Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jP0bGd6liBBU_fOr7Ggo7YhVtCw.roa
File: jP0bGd6liBBU_fOr7Ggo7YhVtCw.roa (raw, json)
Hash identifier: o5oEGOG3vG09PGkqi3eitWUqMsjtuL400x8kjkqBaBA=
Subject key identifier: 8C:FD:1B:19:DE:A5:88:10:54:FD:F3:AB:EC:68:28:ED:88:55:B4:2C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DD470680C9B811160CAB8B1F3751F3BA4
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jP0bGd6liBBU_fOr7Ggo7YhVtCw.roa
Signing time: Tue 28 Apr 2026 14:13:49 +0000
ROA not before: Tue 28 Apr 2026 14:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402044
IP address blocks: 87.229.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:70:68:0c:9b:81:11:60:ca:b8:b1:f3:75:1f:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 28 14:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cfd1b19dea5881054fdf3abec6828ed8855b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:c1:17:f1:cf:df:87:b6:2a:f7:b7:c8:5f:
17:14:b6:9b:eb:0c:13:46:26:25:b5:72:ef:e5:fb:
50:f2:d7:56:e0:82:3b:9a:c0:f2:ff:1f:bf:32:99:
da:7a:a7:37:d8:27:2e:6a:5b:f3:4e:d1:7c:70:54:
ac:6e:ee:de:50:d5:52:ca:82:f3:0f:d3:dc:0a:28:
41:71:f9:25:bd:ef:85:e2:2e:f0:84:16:0f:0e:37:
73:0f:53:1c:72:db:73:01:6e:f5:e8:51:94:98:c2:
1b:4e:cb:58:bf:bb:c4:60:2f:15:b4:e5:fa:da:55:
f4:c9:ca:17:84:4a:f8:4b:5e:b0:69:26:d9:d2:71:
05:bd:e2:10:8e:d7:43:c8:4c:be:36:0c:e2:da:d2:
c1:f6:df:48:dd:41:2f:61:ff:c3:e0:a3:70:75:59:
59:2e:f4:55:c4:a6:79:9e:c5:c8:6d:45:25:50:2f:
39:7a:a5:86:7b:5f:f2:63:ac:ff:33:9a:49:02:3e:
c4:4f:25:1e:d2:b4:75:d1:d5:2f:11:8b:f5:50:1b:
f9:25:c7:7c:12:c5:43:ed:74:f1:8c:bb:b4:ad:87:
29:1d:d7:48:45:99:60:53:18:c0:5c:14:45:a3:6f:
a5:02:a6:55:13:1a:46:8f:19:30:19:86:0f:1d:d7:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:1B:19:DE:A5:88:10:54:FD:F3:AB:EC:68:28:ED:88:55:B4:2C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jP0bGd6liBBU_fOr7Ggo7YhVtCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.25.0/24
Signature Algorithm: sha256WithRSAEncryption
19:46:2c:cb:d4:31:90:e3:b8:a3:23:61:6c:99:ea:75:1e:50:
d5:09:15:3d:4b:e7:ed:d2:00:f6:1e:1c:d8:1e:e8:29:2e:5f:
0f:69:c5:10:1d:fd:9e:84:8e:a3:ee:0f:a2:cf:91:78:c8:05:
07:84:a5:61:c8:c6:87:ce:12:ba:cc:60:ea:3c:a6:5a:9a:8a:
5b:27:bd:96:41:0a:2b:fd:4e:89:02:bf:48:11:7e:bc:76:03:
20:63:5b:ba:10:9b:e7:17:95:37:41:aa:d9:d1:00:83:53:77:
91:93:ab:b6:dc:d1:05:f0:d6:b2:7b:3d:fc:29:a3:5b:5a:29:
3a:73:f1:aa:41:b6:85:95:31:e4:2f:24:e4:c4:93:7f:fe:b6:
1d:2c:69:0c:5f:51:fb:e5:ff:fe:5e:0d:6b:e1:cf:c0:66:0d:
74:d6:04:cc:9a:59:53:09:f6:3d:1c:f3:18:f7:c0:6c:d5:9f:
2c:7e:a0:63:00:a2:13:16:95:9b:86:e8:19:72:1d:b2:33:c3:
83:a3:80:79:2e:f3:97:58:ed:b3:e2:e1:2d:1a:fa:11:56:dd:
83:50:01:73:60:f1:99:fd:65:cf:d9:35:4f:18:94:84:52:12:
26:00:a2:e8:68:f0:5b:3a:1f:38:43:5e:c0:5d:6f:45:d2:9d:
6f:b0:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:35:53 2026 by rpki-client