c:d1:0c:2a:0f:
d0:49:16:51:70:9e:2b:b5:40:e3:93:c4:03:04:74:
52:a3:e2:8a:b7:95:b5:0e:db:23:69:58:41:8f:11:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7C:EA:49:9F:DB:2F:9B:6F:77:93:CE:6B:B2:47:BE:87:81:94:EA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/B3zqSZ_bL5tvd5POa7JHvoeBlOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.204.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.25.0/24
87.229.35.0/24
87.229.37.0/24
87.229.40.0/24
87.229.52.0/24
87.229.56.0/24
87.229.80.0/23
87.229.112.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:cc:41:66:e4:f0:2f:10:74:c1:da:1f:2e:9c:ab:fd:2f:af:
4e:17:7f:2b:b8:42:db:5e:3c:ab:56:80:51:fd:8f:76:92:7e:
fd:e5:75:d8:14:0b:e8:ec:f3:91:04:aa:1f:7d:61:ab:5e:8d:
29:3a:cf:d8:76:29:d8:b2:a0:cb:22:67:a3:64:53:8d:35:50:
fe:80:92:06:bf:a6:12:da:1a:7e:b9:30:e9:5b:5e:b2:20:0a:
e5:7a:e2:e1:99:93:eb:67:05:f4:09:15:93:44:1e:0b:d4:21:
fc:55:ed:c7:84:a7:bf:41:a9:e5:ef:49:20:ab:ba:c3:0b:6b:
6c:2e:8e:33:20:5c:15:97:18:43:d1:4f:fd:e4:ee:ef:a6:7d:
c1:d8:2a:e9:a6:a9:09:54:2e:59:92:7c:f4:5a:10:3a:74:e7:
2a:e4:88:1b:31:f4:75:f9:0a:97:02:f8:f7:bb:5d:b4:75:b2:
b5:f7:79:2d:d6:9a:5e:6a:5e:af:2d:60:79:2c:86:c9:02:59:
76:45:f0:5a:f2:4b:cb:68:ab:2a:e4:6f:01:4d:5f:ec:aa:c9:
23:2b:e7:ce:d8:8a:e6:f1:ad:84:42:3e:d4:b3:02:ad:79:a5:
79:0b:9b:c5:1a:10:e6:e2:d2:da:d3:0c:e7:65:3f:9a:25:59:
0d:ec:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 00:27:55 2026 by rpki-client