Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ow-VFkwq6MJOCBUrufNgdsFt7iU.roa
File: Ow-VFkwq6MJOCBUrufNgdsFt7iU.roa (raw, json)
Hash identifier: sCWR0ZS07WfDwGcvWfgqL80Qgr6FqmeBNE7V83ZrBco=
Subject key identifier: 3B:0F:95:16:4C:2A:E8:C2:4E:08:15:2B:B9:F3:60:76:C1:6D:EE:25
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0867FA704D2F26FE154AA670B09406B93
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ow-VFkwq6MJOCBUrufNgdsFt7iU.roa
Signing time: Wed 09 Sep 2026 14:08:27 +0000
ROA not before: Wed 09 Sep 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.250.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:7f:a7:04:d2:f2:6f:e1:54:aa:67:0b:09:40:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0f95164c2ae8c24e08152bb9f36076c16dee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:0d:99:7f:ce:0e:50:54:70:f1:b9:f6:0e:
50:25:69:00:96:33:29:92:7b:fb:3b:d4:91:99:cd:
f0:87:df:32:b0:10:26:40:87:26:ac:40:3c:a2:0d:
b7:ae:77:5f:7d:27:e9:f4:36:49:d1:09:6e:6c:f6:
08:08:ec:5e:40:e3:57:a2:a6:b6:25:14:7a:a4:71:
81:b7:0b:8b:c8:7a:d2:e7:97:96:6f:12:31:cd:2d:
cf:20:67:cb:98:18:7c:90:dc:3f:34:d7:23:e3:f9:
ee:30:80:dc:f5:38:00:77:ad:f0:ec:e1:48:76:d8:
20:69:5a:b4:8b:dc:42:b3:06:58:19:ba:2b:a7:48:
7e:20:a4:02:f4:4d:c0:50:f8:3b:46:10:b9:b0:b7:
4c:f6:aa:99:fc:c0:53:3c:62:41:d3:c6:ac:12:c5:
bc:e2:b9:24:30:da:85:5c:ed:09:a9:74:1a:fc:c1:
84:34:bb:0b:91:29:88:3e:40:6c:c6:62:51:4f:37:
e7:3f:92:66:a7:56:76:77:79:02:f5:c8:eb:dc:80:
db:71:db:b5:80:e7:c6:56:1f:df:65:61:8a:65:2d:
41:63:b3:3f:7b:84:f2:5c:79:90:84:c6:c5:ff:a3:
d2:2b:b1:6c:91:22:31:71:01:90:77:e2:fb:08:80:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:95:16:4C:2A:E8:C2:4E:08:15:2B:B9:F3:60:76:C1:6D:EE:25
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Ow-VFkwq6MJOCBUrufNgdsFt7iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
87.229.48.0/24
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:11:22:9f:58:11:36:09:cb:3f:7b:33:25:e4:ed:6e:df:c8:
b1:a1:fe:d0:74:42:4c:e8:38:ca:a3:c4:43:24:2b:91:b0:2e:
65:8c:01:5f:dc:85:a0:39:75:85:7e:fa:77:a1:a2:c4:8a:2d:
82:21:2a:4e:53:63:d6:10:65:e4:1c:d1:8c:dd:7a:38:5c:18:
68:ff:e2:68:45:79:cc:35:3d:15:68:9a:8a:d4:04:a9:d7:53:
5c:be:a5:39:31:80:8a:e8:f7:71:8c:88:29:3d:86:1b:00:62:
e7:a5:f7:01:f1:6b:7f:e3:58:c4:21:23:65:d7:be:e2:2d:af:
e0:33:1e:8d:9d:9a:f2:30:5e:5a:ba:56:de:a4:e8:68:7c:e5:
c5:50:39:8d:05:cf:12:5b:93:18:9a:ef:0b:72:16:f1:34:48:
7a:bc:45:85:6d:26:7c:cf:3e:4c:bd:10:86:9f:c3:c0:24:4a:
6a:45:10:5f:a5:07:48:d2:03:ca:85:7b:b9:76:83:fd:ab:2e:
2f:10:3c:18:de:a9:a2:b4:92:23:1e:2e:a7:5c:ca:ac:0c:6b:
79:7c:88:f1:76:77:dc:3f:e4:e7:2a:54:ee:8a:16:92:59:e3:
10:15:44:4d:59:e2:fc:c1:a5:4b:24:2d:62:c7:9b:2d:b6:2a:
64:44:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:29:08 2026 by rpki-client