Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/k6Et5FpZWODe4I7EE_83byrTizE.roa
File: k6Et5FpZWODe4I7EE_83byrTizE.roa (raw, json)
Hash identifier: yRAADxk1lKXjNl7iS63PQpUiY1MpskKMCBqxlZERIfU=
Subject key identifier: 93:A1:2D:E4:5A:59:58:E0:DE:E0:8E:C4:13:FF:37:6F:2A:D3:8B:31
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0328E68A7EDC63E7C1D8C603E78498E2D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/k6Et5FpZWODe4I7EE_83byrTizE.roa
Signing time: Mon 24 Aug 2026 06:56:28 +0000
ROA not before: Mon 24 Aug 2026 06:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 79.172.192.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:8e:68:a7:ed:c6:3e:7c:1d:8c:60:3e:78:49:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 24 06:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a12de45a5958e0dee08ec413ff376f2ad38b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:92:6d:5e:4e:c8:9d:61:72:1b:71:b4:b3:
5b:bc:21:53:83:1b:2b:1b:ac:bd:78:ac:fb:10:c3:
f1:93:f4:7d:91:51:e8:4d:24:22:cf:e9:0e:92:fa:
bc:f8:78:4f:61:13:e0:08:18:03:22:62:0b:6d:39:
67:65:52:32:fe:d9:22:77:f2:51:6e:21:a7:57:05:
d8:1f:31:f4:5b:20:07:a1:e7:b0:fc:32:e6:d5:5a:
27:3a:ec:d4:5c:e6:c4:7f:3d:d3:35:30:0c:8a:fd:
ff:4c:d0:c3:15:dd:1a:99:80:0a:f8:41:6b:c6:61:
20:04:8d:8c:82:97:b3:f1:68:69:64:2c:ea:3c:53:
0a:7c:b5:ae:20:e1:bc:77:5d:ff:a2:41:86:7e:68:
17:f7:a5:6d:5f:ce:cc:13:f2:66:e8:f6:e0:d7:38:
cc:75:25:b7:a9:96:85:56:c3:4e:15:0a:7d:24:7b:
9a:9f:e8:6d:5b:ad:91:e8:30:7a:cd:7a:1d:07:b1:
7c:98:41:db:b2:5d:45:a6:75:1e:86:29:cd:22:4c:
9d:e6:b8:99:1c:d7:13:70:f6:b8:a1:0e:b4:68:2b:
d4:e1:b4:7e:30:9e:f7:9e:a2:14:ba:7e:ab:fa:19:
59:07:c9:e6:60:bb:ea:a9:ac:97:b3:95:a2:21:6b:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:2D:E4:5A:59:58:E0:DE:E0:8E:C4:13:FF:37:6F:2A:D3:8B:31
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/k6Et5FpZWODe4I7EE_83byrTizE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:57:b8:5b:ec:64:50:a8:3d:a9:ec:e6:bc:21:83:bf:cd:bb:
60:da:0c:79:35:44:7c:fa:f5:40:ec:68:73:c8:05:ae:9f:77:
d3:cc:46:9c:e9:2b:23:77:aa:13:98:a8:b5:a3:4e:86:f0:0e:
64:16:46:f8:2b:35:3f:1f:6a:15:52:38:f6:93:08:59:98:3a:
9b:1c:02:a9:ad:d7:26:cc:e8:35:89:b4:73:19:8e:da:4a:33:
31:82:64:e7:ce:54:f1:28:94:ca:56:71:7d:c0:71:1c:e6:1f:
d4:ac:82:f5:41:40:ad:a7:ec:e1:6d:f3:8d:70:c6:3b:df:fb:
b9:a8:8d:fc:ee:9f:3b:cc:55:7d:0b:0c:bc:7d:38:88:0d:84:
3c:20:ee:1e:e7:fb:0a:23:59:02:8b:59:99:f3:28:1c:a9:50:
0b:87:74:8e:5d:60:4d:34:45:77:52:b6:1d:e7:45:d7:b6:e1:
04:bf:52:dd:b8:c5:42:bc:21:7c:f9:8f:46:f8:b7:ba:94:a4:
19:20:f6:86:e2:58:3f:9a:10:be:c7:db:d0:40:6c:74:66:db:
3c:3c:25:32:6f:2f:db:20:3b:29:3b:17:6b:a2:c3:e6:b5:38:
cd:5f:82:52:a8:41:ef:97:70:48:54:ea:7b:47:5f:c4:79:31:
e8:8e:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:41 2026 by rpki-client