Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WremRaD9SVr93HaP3YwbrdVa6Qs.roa
File: WremRaD9SVr93HaP3YwbrdVa6Qs.roa (raw, json)
Hash identifier: wk1SnjFNHN88OU5wOJtOS1yIf/h+VOVPJrPOgE6d1Lw=
Subject key identifier: 5A:B7:A6:45:A0:FD:49:5A:FD:DC:76:8F:DD:8C:1B:AD:D5:5A:E9:0B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0F3EE5E27AEE55A8E9975FD88AC4403F9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WremRaD9SVr93HaP3YwbrdVa6Qs.roa
Signing time: Wed 30 Sep 2026 20:08:00 +0000
ROA not before: Wed 30 Sep 2026 20:08:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 79.172.250.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:ee:5e:27:ae:e5:5a:8e:99:75:fd:88:ac:44:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 30 20:08:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab7a645a0fd495afddc768fdd8c1badd55ae90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:25:2e:29:58:10:9c:15:c2:52:55:b0:37:
78:1d:41:c2:e9:1c:b7:fe:d2:9d:b9:f8:cc:3c:be:
a0:ac:fc:c9:dd:6d:02:3d:29:2d:e4:91:84:b9:53:
96:93:20:29:c6:a4:6b:b0:6d:3d:48:b7:fa:93:2b:
93:f5:90:77:0a:3f:56:be:a0:39:e1:08:7c:0d:47:
78:87:59:8f:c8:1b:66:7b:92:fe:7e:1e:15:f1:e6:
79:09:c4:8c:59:6b:a1:6c:91:86:05:a1:86:fb:c0:
42:6a:a1:c6:86:dc:c0:70:58:12:61:de:99:fc:9f:
1c:f4:a2:07:ba:d6:05:d1:be:32:a7:28:e8:b1:ae:
4c:ac:c0:56:1b:bf:c5:02:ae:a1:61:40:aa:6a:6d:
00:54:d7:3e:ee:90:c2:13:84:fc:00:78:58:a0:ad:
b3:21:09:d8:89:2b:07:c0:36:88:8e:f9:59:d5:b0:
67:00:e3:83:0d:d1:0c:c6:35:2d:dd:31:db:80:57:
f7:30:b7:b1:59:a6:50:1b:cf:d7:8a:17:55:22:db:
ad:53:f1:09:b4:01:e3:67:2c:74:0d:c5:7c:89:3b:
21:b0:10:67:b1:2d:22:ec:a2:97:19:c1:b2:62:ca:
4a:d9:18:98:45:38:44:5c:c1:a3:db:cc:67:c4:55:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:A6:45:A0:FD:49:5A:FD:DC:76:8F:DD:8C:1B:AD:D5:5A:E9:0B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WremRaD9SVr93HaP3YwbrdVa6Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e2:26:d8:f1:5d:dd:35:b0:8d:22:1c:40:f3:eb:e9:3b:52:
9a:61:53:ce:fb:21:a4:d3:e1:47:37:f4:4f:30:f9:71:0d:cc:
d7:17:5b:8f:6a:69:71:ee:c6:35:d3:a3:cb:7f:31:cf:f7:65:
1e:62:29:9b:31:90:1e:b0:b9:ca:b8:b6:99:19:7c:ad:36:1f:
27:f9:24:f5:0e:75:4e:4f:12:07:97:6d:ed:5a:37:a3:d5:1a:
a7:95:1d:9e:11:df:54:76:56:9b:2b:a8:a3:84:14:02:ce:70:
b3:60:6c:9a:48:30:5b:c2:45:5d:aa:da:ee:3d:75:b0:06:97:
38:50:98:90:cd:ec:d7:94:99:7d:50:fb:05:8b:8a:4d:84:38:
19:be:41:67:b4:d1:8c:33:b2:d0:00:07:ee:92:86:b0:40:b7:
5a:7f:45:bb:62:2b:4d:5f:38:ad:b4:e8:7d:df:ad:f3:f7:ac:
3a:e0:9f:e2:7b:53:91:1e:c4:9f:32:35:b2:43:f3:50:b9:36:
77:5e:f4:ee:b4:a6:24:a9:50:57:18:7f:55:72:23:8c:6c:39:
1d:a7:c9:b0:5f:77:e7:98:df:aa:fb:d8:1d:d4:1b:ed:0e:6e:
32:ed:b1:f8:77:0e:7f:06:8e:3c:05:cb:8b:ba:0b:ef:67:a2:
fc:cf:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:27 2026 by rpki-client