Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ck1D0G1LeZlMNJohm-gSTDjPGOU.roa
File: ck1D0G1LeZlMNJohm-gSTDjPGOU.roa (raw, json)
Hash identifier: znME+QYYv/flOe7N7vMmO3Z9gPQFANlB2FmE2PonzMI=
Subject key identifier: 72:4D:43:D0:6D:4B:79:99:4C:34:9A:21:9B:E8:12:4C:38:CF:18:E5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E60196328387F1308514AB4EC15B10085
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ck1D0G1LeZlMNJohm-gSTDjPGOU.roa
Signing time: Mon 25 May 2026 17:05:36 +0000
ROA not before: Mon 25 May 2026 17:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:19:63:28:38:7f:13:08:51:4a:b4:ec:15:b1:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 25 17:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=724d43d06d4b79994c349a219be8124c38cf18e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:29:6c:55:c0:c8:cf:66:d1:93:a6:2f:79:
a7:46:5d:96:be:ff:2f:15:5b:1d:af:54:64:0f:2e:
35:56:21:da:66:22:58:f5:4c:a2:90:06:68:b1:af:
cb:3a:fe:35:96:fe:d4:23:16:d7:1e:a6:05:ab:ba:
78:32:9b:46:d1:92:91:68:47:72:be:04:77:ff:6c:
23:ff:4e:d7:75:0c:94:fb:3d:4a:45:49:67:a2:0d:
f1:87:32:bf:85:54:88:e0:9c:64:79:b5:cd:69:2a:
ba:4e:10:63:19:29:47:e9:b9:37:3e:ba:86:f0:1d:
3d:1e:c6:e9:14:f9:72:d7:0f:1f:a0:9f:a1:c1:2b:
3b:7c:23:49:ef:eb:5b:e5:8f:4b:6f:5b:72:d6:3a:
ed:fc:4b:83:29:1c:5e:a0:b9:a6:81:da:7c:14:d4:
9a:90:df:23:1b:86:db:b3:88:30:c3:ca:b2:1a:21:
90:eb:7b:31:8c:33:00:91:c9:76:b7:a1:55:64:a5:
56:a9:72:1e:93:5a:51:45:f9:24:f1:b5:42:46:36:
bf:e3:6c:29:d8:2a:5c:7e:df:bd:08:91:e2:0b:1f:
07:82:37:9f:d1:e2:2c:e4:18:be:d8:17:6b:8d:2f:
01:6a:fc:98:b2:bc:43:b8:27:e9:e7:ed:37:7a:af:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:43:D0:6D:4B:79:99:4C:34:9A:21:9B:E8:12:4C:38:CF:18:E5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ck1D0G1LeZlMNJohm-gSTDjPGOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ae:69:4e:b7:94:67:80:7c:e3:9a:7f:81:4b:2c:e0:6a:4e:
42:ab:2a:6d:3e:cc:33:98:a6:59:0f:37:b1:97:0d:f2:dd:44:
34:7d:66:42:3d:78:e2:ea:a1:73:e9:84:1b:c9:29:4f:a4:c2:
10:a1:54:02:c6:ab:54:e2:3e:d7:51:4f:bd:df:ac:1d:74:8d:
ba:30:b2:f3:1e:17:e7:6d:61:fd:83:63:78:43:07:d2:bb:38:
1b:04:5f:af:16:d1:a3:1b:5f:c7:99:88:22:b1:37:53:7b:e3:
a9:93:b7:d7:8d:61:d5:1d:19:ce:95:c7:6d:31:0a:da:7e:72:
04:f5:a6:31:79:6c:95:f8:31:cf:71:0a:79:4a:d4:31:a1:20:
19:34:89:41:64:ec:c1:25:e2:e4:ad:0d:6c:fc:43:30:bc:6e:
56:00:e7:ec:e1:24:e0:3c:5a:92:e2:63:41:33:d3:90:26:96:
e3:1d:c5:74:5e:53:56:ea:7f:41:cb:d2:c5:08:39:63:65:a7:
b1:e4:50:b0:6e:ad:4f:9f:b1:bc:f4:96:09:c5:96:36:47:c1:
25:d5:88:a9:ea:38:a8:1f:07:74:bb:8d:a8:c6:df:2c:9b:21:
73:de:6e:89:55:f6:e5:32:a0:f3:e8:84:ff:23:a9:2b:61:e9:
16:b2:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:50 2026 by rpki-client