Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pdORDC9G7KNwwrzHxEJy66Qd3BE.roa
File: pdORDC9G7KNwwrzHxEJy66Qd3BE.roa (raw, json)
Hash identifier: 1Y7i0Rb3CadX9WWtsR+R1Acjz7yM6oJyiWcSLLFswe0=
Subject key identifier: A5:D3:91:0C:2F:46:EC:A3:70:C2:BC:C7:C4:42:72:EB:A4:1D:DC:11
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019CF726F0C7BBACC934819214CE3B63AE2A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pdORDC9G7KNwwrzHxEJy66Qd3BE.roa
Signing time: Mon 16 Mar 2026 14:57:30 +0000
ROA not before: Mon 16 Mar 2026 14:57:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 79.172.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:26:f0:c7:bb:ac:c9:34:81:92:14:ce:3b:63:ae:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 16 14:57:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d3910c2f46eca370c2bcc7c44272eba41ddc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:3e:f3:8d:6c:ba:9c:28:fa:6b:27:d1:4c:
8d:38:41:d2:cb:8d:ba:e2:f9:db:cf:0a:0d:65:da:
2d:40:6e:41:2f:5e:47:ef:38:89:5e:a4:0a:48:04:
8a:46:5d:bc:a0:24:13:f3:79:a8:38:43:37:f7:02:
81:88:b5:9c:03:ff:2b:71:4f:e3:c1:ed:1a:fa:9d:
f9:54:dc:ef:64:21:7a:b5:0c:32:3c:f1:be:12:28:
b4:32:28:8b:f7:1b:d2:54:7b:ef:e6:02:46:ab:d7:
25:d9:55:c8:9b:bd:f9:4e:96:93:6d:1f:2d:88:c4:
db:38:99:18:90:36:0b:f8:d2:7e:53:d3:39:36:9a:
6f:99:d0:43:8c:9e:57:9b:76:c5:49:1f:33:38:c7:
03:8d:8e:ae:28:72:5d:3d:e6:67:ee:43:d5:c5:22:
47:f2:d4:c3:56:86:2b:05:a7:0c:f2:5f:0e:06:1e:
c2:0d:d4:9f:18:84:d5:34:e2:ab:cd:79:b7:b0:8b:
21:72:59:63:8d:d1:38:30:66:7e:7f:b7:c2:1d:7d:
81:9b:60:bc:7c:6c:1c:af:f4:f8:f0:5e:f9:ee:d4:
c6:6d:f9:60:e3:e9:a6:bd:d3:6c:f8:cb:04:c7:8b:
01:26:36:e4:cf:85:97:2e:b2:be:8c:8f:3c:0d:a6:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:91:0C:2F:46:EC:A3:70:C2:BC:C7:C4:42:72:EB:A4:1D:DC:11
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pdORDC9G7KNwwrzHxEJy66Qd3BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/24
Signature Algorithm: sha256WithRSAEncryption
69:24:02:18:a5:16:79:0a:af:88:11:af:9a:ad:0f:44:d1:bd:
dc:fa:b3:be:a1:ba:2d:e5:25:26:07:2f:de:e1:20:5a:7a:fd:
52:30:02:fc:6f:2a:31:0c:73:b9:98:66:fd:72:11:37:15:92:
b0:32:98:c9:49:a2:62:55:61:a4:29:70:fb:77:99:7c:51:81:
c0:60:6c:d8:64:06:85:bb:ac:19:7b:59:a8:e4:31:8d:25:59:
69:42:b1:b4:25:13:f6:3c:ea:0e:10:ff:9b:42:df:22:0b:f2:
6b:be:74:b2:65:e8:59:36:5b:37:92:94:22:a2:2f:ac:a2:dc:
cf:f7:9d:f6:dc:53:9b:1d:d7:0f:27:55:0b:01:84:ed:5d:64:
97:a6:32:15:09:46:5f:29:98:8c:8b:71:b3:09:95:7b:bf:a2:
e4:db:99:b2:cd:71:16:19:0f:92:6f:d3:80:3c:60:f5:fe:52:
98:f6:07:5d:45:48:bd:6c:e2:d5:88:e7:a0:7a:9f:72:d8:32:
99:0f:31:b0:72:8c:cb:46:c1:6c:fb:43:02:51:4d:f6:01:72:
3f:b9:d1:65:19:b2:49:18:83:ec:f8:b6:14:77:2a:55:18:d6:
92:c5:c3:c0:a5:1c:90:ed:44:b6:8c:08:6b:b8:da:3f:99:ba:
2f:82:1b:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz3JvDHu6zJNIGSFM47Y64qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwMzE2MTQ1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQzOTEwYzJmNDZlY2EzNzBjMmJjYzdjNDQyNzJlYmE0MWRkYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAA+841supwo+msn0UyNOEHSy426
4vnbzwoNZdotQG5BL15H7ziJXqQKSASKRl28oCQT83moOEM39wKBiLWcA/8rcU/j
we0a+p35VNzvZCF6tQwyPPG+Eii0MiiL9xvSVHvv5gJGq9cl2VXIm735TpaTbR8t
iMTbOJkYkDYL+NJ+U9M5NppvmdBDjJ5Xm3bFSR8zOMcDjY6uKHJdPeZn7kPVxSJH
8tTDVoYrBacM8l8OBh7CDdSfGITVNOKrzXm3sIshclljjdE4MGZ+f7fCHX2Bm2C8
fGwcr/T48F757tTGbflg4+mmvdNs+MsEx4sBJjbkz4WXLrK+jI88DaYV3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXTkQwvRuyjcMK8x8RCcuukHdwRMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcGRPUkRDOUc3S053d3J6SHhFSnk2NlFkM0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zIMA0G
CSqGSIb3DQEBCwUAA4IBAQBpJAIYpRZ5Cq+IEa+arQ9E0b3c+rO+obot5SUmBy/e
4SBaev1SMAL8byoxDHO5mGb9chE3FZKwMpjJSaJiVWGkKXD7d5l8UYHAYGzYZAaF
u6wZe1mo5DGNJVlpQrG0JRP2POoOEP+bQt8iC/JrvnSyZehZNls3kpQioi+sotzP
95323FObHdcPJ1ULAYTtXWSXpjIVCUZfKZiMi3GzCZV7v6Lk25myzXEWGQ+Sb9OA
PGD1/lKY9gddRUi9bOLViOegep9y2DKZDzGwcozLRsFs+0MCUU32AXI/udFlGbJJ
GIPs+LYUdypVGNaSxcPApRyQ7US2jAhruNo/mbovghtP
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:45:08 2026 by rpki-client