Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/M1h06yh4xa1saVo83-RfePumT2g.roa
File: M1h06yh4xa1saVo83-RfePumT2g.roa (raw, json)
Hash identifier: wnP04gccm6XBrsQe3sWrRfLG8Nwplmm1spFFOmSwonI=
Subject key identifier: 33:58:74:EB:28:78:C5:AD:6C:69:5A:3C:DF:E4:5F:78:FB:A6:4F:68
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DB18EEB41FBB9282D5BA6F683BB52B3E1
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/M1h06yh4xa1saVo83-RfePumT2g.roa
Signing time: Tue 21 Apr 2026 19:40:26 +0000
ROA not before: Tue 21 Apr 2026 19:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 79.172.201.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:8e:eb:41:fb:b9:28:2d:5b:a6:f6:83:bb:52:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 21 19:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=335874eb2878c5ad6c695a3cdfe45f78fba64f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:3d:7b:b4:e3:02:8d:71:5f:07:7f:04:28:
39:6a:ac:4d:1f:17:46:b8:c7:87:b3:69:95:c3:6a:
ff:f4:60:58:f9:52:4b:92:32:34:32:75:52:1b:26:
14:68:aa:46:3f:da:2d:8a:68:61:6a:29:69:60:50:
ad:a4:c7:70:f4:ce:c4:17:c6:71:66:ec:4e:0b:07:
45:d6:e1:37:f9:24:f8:84:34:c7:b3:5f:10:3e:94:
b1:93:64:c6:87:c3:90:d2:f1:9f:72:32:ca:f6:f3:
db:36:3e:e5:5f:83:74:67:31:de:a3:c8:e9:c1:83:
62:95:50:8c:48:60:db:b8:5f:20:79:ff:da:54:16:
46:21:ed:49:9d:2e:ff:c3:6e:06:d3:66:1d:7d:17:
da:1c:5a:82:3e:7d:ca:61:62:94:23:08:f3:7d:39:
b4:ab:f4:bc:f5:5d:56:0c:69:42:62:67:ed:48:e1:
f7:d0:db:c2:a4:73:20:a1:be:6a:10:e0:b5:e7:df:
8f:18:de:44:4a:21:d9:31:76:ee:9f:df:af:03:d0:
e5:83:7c:c8:c2:70:0f:b4:3d:d1:4f:4d:3e:aa:30:
71:26:93:41:50:34:4b:77:48:04:a0:00:fe:27:17:
d3:98:91:90:58:af:b0:91:57:64:05:65:8c:b2:81:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:58:74:EB:28:78:C5:AD:6C:69:5A:3C:DF:E4:5F:78:FB:A6:4F:68
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/M1h06yh4xa1saVo83-RfePumT2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.201.0/24
87.229.11.0/24
87.229.108.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d0:8e:a6:6b:73:e4:73:db:05:22:94:b3:2e:57:67:ce:8f:
a0:7a:ba:85:21:de:49:86:4a:25:b6:18:33:93:12:c3:49:1d:
0e:8d:f9:51:61:2b:0d:28:f3:72:99:71:5e:fb:5e:a1:4d:88:
43:d3:f2:2b:f1:f7:e4:10:d3:2c:07:53:9e:2a:bb:5b:d0:4c:
b1:72:ad:ad:d3:6f:99:62:a4:fe:ce:c8:e1:b8:04:03:83:10:
57:c8:30:b6:1e:2b:51:aa:38:ed:4d:44:47:cc:73:9c:3c:0e:
e0:80:32:05:23:6e:b7:1d:86:55:5f:81:6f:1f:ee:03:27:e9:
43:d5:2b:b0:c2:9f:d5:64:41:2f:ee:49:88:e6:0c:0c:47:6b:
e1:be:2d:09:67:81:89:79:36:f1:bb:69:2a:cb:23:d5:5e:1f:
60:54:07:62:8e:88:e1:a2:1c:8c:8f:33:b5:45:06:45:04:ff:
2c:fe:45:a9:92:77:2f:6a:b2:b4:f3:e6:68:1d:52:68:a8:e5:
29:b7:5a:ad:da:c7:4c:61:9f:e6:52:b6:b9:14:fa:f6:b9:37:
78:45:a8:8f:47:bf:78:76:7d:49:6c:96:6a:89:66:15:fa:f1:
65:13:7a:26:36:48:44:a9:de:e1:f1:d4:e0:e6:4d:78:9e:14:
a2:70:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:35:54 2026 by rpki-client