Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jBoA7Co1dno1sgdeOZO5ewotFxA.roa
File: jBoA7Co1dno1sgdeOZO5ewotFxA.roa (raw, json)
Hash identifier: It5QhNNtjTOVvzFlGPqslrXa6VJR97C71IpDpUoim98=
Subject key identifier: 8C:1A:00:EC:2A:35:76:7A:35:B2:07:5E:39:93:B9:7B:0A:2D:17:10
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0F8C1674E37E25AFC66F384C2CC5DB985
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jBoA7Co1dno1sgdeOZO5ewotFxA.roa
Signing time: Thu 01 Oct 2026 18:36:59 +0000
ROA not before: Thu 01 Oct 2026 18:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397700
IP address blocks: 79.172.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:c1:67:4e:37:e2:5a:fc:66:f3:84:c2:cc:5d:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 1 18:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c1a00ec2a35767a35b2075e3993b97b0a2d1710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:f6:a3:c5:27:e5:2f:9e:7d:4d:1f:cc:24:
30:89:fe:16:f8:8e:61:ea:34:b9:64:e3:0e:4a:af:
fd:a0:11:e3:81:af:3f:f4:1d:29:18:d2:9a:10:57:
d5:fe:20:ef:f1:4b:c4:cd:3e:e1:bc:d0:e4:03:af:
63:64:da:f4:1c:8a:e1:1e:13:f2:31:b0:ec:c9:d3:
aa:43:ce:5c:2f:97:c3:46:93:90:b6:04:4f:f7:35:
c6:f5:ab:9e:e0:58:3d:01:c7:74:a6:59:e4:00:e1:
ab:55:9a:80:4b:90:c9:c2:82:23:a0:0a:51:f3:bc:
5c:ed:6a:c5:1b:d3:1c:11:25:e2:76:91:c9:79:0d:
6e:34:34:d7:00:e6:82:c3:a3:7c:c4:ec:16:47:6e:
3a:30:79:aa:0a:0c:0f:d8:86:a8:85:b8:96:8a:3e:
49:15:32:82:2e:0a:7c:1e:ff:79:50:5d:e1:26:49:
d3:cd:94:6d:a6:46:b1:51:72:76:a1:ea:db:bb:9a:
97:9c:82:7f:c9:7e:38:5c:6f:9a:6c:a8:27:7d:1b:
88:ab:43:48:e2:f2:2e:81:e7:53:d9:d6:65:ee:f7:
12:ff:ec:c5:c5:8e:7a:77:26:70:cf:4a:66:26:32:
03:0c:82:d5:44:b3:41:7b:70:fb:9e:66:18:b1:65:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:00:EC:2A:35:76:7A:35:B2:07:5E:39:93:B9:7B:0A:2D:17:10
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jBoA7Co1dno1sgdeOZO5ewotFxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:07:40:f0:9f:7e:0f:ea:25:fc:d5:b6:25:5b:c4:8c:65:16:
77:71:02:43:e3:6e:94:d5:e0:f0:95:d3:c8:49:2a:db:08:22:
7b:9c:c3:00:77:b9:59:30:17:c6:36:45:f2:f9:c0:04:71:f8:
93:b9:8c:d1:c1:03:0d:76:3a:e3:e2:20:ab:6c:7a:57:0b:65:
c3:1e:71:a7:3d:51:ed:3d:cb:54:38:18:f4:f0:8f:84:ea:f8:
79:1b:64:9f:47:13:a3:e1:7c:2b:59:f1:24:74:82:3b:8f:b6:
7b:bb:4f:cd:38:65:a2:e5:a1:9f:56:bd:52:55:5f:7e:d2:54:
ee:61:32:ff:5f:98:94:b1:68:61:87:d1:63:37:55:f8:a2:bb:
de:3b:1a:59:b3:25:1b:93:7d:14:99:73:68:a0:7b:42:6c:eb:
7a:15:18:a5:89:25:af:cd:94:93:c1:50:f3:01:5a:2e:2f:1e:
98:19:40:20:bf:e6:4b:f5:d9:3e:12:04:38:a7:bf:41:0e:57:
95:10:42:d6:c4:c8:c2:b6:87:36:f1:d8:8f:51:ef:c9:12:36:
48:03:32:43:f5:7c:c6:d3:42:7e:84:7a:d4:5d:a1:c4:7d:06:
7b:c7:0f:e9:9f:b4:db:5e:b5:32:49:d0:c6:3a:23:3e:b3:72:
c6:93:01:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD4wWdON+Ja/GbzhMLMXbmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYxMDAxMTgzNjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzFhMDBlYzJhMzU3NjdhMzViMjA3NWUzOTkzYjk3YjBhMmQxNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIn2o8Un5S+efU0fzCQwif4W+I5h
6jS5ZOMOSq/9oBHjga8/9B0pGNKaEFfV/iDv8UvEzT7hvNDkA69jZNr0HIrhHhPy
MbDsydOqQ85cL5fDRpOQtgRP9zXG9aue4Fg9Acd0plnkAOGrVZqAS5DJwoIjoApR
87xc7WrFG9McESXidpHJeQ1uNDTXAOaCw6N8xOwWR246MHmqCgwP2IaohbiWij5J
FTKCLgp8Hv95UF3hJknTzZRtpkaxUXJ2oerbu5qXnIJ/yX44XG+abKgnfRuIq0NI
4vIugedT2dZl7vcS/+zFxY56dyZwz0pmJjIDDILVRLNBe3D7nmYYsWXnVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwaAOwqNXZ6NbIHXjmTuXsKLRcQMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvakJvQTdDbzFkbm8xc2dkZU9aTzVld290RnhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBT6zIMA0G
CSqGSIb3DQEBCwUAA4IBAQB/B0Dwn34P6iX81bYlW8SMZRZ3cQJD426U1eDwldPI
SSrbCCJ7nMMAd7lZMBfGNkXy+cAEcfiTuYzRwQMNdjrj4iCrbHpXC2XDHnGnPVHt
PctUOBj08I+E6vh5G2SfRxOj4XwrWfEkdII7j7Z7u0/NOGWi5aGfVr1SVV9+0lTu
YTL/X5iUsWhhh9FjN1X4orveOxpZsyUbk30UmXNooHtCbOt6FRiliSWvzZSTwVDz
AVouLx6YGUAgv+ZL9dk+EgQ4p79BDleVEELWxMjCtoc28diPUe/JEjZIAzJD9XzG
00J+hHrUXaHEfQZ7xw/pn7TbXrUySdDGOiM+s3LGkwEi
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:23 2026 by rpki-client