Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_pDAs4WIR4BEf4wkEzNK93KpqHQ.roa
File: _pDAs4WIR4BEf4wkEzNK93KpqHQ.roa (raw, json)
Hash identifier: 5+bVdp6Lx7vPFwv57u+4hlfYeqbJ9P5OWeaR3vX2Tfw=
Subject key identifier: FE:90:C0:B3:85:88:47:80:44:7F:8C:24:13:33:4A:F7:72:A9:A8:74
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A1161D13757D001D4BB508D84C8CE58E22
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_pDAs4WIR4BEf4wkEzNK93KpqHQ.roa
Signing time: Wed 07 Oct 2026 11:26:06 +0000
ROA not before: Wed 07 Oct 2026 11:26:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.172.207.0/24 maxlen: 24
79.172.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:1d:13:75:7d:00:1d:4b:b5:08:d8:4c:8c:e5:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 7 11:26:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe90c0b385884780447f8c2413334af772a9a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:39:e9:c0:b0:49:ce:a2:7d:f4:27:c8:2c:
85:99:42:d3:c1:8b:57:2c:bf:30:28:c5:75:64:ad:
68:0a:72:a4:69:e4:1f:e7:43:9f:8e:93:bd:5f:c5:
7a:de:5d:f8:01:78:56:74:08:7b:f5:fe:c2:42:04:
94:f3:36:8e:42:98:6e:73:43:34:c7:85:75:78:40:
fa:15:8a:47:b7:24:61:b2:ce:58:c2:08:f4:a6:76:
06:41:88:ed:7f:c6:fc:e4:24:1c:f1:0e:4a:b3:f6:
e5:38:58:db:8a:9e:55:76:58:ce:39:e6:d1:b8:97:
13:0c:d7:d3:e2:e4:d9:27:42:0d:c3:01:3d:b9:c4:
6e:a5:db:5d:8e:54:0d:19:17:80:ef:b2:b2:5e:d9:
9c:61:20:65:ed:a6:4b:a6:f6:fa:d3:50:b0:03:88:
26:6a:a5:0f:d8:80:14:31:1b:5c:26:a6:ca:58:aa:
55:b5:a2:56:c7:22:43:bd:25:3d:12:5e:e2:6e:64:
22:d0:4f:ba:0b:57:24:0e:e5:f7:fd:85:16:4c:0a:
99:7b:21:5a:79:73:ac:bf:5e:a5:62:4e:d6:bb:5a:
60:2a:21:3c:fc:50:ed:b3:dc:e6:bf:a7:e5:71:48:
24:7d:1d:e5:43:3f:9e:db:9c:5a:c1:a0:0a:18:17:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:C0:B3:85:88:47:80:44:7F:8C:24:13:33:4A:F7:72:A9:A8:74
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_pDAs4WIR4BEf4wkEzNK93KpqHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.207.0/24
79.172.219.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e1:95:7a:6b:b2:09:9a:b7:5d:b4:a2:2c:c7:c7:c0:68:b6:
72:18:db:ac:76:73:db:aa:a6:1c:6b:65:85:0d:f5:a9:2b:d7:
67:94:ef:3c:b0:bd:10:78:e3:ec:b0:79:56:a9:60:32:31:95:
36:29:32:f4:86:c5:a0:3e:de:a5:16:e5:c9:51:20:a9:f9:ba:
97:33:1d:18:94:aa:c9:fe:93:e3:df:d6:2e:c2:26:fb:35:47:
f1:63:16:9f:25:3e:9b:46:38:b4:75:86:c9:fd:fe:ec:2b:d6:
f9:3f:45:ed:93:51:6d:f3:fc:a1:b0:84:cf:a9:72:18:b0:d1:
fc:2f:63:c4:21:c9:33:81:92:1a:fe:10:0f:e6:89:aa:59:38:
43:cb:40:42:89:0f:4b:a2:ea:a6:97:b6:62:e5:87:37:1b:a2:
af:bf:0f:41:78:9b:d7:f4:ac:ee:5f:21:31:a9:a1:1d:2f:c6:
42:be:b2:6a:df:6e:69:13:cd:fe:56:b3:7b:57:00:8f:8b:8e:
92:30:94:c5:1d:51:9e:5e:5f:f1:ea:7f:1e:d8:55:01:f0:52:
c1:15:43:e9:ec:34:10:90:6c:04:b3:d0:42:92:36:d2:36:60:
48:5a:ab:b1:59:69:b9:ff:b4:fa:18:c6:b6:e7:c7:0c:0b:42:
fc:56:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:29 2026 by rpki-client