Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ImXc3xyc-cV7Y0swwa8BxwBc5yA.roa
File: ImXc3xyc-cV7Y0swwa8BxwBc5yA.roa (raw, json)
Hash identifier: SbK+Rjc3FmVCD0JciwZJ/8Jvr4PEgFj9oSfu+gbFNDc=
Subject key identifier: 22:65:DC:DF:1C:9C:F9:C5:7B:63:4B:30:C1:AF:01:C7:00:5C:E7:20
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019EF10AC6D88EA85F8DDB7A8A678589F22A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ImXc3xyc-cV7Y0swwa8BxwBc5yA.roa
Signing time: Mon 22 Jun 2026 20:34:35 +0000
ROA not before: Mon 22 Jun 2026 20:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197331
IP address blocks: 87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:0a:c6:d8:8e:a8:5f:8d:db:7a:8a:67:85:89:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 22 20:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2265dcdf1c9cf9c57b634b30c1af01c7005ce720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:dc:11:45:b0:7a:8f:c3:df:ef:8c:96:c6:
f2:88:bd:df:c6:2a:fd:d2:84:a3:e9:18:d3:4d:1e:
ee:37:b8:da:78:83:eb:9c:cf:fd:48:e7:5a:0d:33:
eb:84:d6:6a:f5:10:d7:73:85:6d:c8:8e:87:77:01:
67:59:f4:45:3b:df:4c:03:08:60:23:eb:6a:47:04:
53:a9:7e:fd:01:38:6d:5e:a5:51:62:e4:4d:4c:6a:
ce:97:16:72:e8:94:53:41:56:7b:a8:8f:87:24:01:
38:31:1a:95:16:fa:8f:ea:71:f6:09:94:b3:ba:50:
14:08:fe:58:80:b6:af:5e:ce:b1:61:fa:35:d0:f6:
9f:9a:9b:f0:48:3e:cb:da:eb:a8:44:a6:25:f9:63:
5c:93:c8:c1:18:82:fa:4e:90:39:07:cf:0e:fb:20:
bf:f2:2e:49:ed:17:78:8b:c6:89:27:da:76:2d:ec:
34:68:0b:bb:af:ef:37:f8:d1:b0:58:e8:f0:d1:58:
1d:2f:3e:ff:13:41:bf:17:f8:a5:7f:6e:6f:78:7c:
96:72:ea:97:ca:80:7c:82:d6:c5:46:ab:0d:03:50:
6b:fb:e2:1c:9a:90:f6:51:f6:36:9b:48:34:77:c5:
0b:da:f4:c7:e9:a6:e0:15:b7:47:c3:40:41:77:78:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:DC:DF:1C:9C:F9:C5:7B:63:4B:30:C1:AF:01:C7:00:5C:E7:20
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ImXc3xyc-cV7Y0swwa8BxwBc5yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
52:18:d7:ba:a5:60:cc:87:40:85:57:91:14:6d:1d:ac:48:4b:
a9:11:3a:76:73:7b:8a:e0:a6:e2:9e:91:1e:fc:c4:ce:40:da:
a3:ae:4a:cf:25:72:21:21:9a:32:3c:42:f6:8e:d3:51:9a:5c:
7d:9a:3a:b9:d6:6c:8d:6c:d2:e6:29:c2:50:8f:04:17:e2:ba:
0d:49:dd:39:b3:81:1b:a1:b7:ad:9f:68:75:ea:96:75:f8:9a:
f9:be:47:ea:7f:2c:2c:09:bd:69:7e:fe:0d:b7:61:ac:33:dd:
d7:11:bf:61:ff:a1:26:dd:14:5f:18:bf:c1:fa:d8:b1:cd:ca:
6f:68:28:dd:7e:47:7c:ed:6d:82:99:02:c7:70:f3:86:48:8d:
11:38:97:dc:d0:29:a0:d1:b6:21:92:ad:c4:a7:52:e4:59:30:
91:2c:99:20:b7:09:8b:89:2c:e4:71:09:69:2c:70:90:45:5f:
cc:cf:6e:25:f5:07:77:62:ce:52:11:72:f9:20:1d:68:d4:bf:
cb:a6:eb:4d:41:cf:f2:6d:64:b4:c6:ae:f5:56:92:ec:ed:eb:
a7:81:95:08:8f:01:b1:56:57:f0:c8:b1:44:25:8e:5c:dd:75:
9a:ed:e0:1b:da:97:da:87:33:60:d7:d9:5b:20:fb:c1:70:4a:
a1:b5:67:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7xCsbYjqhfjdt6imeFifIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNjIyMjAzNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjY1ZGNkZjFjOWNmOWM1N2I2MzRiMzBjMWFmMDFjNzAwNWNlNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIjcEUWweo/D3++MlsbyiL3fxir9
0oSj6RjTTR7uN7jaeIPrnM/9SOdaDTPrhNZq9RDXc4VtyI6HdwFnWfRFO99MAwhg
I+tqRwRTqX79AThtXqVRYuRNTGrOlxZy6JRTQVZ7qI+HJAE4MRqVFvqP6nH2CZSz
ulAUCP5YgLavXs6xYfo10PafmpvwSD7L2uuoRKYl+WNck8jBGIL6TpA5B88O+yC/
8i5J7Rd4i8aJJ9p2Lew0aAu7r+83+NGwWOjw0VgdLz7/E0G/F/ilf25veHyWcuqX
yoB8gtbFRqsNA1Br++IcmpD2UfY2m0g0d8UL2vTH6abgFbdHw0BBd3ihiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJl3N8cnPnFe2NLMMGvAccAXOcgMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvSW1YYzN4eWMtY1Y3WTBzd3dhOEJ4d0JjNXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UwMA0G
CSqGSIb3DQEBCwUAA4IBAQBSGNe6pWDMh0CFV5EUbR2sSEupETp2c3uK4KbinpEe
/MTOQNqjrkrPJXIhIZoyPEL2jtNRmlx9mjq51myNbNLmKcJQjwQX4roNSd05s4Eb
obetn2h16pZ1+Jr5vkfqfywsCb1pfv4Nt2GsM93XEb9h/6Em3RRfGL/B+tixzcpv
aCjdfkd87W2CmQLHcPOGSI0ROJfc0Cmg0bYhkq3Ep1LkWTCRLJkgtwmLiSzkcQlp
LHCQRV/Mz24l9Qd3Ys5SEXL5IB1o1L/LputNQc/ybWS0xq71VpLs7eungZUIjwGx
VlfwyLFEJY5c3XWa7eAb2pfahzNg19lbIPvBcEqhtWfs
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:11 2026 by rpki-client