Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LpUVdTzo8ShrUruzBfHPxepeekY.roa
File: LpUVdTzo8ShrUruzBfHPxepeekY.roa (raw, json)
Hash identifier: vkQpTUqMx72V6HI7D1q7XwRV+J1ByHyUXoahVK1iG2I=
Subject key identifier: 2E:95:15:75:3C:E8:F1:28:6B:52:BB:B3:05:F1:CF:C5:EA:5E:7A:46
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A19B14AD9074E8AA80865783F903C5CE74
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LpUVdTzo8ShrUruzBfHPxepeekY.roa
Signing time: Mon 02 Nov 2026 07:06:25 +0000
ROA not before: Mon 02 Nov 2026 07:06:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.193.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
79.172.250.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.92.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:14:ad:90:74:e8:aa:80:86:57:83:f9:03:c5:ce:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 2 07:06:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e9515753ce8f1286b52bbb305f1cfc5ea5e7a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:84:95:b0:c8:5e:10:c4:75:58:62:f5:70:
4b:6d:e2:66:15:b1:29:b5:5a:30:55:14:af:be:43:
03:a9:0b:2d:9f:26:13:6d:04:de:25:4b:5f:e8:7a:
da:b7:4e:b4:7e:d0:59:2b:ed:33:88:3b:93:74:01:
57:e6:0d:22:36:86:65:ac:49:78:ad:bb:57:f8:c7:
9a:1b:89:3e:b1:8e:99:9e:e6:ca:6a:70:df:98:b7:
84:26:82:fe:77:60:46:e0:7c:d1:1c:b2:fb:d0:ae:
e4:e5:5f:17:41:fc:1e:dd:d4:13:7f:98:1f:fe:44:
bc:b5:25:93:1d:c2:3e:d1:e9:bc:49:48:f5:ab:5a:
99:5e:c0:70:92:4a:43:a8:b3:3f:fe:0f:29:f7:49:
9f:96:39:7f:2a:66:14:4a:31:c4:31:5a:62:fa:3a:
fd:e5:45:66:83:d9:37:5e:ee:97:79:ac:5d:c8:28:
23:09:cf:ee:a7:14:be:37:03:15:ac:b4:e9:da:00:
91:c8:e5:f4:40:59:31:83:fa:5f:c5:0d:36:8f:ae:
92:3d:23:bd:d7:4f:62:9f:a2:0f:0f:14:38:14:8d:
21:e3:a1:44:8a:43:a3:63:cf:76:b6:c7:52:aa:09:
f5:0c:29:bc:9c:40:5e:2c:e0:4a:db:a9:28:a0:9a:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:15:75:3C:E8:F1:28:6B:52:BB:B3:05:F1:CF:C5:EA:5E:7A:46
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LpUVdTzo8ShrUruzBfHPxepeekY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.48.0/24
87.229.56.0/24
87.229.70.0/24
87.229.80.0/23
87.229.92.0/24
87.229.97.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
13:9f:4e:5a:40:c3:c1:e0:02:48:97:aa:75:a8:81:c2:13:af:
4a:3d:2a:33:11:f4:f0:24:aa:5b:7a:bf:ef:15:ac:88:b1:24:
f7:1c:65:c8:9f:ac:2a:25:48:e6:be:e7:bf:78:47:9a:25:ce:
b0:06:9d:18:7e:dc:f3:ab:1e:72:75:48:2f:d6:3b:77:3b:2f:
c2:9c:14:fa:a9:63:34:5c:88:98:70:d7:8e:54:14:aa:31:a4:
a3:fb:58:45:d9:50:ff:ca:ae:27:84:da:23:31:22:f0:1c:bb:
43:ef:58:ba:e9:87:7f:57:a3:64:a6:cb:7b:c5:99:66:d9:be:
6c:12:ae:8e:82:53:36:3e:38:ac:a5:07:a5:8f:d8:a9:d3:a4:
13:e0:11:59:42:ad:56:ad:50:f1:8f:59:6a:f5:91:49:35:53:
8d:7a:a9:e1:74:28:62:5d:eb:3e:99:31:ae:b1:f3:0b:29:92:
20:ba:fa:91:40:56:d6:22:74:dd:d8:3b:1c:38:ba:a5:40:4b:
91:49:bf:dd:96:a9:59:f0:e8:1c:cc:e0:66:e4:d1:02:27:a2:
6b:ff:5b:5a:d2:20:90:4e:18:01:e6:79:1d:f0:b5:28:46:83:
bd:ff:f7:7d:d0:3f:05:c1:a4:39:ea:fb:cb:f9:81:f6:7c:2f:
8b:21:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:56 2026 by rpki-client