Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IdJG6k4tSmOTlbv1eq3jyed27XA.roa
File: IdJG6k4tSmOTlbv1eq3jyed27XA.roa (raw, json)
Hash identifier: XWrmpeinLafN5yjcatayEg9dAf51j7ci+Cir7aakIDY=
Subject key identifier: 21:D2:46:EA:4E:2D:4A:63:93:95:BB:F5:7A:AD:E3:C9:E7:76:ED:70
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DEDEDE2F1D52E896467C05A8224386364
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IdJG6k4tSmOTlbv1eq3jyed27XA.roa
Signing time: Sun 03 May 2026 13:01:23 +0000
ROA not before: Sun 03 May 2026 13:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.200.0/24 maxlen: 24
79.172.204.0/24 maxlen: 24
79.172.214.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.40.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
87.229.124.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ed:e2:f1:d5:2e:89:64:67:c0:5a:82:24:38:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 3 13:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21d246ea4e2d4a639395bbf57aade3c9e776ed70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:fe:35:38:ba:20:7e:c6:1a:fb:ff:52:5d:
00:63:58:b8:cd:df:67:fe:fc:85:99:83:ab:43:d1:
b1:b9:5a:9d:ac:c7:48:9e:b3:df:26:7e:d3:35:33:
17:5a:3a:04:dd:b6:91:be:34:0a:2f:e9:d3:8d:9f:
9e:74:6b:9e:43:c2:96:70:17:ca:bc:67:5c:bb:f8:
bc:81:46:78:b9:00:c3:f2:d3:6d:90:48:cd:2c:96:
cc:fa:44:8d:34:cd:78:1b:cb:e7:a9:6b:11:7d:b3:
4c:37:38:7e:08:c7:77:c6:34:1b:77:cd:00:01:53:
a9:ba:cd:b9:28:b8:29:36:2e:f3:5c:21:18:69:e5:
ac:b0:f3:62:75:e2:56:4e:75:bd:ae:2d:ca:4d:0a:
18:6a:12:0c:b0:7e:c9:0e:5c:18:8a:b9:89:de:8c:
68:96:f6:fa:48:9c:8c:19:be:86:77:39:9b:a6:98:
7d:d2:82:98:3d:d8:68:77:3f:c4:13:15:0c:5e:a6:
1b:50:9d:47:c0:c4:ca:d0:69:9f:85:ea:e2:0e:b8:
89:c4:52:bc:7b:88:e3:6f:93:40:2f:6c:5b:5b:f9:
cb:75:61:d4:1d:6b:16:9c:1e:d1:14:3a:8c:95:25:
9c:e1:ea:aa:c9:2a:0c:ed:36:cf:2c:45:f4:35:e3:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:46:EA:4E:2D:4A:63:93:95:BB:F5:7A:AD:E3:C9:E7:76:ED:70
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IdJG6k4tSmOTlbv1eq3jyed27XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.204.0/24
79.172.214.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.23.0/24
87.229.35.0/24
87.229.37.0/24
87.229.40.0/24
87.229.64.0/24
87.229.70.0/24
87.229.80.0/23
87.229.112.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2b:37:54:0b:73:e6:8c:5c:03:ef:a6:47:84:42:f9:09:71:
43:55:20:37:81:bd:1f:ee:4a:68:aa:48:78:72:b2:9b:9f:d2:
87:dc:93:6c:bd:fc:52:60:7e:c3:5a:e7:7d:f3:54:db:8a:f3:
36:2a:49:b7:e6:7f:6c:2b:17:7d:4c:65:5f:92:e7:bd:4f:8f:
3e:3f:ef:e9:31:45:70:2d:fe:b8:c0:8e:71:da:65:d9:53:cb:
23:4c:b2:29:4d:4b:e5:91:54:6f:28:22:98:bc:5c:e0:13:25:
a7:21:f6:1f:25:62:a2:47:8b:e4:8a:29:63:75:cf:06:20:e8:
8f:6a:f9:b1:29:a3:51:95:3f:e5:25:e4:d5:0a:71:81:6c:d6:
d6:a7:b5:34:63:b6:c0:15:e2:c8:10:70:7e:4e:6b:70:25:4d:
cb:ec:09:32:f9:aa:47:b8:1c:f3:ea:b0:30:a5:96:5d:c9:bd:
3d:86:54:77:0e:98:95:71:04:89:c6:b6:b9:90:a9:7a:5f:ce:
0e:1a:1d:54:94:e9:24:ec:42:79:d4:16:97:0f:5e:f5:10:75:
32:e7:8f:22:3c:a1:fc:02:12:3b:d6:bc:7a:ad:c4:c5:52:27:
e2:47:67:8f:e2:b6:e6:69:ca:d2:fa:cf:44:2f:53:45:b9:0c:
c0:ea:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:35:50 2026 by rpki-client