Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fqN9FyKWJ09TwZBTW618ShyI5Lo.roa
File: fqN9FyKWJ09TwZBTW618ShyI5Lo.roa (raw, json)
Hash identifier: vOwFlSHKenr1wV+4ZIZIHhdfYawa3ymR+aZjhkP0Vv8=
Subject key identifier: 7E:A3:7D:17:22:96:27:4F:53:C1:90:53:5B:AD:7C:4A:1C:88:E4:BA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FE037A6874D3AFBA5E5D4DAA35D5B7904
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fqN9FyKWJ09TwZBTW618ShyI5Lo.roa
Signing time: Sat 08 Aug 2026 07:12:51 +0000
ROA not before: Sat 08 Aug 2026 07:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:37:a6:87:4d:3a:fb:a5:e5:d4:da:a3:5d:5b:79:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 8 07:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ea37d172296274f53c190535bad7c4a1c88e4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:00:22:75:2e:ae:fd:f2:e2:d8:0b:33:03:
57:c6:c6:c1:b7:a6:f1:fe:a7:20:db:d3:3c:e3:19:
aa:a8:5b:03:6b:c5:6b:ae:3c:ba:67:b9:44:0b:7e:
9c:94:fe:fd:68:0e:8e:4b:56:4e:1f:7f:7e:fe:98:
00:80:9b:7a:89:ba:1c:df:76:ef:36:79:42:98:b7:
fa:9c:65:9f:54:9a:d0:43:d3:22:8a:3f:72:19:c0:
b2:63:cb:05:2e:d6:bd:47:d7:6f:19:ab:67:26:56:
46:1e:53:97:5d:69:fb:f6:60:ff:ee:50:42:f3:0b:
6d:11:fc:11:a2:10:a0:3d:d6:ba:cf:20:5a:be:b0:
09:03:16:19:be:c9:ee:fe:a7:e3:85:02:8c:ed:40:
4d:f6:c2:fb:79:1f:0e:79:39:d7:5f:fc:35:52:5d:
39:66:a1:ec:84:35:ec:50:11:c1:f8:a0:cb:ac:67:
7c:0d:0a:c4:3d:00:95:1a:5c:d8:1c:8c:8e:8b:22:
24:94:01:c8:4b:df:bc:af:fb:1d:62:7a:fd:0e:2f:
79:0e:aa:2f:07:69:89:1a:c0:f4:e4:e7:26:4b:bc:
b5:3c:1a:a9:23:0d:e8:51:16:ce:2f:29:39:2d:9f:
ed:71:bc:be:b6:6e:c3:d1:98:de:df:d2:10:7b:6e:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:7D:17:22:96:27:4F:53:C1:90:53:5B:AD:7C:4A:1C:88:E4:BA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fqN9FyKWJ09TwZBTW618ShyI5Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
77:cd:b5:96:a6:52:31:30:89:6d:4d:40:9e:93:07:30:f8:61:
cf:89:23:af:b3:0d:fe:4e:04:3a:25:ba:1f:59:f9:45:78:7f:
3d:56:36:d8:79:ca:95:27:3c:fe:44:f9:ea:de:7a:7f:d7:49:
87:37:9c:a3:ba:ed:35:30:95:8c:95:4f:27:5b:16:80:a0:c5:
27:22:58:94:48:e2:f0:68:e6:81:70:c1:ea:f0:81:b6:e4:61:
dd:e1:f7:4f:32:6f:0a:29:d7:bc:93:ac:f7:09:25:1d:e1:2f:
58:2a:50:6e:c9:03:0c:a3:49:b9:e8:6e:ef:3f:d7:0e:68:05:
43:fc:72:1b:e4:06:ae:4d:ef:b9:5c:c1:d7:5e:9c:21:d3:7d:
ad:92:f9:ac:0a:20:d6:39:44:de:e3:a9:7c:ef:c7:36:f2:02:
06:34:f0:d1:a5:94:b4:89:9c:ca:34:13:d2:cc:f7:6b:b9:fd:
6e:4c:33:03:dd:59:8d:57:eb:de:61:59:5e:77:bd:44:81:32:
17:a3:6e:e5:24:57:ee:dc:14:d6:c9:33:c7:0d:9c:c1:b5:74:
7d:0f:40:23:d9:d8:b9:6f:5b:60:0f:84:ef:b9:48:47:07:88:
d2:9f:c9:76:0d:1e:5c:72:f3:2c:0d:5e:19:3e:3b:c9:83:d1:
9c:c1:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client