Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PG2VrZTtQdC_yz726p0icDhRdok.roa
File: PG2VrZTtQdC_yz726p0icDhRdok.roa (raw, json)
Hash identifier: IRjWUCgsvy6JfsDWFtRTXheVmlm4FWNcLlDUH/4TfoI=
Subject key identifier: 3C:6D:95:AD:94:ED:41:D0:BF:CB:3E:F6:EA:9D:22:70:38:51:76:89
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F182F0DA2C68677B8C12283617B7F0B09
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PG2VrZTtQdC_yz726p0icDhRdok.roa
Signing time: Tue 30 Jun 2026 10:59:24 +0000
ROA not before: Tue 30 Jun 2026 10:59:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 79.172.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:2f:0d:a2:c6:86:77:b8:c1:22:83:61:7b:7f:0b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 30 10:59:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c6d95ad94ed41d0bfcb3ef6ea9d227038517689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5b:c8:96:1b:3d:9f:43:83:05:3b:1d:f6:da:
1a:8e:06:88:3d:46:3e:20:d2:62:21:59:21:e4:d3:
48:4a:f3:0f:43:53:65:f0:6e:55:c2:39:63:46:08:
94:6a:34:e0:3a:73:2d:9e:70:87:b2:1c:81:b9:2f:
73:59:af:34:2c:08:f2:ab:d6:c4:e8:3f:5b:81:a9:
80:09:fd:0c:9c:a8:99:eb:4f:c2:c2:5e:fa:a3:95:
fb:9d:db:26:04:61:be:f0:a4:c4:af:a2:9b:4c:58:
54:82:06:d1:90:3d:e9:24:b7:b8:d1:2e:fb:c7:0d:
11:5b:97:36:9e:d3:51:2a:0e:31:67:27:73:8a:63:
76:27:6f:a9:fa:e9:0c:d1:7f:c4:03:ff:da:3f:fa:
d7:3e:18:05:a9:95:25:36:a4:dc:66:7b:91:85:dd:
eb:06:1d:ba:f3:3a:3a:c9:f2:b9:e7:f6:09:46:2b:
9d:9f:f0:b8:d1:64:03:92:ea:23:12:21:71:72:40:
dd:60:0f:03:ea:48:46:48:39:36:49:41:93:0a:47:
1e:db:9a:a9:cb:36:cf:ae:19:fd:9e:e3:e8:c3:1d:
c0:bf:8f:35:62:19:1b:ed:11:df:f7:b2:3e:73:76:
54:d8:f6:11:c2:e8:10:6c:59:82:2f:4d:27:e4:fc:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:95:AD:94:ED:41:D0:BF:CB:3E:F6:EA:9D:22:70:38:51:76:89
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/PG2VrZTtQdC_yz726p0icDhRdok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:63:c0:57:10:d3:2d:48:9d:8c:57:af:62:5f:00:07:67:3d:
f9:6e:21:04:39:fe:35:ef:df:78:52:71:d8:52:02:38:4c:a7:
25:02:d5:b3:2c:f4:c6:60:34:97:bb:d7:0b:d8:a6:d7:8e:ac:
f3:b0:05:78:42:24:af:2f:33:88:55:d3:38:50:65:0c:a0:ff:
2e:4f:e6:6e:a7:ae:8b:2f:80:2e:33:77:62:28:07:ea:c7:ee:
60:05:c4:47:a6:cd:41:d1:ff:88:5e:d4:e8:8c:33:8c:45:97:
c0:3f:b5:ee:df:44:6d:e1:c9:ef:03:58:95:50:1d:e1:5c:f5:
15:c0:17:c8:2c:43:7f:e4:00:35:4d:49:95:43:0e:59:24:08:
6c:d5:30:31:1c:c5:15:32:f5:43:71:b6:08:e1:ab:83:22:de:
8a:41:bd:de:de:f6:44:aa:6f:76:d6:87:ef:5d:6b:8a:20:f8:
7b:0f:d5:77:a6:14:ac:d6:c9:bd:39:44:cb:a9:2e:69:e1:43:
0b:d4:51:c1:2a:9c:0c:f5:7f:92:3d:01:99:46:68:d5:8e:73:
7e:bd:91:a5:4f:32:1b:df:3b:8d:cc:d2:5b:2d:23:06:77:e5:
ff:38:af:6b:61:02:31:da:dd:45:26:46:56:e5:56:b7:70:e1:
f0:f2:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:46:23 2026 by rpki-client