Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rTyTaFe_QgfLpzAu0580gsRxm-4.roa
File: rTyTaFe_QgfLpzAu0580gsRxm-4.roa (raw, json)
Hash identifier: rdNIBbtX01QrYi10dNZOnNlUhPIEnuVLw/iBhptafXI=
Subject key identifier: AD:3C:93:68:57:BF:42:07:CB:A7:30:2E:D3:9F:34:82:C4:71:9B:EE
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F6F5AEB1866754A66637CDBDA7CC472E6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rTyTaFe_QgfLpzAu0580gsRxm-4.roa
Signing time: Fri 17 Jul 2026 09:14:17 +0000
ROA not before: Fri 17 Jul 2026 09:14:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 87.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:5a:eb:18:66:75:4a:66:63:7c:db:da:7c:c4:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 17 09:14:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad3c936857bf4207cba7302ed39f3482c4719bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:b0:62:09:14:20:21:6d:06:3e:16:5a:cc:
9d:fe:f5:86:6c:35:d9:c9:1e:0e:67:5f:4b:47:2b:
08:e2:2e:80:6d:a8:84:53:f2:47:33:50:47:bb:85:
df:e2:22:37:ac:85:ca:95:23:6a:38:46:b5:26:b4:
75:ff:a7:d6:e9:02:a5:45:79:f1:8a:ca:7a:e4:14:
6b:4a:85:2b:55:f0:6e:f7:09:61:9e:9f:05:9b:76:
a2:60:70:ee:aa:8c:32:c3:1e:be:aa:1d:17:e6:0e:
27:c4:5f:55:49:49:04:ee:a9:d0:60:26:9e:ce:30:
d1:9b:61:61:6f:57:63:85:48:6e:9e:12:58:43:29:
b0:31:27:0e:be:c0:d0:49:9f:07:09:32:43:15:21:
69:60:bf:b4:e6:b0:a1:21:5c:fd:e5:91:2d:29:b5:
38:77:a5:6d:7d:43:8f:93:86:dd:0e:06:f4:d0:7a:
09:77:c8:53:89:dc:8f:7f:bf:24:e1:21:c4:f9:68:
12:c1:dd:e9:59:9d:7c:89:a1:2a:71:9b:36:0b:67:
35:c8:41:0c:39:44:76:8a:c6:da:0e:b5:2b:69:43:
a6:90:d9:7f:0b:d4:73:bc:7a:71:96:da:58:a4:99:
0d:de:22:4f:7f:56:39:ab:cd:25:64:1c:06:f7:bd:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:93:68:57:BF:42:07:CB:A7:30:2E:D3:9F:34:82:C4:71:9B:EE
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rTyTaFe_QgfLpzAu0580gsRxm-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a6:63:78:5b:37:b7:dc:53:29:04:7b:5f:a4:2a:87:37:ae:
61:e4:99:d9:03:e2:3a:35:4c:10:ff:df:86:63:02:3e:21:8b:
85:47:f2:db:68:b4:fa:a8:20:97:8c:a6:8d:64:98:56:16:00:
46:b7:c3:e1:26:a9:54:1c:83:18:ff:85:fc:79:61:b0:6e:ef:
a7:66:ed:9e:de:31:64:24:d3:da:24:34:db:96:43:02:16:d9:
8f:75:bb:b8:6d:97:0a:75:21:fa:54:52:fe:6a:f5:03:f2:f8:
c8:5d:08:d2:7e:04:ab:ed:ad:ed:3c:0c:89:3b:85:dd:98:2e:
6d:0e:47:8a:1e:27:5f:eb:64:18:26:a4:46:6a:09:eb:e3:e3:
aa:7b:b5:e8:d7:83:0c:06:34:9e:0f:65:6f:b9:72:7b:d8:01:
1a:4e:23:3c:d2:19:20:74:53:d4:a9:b2:34:a8:93:07:ce:ca:
a0:42:82:0c:03:a4:ca:d1:7d:5c:83:e0:5a:d6:23:45:02:fc:
6d:34:1d:c1:58:6d:44:29:f5:2f:fa:7b:f2:98:d4:84:ba:5e:
e3:4f:b9:f2:b5:09:80:6c:b6:7f:ff:07:18:00:3c:2f:ca:87:
82:98:bd:f9:10:c3:f8:8c:5f:f5:b0:8f:ab:e7:c6:6a:1d:59:
0f:e1:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:41 2026 by rpki-client