Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_GYtno1qr6V8Mh-qvvJMJr9QGX8.roa
File: _GYtno1qr6V8Mh-qvvJMJr9QGX8.roa (raw, json)
Hash identifier: uemTEXUxWy4kleSi2CwFuadIsuKOD7rhPY+xwUA8BiQ=
Subject key identifier: FC:66:2D:9E:8D:6A:AF:A5:7C:32:1F:AA:BE:F2:4C:26:BF:50:19:7F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0A3B203A774474C24B0BBF3BEB96508B4
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_GYtno1qr6V8Mh-qvvJMJr9QGX8.roa
Signing time: Tue 15 Sep 2026 06:12:27 +0000
ROA not before: Tue 15 Sep 2026 06:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.219.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:b2:03:a7:74:47:4c:24:b0:bb:f3:be:b9:65:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 15 06:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc662d9e8d6aafa57c321faabef24c26bf50197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:0f:43:5f:26:6e:f7:a5:36:0f:49:ad:9f:
c0:41:fb:0f:f3:1f:75:b4:f3:60:31:ec:82:77:95:
88:89:e7:06:d1:95:6e:ab:a8:92:41:20:d7:67:78:
46:28:d5:8c:b1:54:2a:de:05:f8:25:23:7c:fa:d1:
79:f3:35:8e:1e:74:36:18:c6:8d:fc:88:fd:f8:38:
f2:9b:1f:7b:a9:b9:6f:8b:22:48:d6:b2:9d:f8:eb:
2a:92:64:2b:0d:28:44:5b:50:60:77:71:b4:8b:ac:
7e:c2:f8:e7:59:07:50:74:b7:25:8d:8f:55:06:95:
d1:77:e7:cc:39:d6:78:9b:e0:1a:0e:f5:39:9f:96:
83:98:57:c0:bd:7e:fa:1a:92:b0:b9:b7:7d:74:18:
2b:95:ce:41:06:38:e7:3a:1c:f6:6e:93:c5:42:e2:
5e:44:8b:24:f7:19:2e:f9:bd:ab:40:c8:4e:e5:70:
3c:77:c3:02:c7:34:d2:c4:28:4c:f5:3b:cb:5c:a6:
3e:7f:f9:91:f6:e2:f3:f5:4e:9b:14:5c:6e:c5:0b:
72:5a:e1:8a:10:02:4b:e8:a8:af:76:e2:6f:42:23:
f2:d7:fe:8b:1e:eb:2c:e7:41:23:50:d9:96:87:5e:
71:12:4c:df:cb:76:77:6b:90:8f:46:1c:6b:b7:0c:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:2D:9E:8D:6A:AF:A5:7C:32:1F:AA:BE:F2:4C:26:BF:50:19:7F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_GYtno1qr6V8Mh-qvvJMJr9QGX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.219.0/24
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
64:74:85:37:bd:50:d2:43:97:76:75:50:ad:e7:bd:71:66:8d:
3d:11:54:ca:50:e7:8c:7b:ba:cd:4e:52:3b:d9:71:3f:f8:d2:
f9:eb:cf:ae:98:b5:26:9f:54:41:6e:6f:90:92:20:7d:43:ed:
96:7e:70:d4:30:45:50:cf:73:69:97:6f:f1:d9:5d:38:c4:e8:
a3:2e:0f:0e:d8:ea:55:64:d0:b3:bb:8f:31:44:6a:e8:9e:32:
ea:e9:d3:59:1c:29:2f:76:5a:38:e5:1e:a9:0c:81:26:8b:af:
20:b4:32:9a:2c:11:3d:7e:af:52:5d:04:92:fb:85:07:79:80:
32:1e:f6:67:17:eb:09:10:01:4f:a9:35:2f:37:21:b5:98:a5:
91:58:07:8b:41:47:84:ab:ce:d7:9d:b6:2d:28:97:f9:7c:30:
81:ac:7c:35:0c:b9:75:25:a4:34:4f:aa:7e:20:58:9e:35:c9:
b4:5b:fe:73:8f:fc:59:58:94:09:25:9a:bf:cd:b7:dd:74:14:
95:3b:2f:ef:55:f1:ed:23:80:9e:0c:86:41:70:b6:f0:08:d1:
c2:28:e8:76:1a:ca:89:87:84:b0:2e:8a:a6:6c:c9:00:33:62:
83:4d:9d:1b:4d:e6:55:2d:52:76:5f:4d:f8:a8:03:9d:b0:85:
94:22:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:29:13 2026 by rpki-client