Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gOoE28aemFwd5_M-Kg_UQ2tgG8g.roa
File: gOoE28aemFwd5_M-Kg_UQ2tgG8g.roa (raw, json)
Hash identifier: HA3NifriFL+W5v4I0RhXbQA72r89Fr7S7nthnk3OSUc=
Subject key identifier: 80:EA:04:DB:C6:9E:98:5C:1D:E7:F3:3E:2A:0F:D4:43:6B:60:1B:C8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0333E2DEA5DC7E5293A25E9C4553D323C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gOoE28aemFwd5_M-Kg_UQ2tgG8g.roa
Signing time: Mon 24 Aug 2026 10:08:28 +0000
ROA not before: Mon 24 Aug 2026 10:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.250.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:3e:2d:ea:5d:c7:e5:29:3a:25:e9:c4:55:3d:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 24 10:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80ea04dbc69e985c1de7f33e2a0fd4436b601bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:b9:a6:0d:ed:32:57:f3:01:3d:33:14:00:
06:d5:14:c7:d6:32:7b:43:31:5b:10:8a:b0:48:03:
c9:ab:93:d7:fd:c9:a6:6d:28:73:f5:fc:84:60:47:
04:30:e4:ad:5c:c1:df:f9:f6:df:83:12:d3:3f:30:
56:72:17:34:f7:20:59:57:48:dc:65:a8:e7:bf:4f:
c8:a5:16:9f:7b:38:e0:8e:e6:1f:5a:8b:02:84:c8:
90:bd:da:92:bd:59:c4:89:1c:e0:40:cc:7c:b4:a4:
6c:d3:5a:73:b1:95:e3:43:a3:0f:d8:5d:9e:2c:8e:
42:8b:c1:39:b9:7a:ac:b0:47:9f:77:a2:d6:1e:bd:
d2:49:83:7f:ca:3d:78:5c:cd:92:f9:d7:0d:d3:eb:
11:4e:95:65:1e:f1:ca:f1:5d:e3:b2:3e:9d:31:86:
d1:15:1d:5f:10:a0:65:9d:b6:d1:b0:4a:03:53:d6:
cc:0c:77:b7:31:dc:7e:6d:d6:d3:ed:54:45:37:e5:
05:ae:e0:15:bb:57:01:19:b4:bd:a7:0b:9f:a9:99:
91:6e:61:58:55:9e:38:68:e8:34:a5:18:9c:34:5d:
fa:c7:c7:d5:cf:6a:04:34:04:2f:e7:ab:a9:ec:6f:
50:7f:52:22:40:55:2c:2c:e2:f6:1f:11:89:b0:18:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:04:DB:C6:9E:98:5C:1D:E7:F3:3E:2A:0F:D4:43:6B:60:1B:C8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gOoE28aemFwd5_M-Kg_UQ2tgG8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1c:23:ee:82:70:af:fd:bb:19:f5:38:b8:7b:54:b1:dc:91:
40:07:76:4c:06:59:63:af:64:ac:41:d8:eb:96:29:15:68:38:
06:f4:77:b2:f6:11:1b:21:b7:0f:09:68:57:e8:2f:ed:fb:5e:
f8:67:3e:2d:c1:67:38:b9:e6:34:01:ec:9c:87:a7:b1:50:6b:
ca:43:7a:78:92:1b:9c:42:b1:6e:76:b9:e5:9e:fb:6d:0f:d1:
96:dc:5d:86:a3:7e:03:b2:49:a6:0b:f8:23:e7:eb:bd:67:61:
a5:71:4c:d0:c2:67:d2:2b:61:19:7c:7d:70:d7:76:66:6e:61:
7d:7a:b2:01:36:83:b0:54:4f:a3:4c:fb:9a:28:70:7e:bb:85:
d7:92:a3:8f:af:e0:bb:7a:68:05:06:78:c7:d6:1f:72:e2:0f:
c9:31:ba:77:9c:43:41:91:d7:d8:32:45:a8:12:c3:ef:89:c3:
16:85:35:09:00:7f:de:9a:bd:d2:b4:55:a8:cc:c6:b4:b7:3a:
79:57:9d:f3:e8:a0:5e:1b:ce:38:7c:df:a1:66:19:04:12:ed:
b4:90:9f:2a:2f:16:4d:d9:22:34:8e:36:9c:ae:07:4c:e7:44:
e0:62:b8:b1:a9:ad:07:66:09:56:35:ce:61:2a:d1:3d:62:63:
ab:5c:1d:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAzPi3qXcflKTol6cRVPTI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwODI0MTAwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGVhMDRkYmM2OWU5ODVjMWRlN2YzM2UyYTBmZDQ0MzZiNjAxYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOG5pg3tMlfzAT0zFAAG1RTH1jJ7
QzFbEIqwSAPJq5PX/cmmbShz9fyEYEcEMOStXMHf+fbfgxLTPzBWchc09yBZV0jc
Zajnv0/IpRafezjgjuYfWosChMiQvdqSvVnEiRzgQMx8tKRs01pzsZXjQ6MP2F2e
LI5Ci8E5uXqssEefd6LWHr3SSYN/yj14XM2S+dcN0+sRTpVlHvHK8V3jsj6dMYbR
FR1fEKBlnbbRsEoDU9bMDHe3Mdx+bdbT7VRFN+UFruAVu1cBGbS9pwufqZmRbmFY
VZ44aOg0pRicNF36x8fVz2oENAQv56up7G9Qf1IiQFUsLOL2HxGJsBiP3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIDqBNvGnphcHefzPioP1ENrYBvIMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvZ09vRTI4YWVtRndkNV9NLUtnX1VRMnRnRzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6z6AwQA
V+UwMA0GCSqGSIb3DQEBCwUAA4IBAQB8HCPugnCv/bsZ9Ti4e1Sx3JFAB3ZMBllj
r2SsQdjrlikVaDgG9Hey9hEbIbcPCWhX6C/t+174Zz4twWc4ueY0Aeych6exUGvK
Q3p4khucQrFudrnlnvttD9GW3F2Go34DskmmC/gj5+u9Z2GlcUzQwmfSK2EZfH1w
13ZmbmF9erIBNoOwVE+jTPuaKHB+u4XXkqOPr+C7emgFBnjH1h9y4g/JMbp3nENB
kdfYMkWoEsPvicMWhTUJAH/emr3StFWozMa0tzp5V53z6KBeG844fN+hZhkEEu20
kJ8qLxZN2SI0jjacrgdM50TgYrixqa0HZglWNc5hKtE9YmOrXB37
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:59 2026 by rpki-client