Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QVggfVbMQnqJUD4F8inaJ-9Yim0.roa
File: QVggfVbMQnqJUD4F8inaJ-9Yim0.roa (raw, json)
Hash identifier: 8hGFnZdY5XbAFSRp+9EC6baGZTAqp6eZE0qvUHia1Qw=
Subject key identifier: 41:58:20:7D:56:CC:42:7A:89:50:3E:05:F2:29:DA:27:EF:58:8A:6D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FD29A4FC62C25D01319E997FF0B959F96
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QVggfVbMQnqJUD4F8inaJ-9Yim0.roa
Signing time: Wed 05 Aug 2026 15:45:56 +0000
ROA not before: Wed 05 Aug 2026 15:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 79.172.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:9a:4f:c6:2c:25:d0:13:19:e9:97:ff:0b:95:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 5 15:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4158207d56cc427a89503e05f229da27ef588a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:7e:8f:3c:6d:9c:c0:91:f8:fe:8d:7f:2a:
bc:de:ef:ce:28:09:2e:aa:9e:39:d9:21:cb:d6:07:
c7:f1:9d:c4:94:67:38:a6:f9:7c:5c:b6:b8:fb:96:
15:1f:09:72:be:f4:51:2b:0c:8f:51:0d:12:31:58:
c8:e2:f2:12:52:32:a7:3a:68:f4:2f:d0:23:d5:45:
04:5c:1d:f8:09:84:83:53:fd:9c:4c:a1:ee:da:06:
fe:36:08:c6:e4:47:71:49:0a:44:a4:0f:e7:fe:6d:
ba:ee:c0:55:13:0f:4d:65:cb:56:31:9f:85:fa:49:
57:78:45:3c:0d:09:0a:75:44:24:1b:65:9e:c8:ee:
8a:ec:b2:4f:4c:dd:8b:04:be:dc:c8:ef:30:63:96:
86:b8:c7:c7:48:3e:5d:4f:a4:b4:fb:d4:8f:48:3b:
32:35:aa:2c:ab:58:e8:d4:48:ef:21:fc:05:cd:2c:
bf:a1:10:03:11:e9:63:88:93:ab:90:c7:b6:17:5d:
f2:2c:fe:49:3b:61:c7:97:12:56:3f:a7:d7:c2:5d:
c0:2d:9d:23:7f:7b:70:66:c5:eb:ee:27:d3:12:25:
b7:de:76:d5:92:7a:67:f1:20:6f:09:fa:4a:a5:c3:
be:1a:fc:d8:0a:4d:85:b4:0d:c1:49:27:06:ff:a6:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:20:7D:56:CC:42:7A:89:50:3E:05:F2:29:DA:27:EF:58:8A:6D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QVggfVbMQnqJUD4F8inaJ-9Yim0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a4:f9:e6:97:c8:06:ec:a7:5b:11:37:ff:bd:78:4f:df:1c:
42:97:4d:71:6c:03:e0:7c:ea:b7:d0:02:d8:21:41:cb:72:69:
ae:b8:9e:9d:f9:09:24:60:ed:82:fd:81:32:73:e4:68:22:03:
e6:d6:d1:1d:c9:5a:ef:28:db:3e:d5:47:b1:c0:08:ed:d1:57:
b1:f3:29:f9:8e:6f:2f:09:d7:1b:fd:cf:35:40:6f:ed:aa:c3:
d9:47:35:ea:3e:89:40:11:a4:40:6b:c6:de:c1:60:c8:2b:b4:
57:0c:88:41:01:c5:7c:54:4e:85:d5:91:39:9a:ae:a1:f4:29:
24:6c:c6:b6:65:b0:8f:ac:39:fb:13:f5:88:7a:44:24:fa:b0:
4a:1a:95:f2:dd:d8:0c:af:07:ec:50:85:58:7d:8e:bf:55:0f:
64:c3:a6:f0:23:ee:43:cf:b2:52:8b:13:44:2d:37:99:e9:93:
c5:0a:da:89:9b:65:09:c7:2a:b9:91:52:71:74:be:0f:4e:98:
c4:7a:71:9a:a8:7f:bf:d7:8c:e4:32:3e:9c:61:36:33:10:d5:
46:88:1c:3b:15:61:87:01:a6:63:4c:28:7e:84:fc:eb:e3:14:
9b:ac:8e:30:ae:8d:d5:d7:62:1e:9a:6d:37:e8:c9:47:43:35:
ed:92:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:12:16 2026 by rpki-client