Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jEV2HjNrmFok6P-qPlCspthy_P8.roa
File: jEV2HjNrmFok6P-qPlCspthy_P8.roa (raw, json)
Hash identifier: m4OqQg+7XNrKTQppmNMou9lqxw0K9DpDQJ3y17W8tZQ=
Subject key identifier: 8C:45:76:1E:33:6B:98:5A:24:E8:FF:AA:3E:50:AC:A6:D8:72:FC:FF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A07F9D75AB8E09876B6424B9012E4243C2
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jEV2HjNrmFok6P-qPlCspthy_P8.roa
Signing time: Tue 08 Sep 2026 06:03:40 +0000
ROA not before: Tue 08 Sep 2026 06:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 79.172.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:9d:75:ab:8e:09:87:6b:64:24:b9:01:2e:42:43:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 8 06:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c45761e336b985a24e8ffaa3e50aca6d872fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:3f:0f:04:0c:82:9a:6f:b0:47:6c:76:91:
45:c9:b4:2b:6d:41:3c:fe:e3:3d:6d:05:a8:e4:91:
fa:9e:21:d3:e9:65:97:fc:91:88:44:19:93:93:55:
1b:cd:8b:71:7d:1e:93:f3:a3:ee:1c:48:e5:9b:0a:
b6:d7:19:1b:64:94:dc:fe:6a:87:48:12:3b:77:81:
5c:40:48:37:3a:18:3d:f0:10:b3:6c:ec:39:f3:b5:
c9:21:5f:43:0a:1a:9b:9a:7e:45:3b:02:4b:48:f1:
6c:5d:92:a6:ea:a3:8e:0e:1f:ff:a6:dc:bd:ee:88:
d7:5e:d0:18:24:22:37:a4:b8:5c:a0:21:43:a6:b2:
5d:cb:13:b4:ee:4d:25:09:3f:45:9e:3d:c6:d8:7e:
5d:13:1e:7c:ca:f1:62:ff:e8:85:bb:bc:49:96:1c:
f1:8e:78:be:e9:92:4d:2e:99:f4:b9:c3:1f:aa:4c:
06:2c:33:38:7a:43:08:5c:2c:ca:73:1d:3d:e5:60:
8d:29:81:e2:46:31:47:d8:87:96:f3:0b:e0:70:0c:
53:30:da:7b:45:5b:e3:18:69:3d:9c:8d:26:96:27:
81:52:94:57:a3:a0:a5:51:bc:4b:13:34:09:70:45:
95:29:cd:e0:78:ce:7b:90:4a:d7:5f:f6:f6:da:5d:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:76:1E:33:6B:98:5A:24:E8:FF:AA:3E:50:AC:A6:D8:72:FC:FF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jEV2HjNrmFok6P-qPlCspthy_P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
Signature Algorithm: sha256WithRSAEncryption
04:45:5a:b1:22:f5:4f:9d:07:43:e8:66:98:cb:1c:98:e6:2b:
b4:51:bf:ce:ff:0d:ea:86:a4:db:00:3b:1b:4d:be:df:17:5c:
e1:2a:c6:38:80:50:63:ee:30:15:2f:ac:57:19:4c:a2:36:e4:
29:d8:20:00:d2:2f:dd:82:ee:ad:d3:8b:df:36:23:df:7c:8d:
4c:2e:a2:4f:67:32:87:ad:60:88:f3:a8:91:f2:34:b8:ba:71:
5c:ba:f0:0a:56:2a:d9:c4:75:6a:97:9a:ce:57:7f:72:2c:22:
c7:d3:29:c6:a6:88:67:4a:98:d3:f1:e3:47:f5:a1:5f:11:e7:
2a:70:3a:c9:86:c0:a6:e3:33:ba:bb:d6:ce:fe:96:09:95:14:
ec:7c:67:d5:18:4d:11:55:90:c1:f1:e4:66:25:12:00:05:26:
43:41:2d:b1:40:46:9e:cf:0e:9d:f6:bd:ef:59:35:f0:77:91:
38:94:fa:c6:a1:84:ed:30:2f:02:a9:db:e5:f1:6b:45:90:c7:
0c:0e:93:1b:13:08:f7:4c:95:0f:0e:2b:e2:eb:1b:85:22:a0:
e2:27:e9:96:2c:e9:05:5e:27:57:65:35:a6:a8:9b:0e:ac:b7:
1b:6e:a0:99:7c:45:7e:87:2f:30:fc:65:53:f4:76:4a:11:ab:
2d:6c:b3:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB/nXWrjgmHa2QkuQEuQkPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwOTA4MDYwMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQ1NzYxZTMzNmI5ODVhMjRlOGZmYWEzZTUwYWNhNmQ4NzJmY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8/DwQMgppvsEdsdpFFybQrbUE8
/uM9bQWo5JH6niHT6WWX/JGIRBmTk1UbzYtxfR6T86PuHEjlmwq21xkbZJTc/mqH
SBI7d4FcQEg3Ohg98BCzbOw587XJIV9DChqbmn5FOwJLSPFsXZKm6qOODh//pty9
7ojXXtAYJCI3pLhcoCFDprJdyxO07k0lCT9Fnj3G2H5dEx58yvFi/+iFu7xJlhzx
jni+6ZJNLpn0ucMfqkwGLDM4ekMIXCzKcx095WCNKYHiRjFH2IeW8wvgcAxTMNp7
RVvjGGk9nI0mlieBUpRXo6ClUbxLEzQJcEWVKc3geM57kErXX/b22l07pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxFdh4za5haJOj/qj5QrKbYcvz/MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvakVWMkhqTnJtRm9rNlAtcVBsQ3NwdGh5X1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zAMA0G
CSqGSIb3DQEBCwUAA4IBAQAERVqxIvVPnQdD6GaYyxyY5iu0Ub/O/w3qhqTbADsb
Tb7fF1zhKsY4gFBj7jAVL6xXGUyiNuQp2CAA0i/dgu6t04vfNiPffI1MLqJPZzKH
rWCI86iR8jS4unFcuvAKVirZxHVql5rOV39yLCLH0ynGpohnSpjT8eNH9aFfEecq
cDrJhsCm4zO6u9bO/pYJlRTsfGfVGE0RVZDB8eRmJRIABSZDQS2xQEaezw6d9r3v
WTXwd5E4lPrGoYTtMC8Cqdvl8WtFkMcMDpMbEwj3TJUPDivi6xuFIqDiJ+mWLOkF
XidXZTWmqJsOrLcbbqCZfEV+hy8w/GVT9HZKEastbLNF
-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:51 2026 by rpki-client