Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/C1eCK0SjVIIDeIxb8xDO5PXQo9k.roa
File: C1eCK0SjVIIDeIxb8xDO5PXQo9k.roa (raw, json)
Hash identifier: fiOHkr1GTU8W6hdG3bI4Jq9GAOfvtmsJUNFxNsT3Z4E=
Subject key identifier: 0B:57:82:2B:44:A3:54:82:03:78:8C:5B:F3:10:CE:E4:F5:D0:A3:D9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0A3B2040224CB0CCBB6F1DDA3A04FB22A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/C1eCK0SjVIIDeIxb8xDO5PXQo9k.roa
Signing time: Tue 15 Sep 2026 06:12:27 +0000
ROA not before: Tue 15 Sep 2026 06:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154900
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:b2:04:02:24:cb:0c:cb:b6:f1:dd:a3:a0:4f:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 15 06:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b57822b44a3548203788c5bf310cee4f5d0a3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:18:c7:7b:58:b3:4e:e2:04:1c:13:6e:73:
e3:04:31:56:81:62:13:33:c9:27:25:60:4e:f5:a0:
5b:b1:59:75:13:a8:e1:7d:e4:78:ed:1f:a2:3b:73:
bb:c2:95:2a:74:0a:43:1f:f8:76:b9:69:b5:c9:84:
94:a5:5e:a2:7f:ce:5d:3a:27:08:4a:26:1f:1d:2b:
ef:dc:a9:d7:7a:58:54:a4:58:13:15:65:66:ef:b3:
d5:b2:7c:b7:15:ba:64:c3:c3:ac:3f:06:ad:f2:f5:
03:17:69:35:32:63:52:d0:f1:bf:f2:7a:a5:5f:73:
39:af:a1:2e:9c:51:fa:af:bb:6d:4c:9b:c0:88:11:
c2:c1:fe:b0:90:3f:00:03:f8:e9:34:39:d8:0a:d5:
55:4b:91:d0:48:88:7b:ce:e4:9d:10:7a:99:0e:1e:
dd:2d:31:7a:d1:40:c3:76:44:6f:0c:45:0e:7a:73:
44:48:77:5c:2f:d4:c4:38:ae:c4:f2:d9:ea:a1:66:
26:d9:a7:a0:d1:a5:b0:1c:87:80:30:a7:5e:84:ac:
47:eb:ec:e2:b8:75:ce:f4:66:77:ee:d6:43:c1:09:
70:c2:73:50:e0:b7:26:85:e9:c2:7b:60:2f:8f:44:
2c:ff:2f:48:cc:6b:0b:6e:26:ad:06:fd:be:78:b0:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:82:2B:44:A3:54:82:03:78:8C:5B:F3:10:CE:E4:F5:D0:A3:D9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/C1eCK0SjVIIDeIxb8xDO5PXQo9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:53:41:17:58:c3:41:35:12:3d:e0:c3:47:b9:3e:30:06:e3:
ee:10:b2:a6:d8:4e:0a:65:4d:e0:74:88:6f:cc:94:c9:46:68:
79:10:fc:c9:16:6b:42:16:da:c4:de:1f:0d:86:42:02:df:5c:
b8:49:8b:0c:93:ac:2a:33:d3:b3:c5:f8:98:42:5e:16:92:48:
76:89:e2:78:91:73:ac:fb:91:b3:01:39:7f:50:79:86:4f:ba:
15:45:41:45:10:6f:ac:4d:e3:e4:19:78:76:8f:f5:65:62:b1:
1f:2c:c7:f0:29:55:32:20:08:93:dc:4b:0c:d1:ad:4f:b7:2f:
59:1b:f0:be:f9:e3:5e:17:b6:f3:13:2a:f7:a4:8f:2f:9e:f8:
10:2a:ac:fe:e7:e7:cd:ba:40:b6:22:57:b6:d4:d7:b2:f2:84:
da:43:7f:18:c0:7d:d7:49:0a:5d:63:16:d6:16:46:c2:ff:11:
ea:1b:e4:1c:03:32:7e:b0:33:11:b9:81:ee:fb:56:b9:28:da:
28:95:15:c1:bc:af:18:c7:d4:00:8a:a6:67:88:1d:0c:cd:35:
46:74:b8:fb:ac:3f:e4:59:fb:81:49:2c:77:8b:88:aa:26:9e:
8f:40:4c:21:a7:eb:ef:13:c7:0e:c4:53:7e:de:02:be:d9:86:
5c:34:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:29:07 2026 by rpki-client