Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kOq1NQXaB-jBWfbQ9-ZIicPQN4k.roa
File: kOq1NQXaB-jBWfbQ9-ZIicPQN4k.roa (raw, json)
Hash identifier: uMlJP6qY0nfCLC9pzUa6iIjPz8ljGdQ/I22t8o4QN24=
Subject key identifier: 90:EA:B5:35:05:DA:07:E8:C1:59:F6:D0:F7:E6:48:89:C3:D0:37:89
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A10C6A51B3219FC8559C3BCB8864E1DD68
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kOq1NQXaB-jBWfbQ9-ZIicPQN4k.roa
Signing time: Mon 05 Oct 2026 14:14:16 +0000
ROA not before: Mon 05 Oct 2026 14:14:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219032
IP address blocks: 79.172.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:6a:51:b3:21:9f:c8:55:9c:3b:cb:88:64:e1:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Oct 5 14:14:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90eab53505da07e8c159f6d0f7e64889c3d03789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:d0:6d:b1:77:8f:cc:5e:11:96:40:10:9c:
73:fa:16:3c:b8:be:06:cc:eb:58:5b:25:88:bb:ea:
dd:de:f0:59:05:e5:f9:ff:c9:6b:09:e1:8c:33:9a:
e5:e5:be:bd:6f:8c:16:f2:3b:ae:90:56:71:3f:31:
ee:ea:5e:95:a5:fb:bf:80:4b:83:f6:30:f1:68:5a:
d6:e9:ef:1e:25:9b:7c:ad:c9:72:2c:a1:1b:4a:7e:
11:8f:2f:69:58:76:b1:7e:ca:d3:f2:2c:96:4c:66:
e2:cb:ac:81:d5:0d:b0:e2:86:2c:69:af:75:dc:85:
2c:9a:0f:45:bd:fc:c5:1c:01:4e:9c:41:1a:a7:10:
01:c6:7c:87:1f:f0:09:66:4f:97:05:5d:a8:da:20:
30:b0:e2:ca:5a:f0:50:56:fe:1e:d4:d9:5b:bb:d9:
f6:27:20:0a:6d:72:42:ab:58:d6:c9:53:43:59:9e:
1f:e2:ef:ff:11:d3:f5:72:ff:9b:c6:55:dd:8a:78:
31:08:22:19:d7:52:0d:da:5e:fc:62:0f:2d:84:12:
f6:af:17:0a:9d:0c:8f:1b:92:33:b0:30:ad:0d:ff:
05:51:c8:4b:95:79:41:f4:c8:f8:50:07:6c:34:b6:
a0:00:b0:12:f0:79:2d:67:8a:6b:f3:b4:ff:8e:75:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:B5:35:05:DA:07:E8:C1:59:F6:D0:F7:E6:48:89:C3:D0:37:89
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kOq1NQXaB-jBWfbQ9-ZIicPQN4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
76:64:fd:7e:a8:c9:f3:91:d9:3e:06:3d:3c:37:6f:06:bf:f4:
78:e9:a8:cd:00:5e:16:8d:f1:bf:4b:7f:76:46:42:16:58:ad:
05:98:02:3a:01:bf:1e:c2:50:e6:15:3e:b7:b4:61:92:fe:3c:
3c:79:e7:19:b0:13:91:3b:e4:0c:d2:ee:d1:0b:fc:28:b0:e8:
a3:cc:8f:77:66:95:4b:62:32:ae:e5:20:4b:0e:4e:bb:38:91:
1c:0a:95:fa:0b:76:9d:23:3f:9e:d5:db:f8:6b:82:ce:4f:82:
14:ab:0a:8f:c6:dc:9e:0b:29:fb:1d:b7:64:8d:43:0a:35:4a:
e5:7d:81:a9:81:59:27:5b:96:88:75:e4:ff:84:3e:85:70:aa:
ce:a9:9a:77:8b:61:f9:b9:cd:64:c0:22:dc:e3:7d:d5:b6:4c:
58:95:75:49:75:ad:3f:b7:51:ec:11:cc:22:6a:94:97:69:d8:
b8:40:8d:4f:06:74:23:8e:a4:49:10:fa:8a:1a:e0:23:e8:83:
3d:db:1e:a8:bc:26:47:38:bf:a9:a2:0b:d6:b3:25:fd:37:e9:
39:f8:cf:31:5a:53:fa:34:c7:c5:f0:8b:19:e3:57:ac:31:ff:
07:e1:c6:88:3b:ab:60:61:46:05:e0:62:ad:28:c6:8d:66:1f:
2e:5f:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:07:53 2026 by rpki-client