Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fnm70BVE4XKw-Is6je6VTYbPEJ4.roa
File: fnm70BVE4XKw-Is6je6VTYbPEJ4.roa (raw, json)
Hash identifier: CktoVG8oFoXYRGKaqjdDHQDcC3Oq4l7QPxFaI2Azp6I=
Subject key identifier: 7E:79:BB:D0:15:44:E1:72:B0:F8:8B:3A:8D:EE:95:4D:86:CF:10:9E
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DA71F533AEECF16EE52901D8397EA84FD
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fnm70BVE4XKw-Is6je6VTYbPEJ4.roa
Signing time: Sun 19 Apr 2026 19:02:21 +0000
ROA not before: Sun 19 Apr 2026 19:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:1f:53:3a:ee:cf:16:ee:52:90:1d:83:97:ea:84:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 19 19:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e79bbd01544e172b0f88b3a8dee954d86cf109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:d5:65:a9:01:01:f0:23:87:23:9d:17:23:
89:b4:ea:b6:1c:71:82:e3:0d:a6:85:7a:99:d4:02:
38:ef:d2:6b:81:ea:db:08:f7:96:99:a6:30:4f:e8:
41:29:75:52:92:b8:8f:37:04:07:af:78:a0:56:8e:
8e:9e:c0:16:bc:96:0e:1f:6a:ac:19:db:fd:ab:bb:
8a:34:2a:42:cd:4d:57:a3:aa:f6:d4:17:46:68:57:
d9:46:58:3e:a9:03:58:e2:bc:2b:bd:7c:03:b9:ff:
ab:ba:84:fa:70:79:e3:52:97:5c:04:e2:94:4a:86:
4e:91:20:c4:b9:c0:85:cb:f9:31:16:4f:ba:51:98:
31:34:91:48:04:b0:7c:91:d7:8b:c7:21:9f:82:a8:
b9:33:e4:45:66:d0:c8:61:05:b6:5a:e2:78:53:0e:
a8:ad:a9:43:42:02:57:92:0e:f4:de:a9:11:a6:f3:
af:a8:ea:8a:bc:79:90:a9:c2:1e:67:92:bb:3b:c7:
c5:c6:62:7d:a2:6b:b5:92:86:22:75:23:b6:28:de:
fd:a9:7c:16:39:f4:53:20:b7:c4:1b:85:28:a7:f6:
07:e6:68:39:7f:c7:a3:e5:de:b6:62:86:c8:2f:54:
c5:3a:30:59:2a:aa:0b:3c:9b:0a:0e:45:b1:49:40:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:BB:D0:15:44:E1:72:B0:F8:8B:3A:8D:EE:95:4D:86:CF:10:9E
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fnm70BVE4XKw-Is6je6VTYbPEJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4f:1d:ef:78:c8:ba:ea:23:5c:30:4e:8f:d1:f9:b9:96:23:
48:ab:f7:e2:9f:b4:15:ca:04:7a:13:4f:2f:0e:90:aa:c3:a6:
f5:e1:4b:e0:0f:01:84:3c:75:84:ad:58:b9:d6:dc:61:bd:a1:
23:a3:9d:5b:9a:5d:92:f7:7f:f2:66:80:b6:54:73:ca:2e:7d:
55:c4:c6:41:1f:79:cd:ee:f6:2f:6b:fd:70:ec:36:27:cf:b4:
c6:4d:a0:11:ac:88:f8:b9:4b:2c:cf:34:ca:08:e3:e8:15:0d:
fd:a7:18:22:78:67:75:d9:c4:ae:1d:fd:73:76:d1:7d:b5:bc:
05:db:1b:e3:9c:ae:62:2e:0d:29:fc:e2:ee:66:b8:a9:fa:bf:
43:4a:a7:0d:e2:d1:71:0d:2f:d6:25:00:71:f7:66:4a:e2:88:
0d:8e:54:ce:53:f1:03:8d:05:fa:ca:44:2e:6e:a5:9e:6a:77:
df:8a:8a:95:d9:9d:79:c3:6e:08:d0:5a:17:b5:c3:95:dd:16:
f4:d1:35:99:96:09:6c:67:32:f9:00:62:d0:5f:1b:a2:12:a0:
3f:76:d7:e5:bb:4c:60:33:0a:90:4a:21:f3:01:48:21:68:ab:
6c:c8:55:10:0b:89:ac:65:c3:19:fa:76:67:5a:c4:08:f6:0b:
3c:2b:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:35:52 2026 by rpki-client