Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aMZQYtbaiCCTYYYEBmwjzYX7MPk.roa
File: aMZQYtbaiCCTYYYEBmwjzYX7MPk.roa (raw, json)
Hash identifier: JIXfwZdXFuoiGgMdk7UR2ymSnaKVKZ9INPApUo4ylHA=
Subject key identifier: 68:C6:50:62:D6:DA:88:20:93:61:86:04:06:6C:23:CD:85:FB:30:F9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FC459038484CE920D62AB60FB795708EB
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aMZQYtbaiCCTYYYEBmwjzYX7MPk.roa
Signing time: Sun 02 Aug 2026 21:19:55 +0000
ROA not before: Sun 02 Aug 2026 21:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219084
IP address blocks: 79.172.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:59:03:84:84:ce:92:0d:62:ab:60:fb:79:57:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 2 21:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68c65062d6da882093618604066c23cd85fb30f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:3e:56:f7:92:d9:ba:1c:5c:32:59:5e:07:
4a:ce:22:6a:ce:2f:1e:5e:3a:a1:24:15:33:f4:2c:
bc:cf:8b:b9:64:e4:e7:5c:73:10:c8:88:51:54:9f:
94:ad:85:5a:82:94:4c:b0:8f:ba:b8:99:f6:ea:9f:
f1:25:28:1e:70:c4:34:31:a9:33:c9:b7:97:49:d9:
c0:1c:f4:41:ba:5d:90:d8:03:2d:81:a0:e0:a7:b2:
90:db:f0:c9:09:c4:bb:7d:6e:51:46:dc:b2:4c:12:
0b:c6:39:b9:fe:9d:a9:41:e5:96:ce:20:d3:cb:39:
d9:94:a5:0e:a8:52:99:17:1f:ef:0d:4a:73:66:7d:
3b:29:9d:18:dd:bc:a9:46:3e:ae:33:1d:cf:c6:cf:
3a:7a:57:84:7c:ce:05:3c:b9:4b:81:67:25:d4:a9:
bf:27:96:0a:37:ec:f9:28:e1:7d:0f:19:2f:5a:e5:
ad:32:78:54:fe:b3:bb:90:08:83:97:2b:98:f5:92:
64:cc:42:b2:45:7a:0f:da:24:4a:f2:ed:58:fe:a8:
fa:6f:e4:f8:b7:c8:69:07:d2:b2:41:f0:d6:08:7a:
31:e2:58:57:ed:49:56:dd:bc:d9:e6:94:84:5c:fe:
ef:ec:2f:0f:36:cf:33:7b:53:70:e0:c5:31:15:d6:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:50:62:D6:DA:88:20:93:61:86:04:06:6C:23:CD:85:FB:30:F9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aMZQYtbaiCCTYYYEBmwjzYX7MPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fd:7d:72:9e:8a:fd:32:6f:6b:52:7d:42:28:f2:8a:c7:4c:
64:c6:f5:f7:e2:84:6d:bd:ed:f1:9d:77:56:f0:ff:da:5d:37:
fe:9a:b7:58:a8:33:30:74:3e:77:e3:3e:1a:72:d6:d4:dd:2a:
e0:f5:cc:8e:c0:93:64:ce:d1:6a:50:c5:b8:58:52:b9:7b:2c:
5d:6d:e3:96:fe:c9:f2:0f:60:f4:18:03:96:e8:c5:40:e2:d2:
43:41:d0:0d:c9:e7:12:92:63:d4:07:3f:ea:de:fc:8b:56:5d:
8f:4c:7f:f0:6b:e9:a0:75:10:66:9b:78:6e:bb:14:7f:6b:b6:
59:72:15:e6:ac:fb:87:d1:23:c4:12:b9:4a:c4:8a:6b:05:f3:
2a:07:8b:b9:10:db:a8:70:42:91:af:95:be:12:11:4f:57:22:
e6:b9:0f:71:87:2b:25:41:d0:c6:84:27:f7:49:44:8e:6f:5d:
33:37:b3:c4:4e:ef:7d:e5:8b:43:32:93:33:00:4f:35:b4:06:
dd:2b:1d:6f:6b:f5:dd:20:9f:73:79:a5:63:92:7f:26:4c:a9:
0c:aa:c9:6f:02:8d:e2:21:cc:13:60:dd:be:5b:41:12:77:8a:
73:cc:46:38:fc:2f:f6:f6:a4:b5:6d:ff:97:8d:2e:aa:99:76:
b1:f2:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:58 2026 by rpki-client