Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uJjGKMkoy4dvMJaXe8Osnz009w8.roa
File: uJjGKMkoy4dvMJaXe8Osnz009w8.roa (raw, json)
Hash identifier: iibRyIS2vi9fsxcPSmI5/D+fEMVgPeMJDZ09fe+SzJY=
Subject key identifier: B8:98:C6:28:C9:28:CB:87:6F:30:96:97:7B:C3:AC:9F:3D:34:F7:0F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0D72E9EE657B3389C047CB8A8B7FAE1C7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uJjGKMkoy4dvMJaXe8Osnz009w8.roa
Signing time: Fri 25 Sep 2026 06:09:11 +0000
ROA not before: Fri 25 Sep 2026 06:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.219.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
79.172.250.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:2e:9e:e6:57:b3:38:9c:04:7c:b8:a8:b7:fa:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 25 06:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b898c628c928cb876f3096977bc3ac9f3d34f70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:68:b0:bc:b2:9f:32:09:34:66:8e:9d:da:
8c:f5:b9:a5:29:51:03:79:e4:a9:c5:b2:6d:17:f3:
9b:b1:b6:4c:2e:ea:c6:6d:b5:6e:78:8d:d8:a5:c4:
b3:9b:10:82:51:72:c9:fe:19:b3:ee:ce:ae:e6:8c:
0f:b9:72:36:70:bc:fb:d9:e6:44:4b:fe:79:70:58:
92:d9:f4:17:8e:e9:2a:dd:fd:e2:65:20:68:3f:3b:
62:2b:bc:38:e7:c5:ab:17:f7:a7:74:7f:25:75:c9:
05:bc:66:fd:3f:20:bb:b4:5e:c9:e8:d2:99:8a:6b:
b8:21:24:65:b9:a8:e4:02:38:b2:07:eb:e2:4b:89:
e5:4d:ca:f5:53:b6:f8:ef:5a:16:6c:72:96:c7:34:
51:23:d7:d0:56:a1:a8:a3:db:0f:99:6a:d0:6f:11:
2f:95:a9:43:de:0f:88:6c:db:9b:bb:a8:8f:ed:75:
d8:7f:6d:b4:a6:05:15:18:b7:17:b9:1e:df:d8:9a:
05:6c:e1:5d:8d:a2:92:8e:b4:ed:29:08:73:fa:70:
f7:42:43:cb:6b:1c:2d:60:87:ca:f5:23:71:3b:4d:
21:73:e2:7c:15:ab:14:7a:9b:04:9b:1a:b7:7b:fc:
94:65:e7:5f:96:40:ba:58:70:27:a2:59:fe:c5:ac:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:C6:28:C9:28:CB:87:6F:30:96:97:7B:C3:AC:9F:3D:34:F7:0F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uJjGKMkoy4dvMJaXe8Osnz009w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.219.0/24
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.48.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:3b:6b:22:3d:af:a9:d1:34:17:80:0c:05:5f:ff:10:5d:0b:
76:98:4c:8f:9f:0a:d2:f7:7e:8e:f0:f9:db:24:34:41:f2:46:
88:c9:95:a3:74:50:79:b7:45:b2:43:5f:91:40:b6:7f:ab:e0:
08:a4:81:d5:e4:fa:8b:e1:58:b7:c8:08:03:f6:59:b7:c4:9b:
5d:e1:6b:6f:85:89:16:64:54:82:8c:7b:a2:6f:a3:b1:41:67:
e4:41:dd:c6:7f:41:c5:ea:b9:1e:dd:8a:6f:03:1d:88:27:47:
b9:58:5a:a7:5e:07:59:df:63:99:fd:a3:bf:c9:14:ec:ec:61:
06:7d:ba:dc:fb:8c:9c:47:45:89:4a:c7:ba:5c:c0:2f:1a:fe:
f7:82:2d:47:a5:6b:a0:af:0e:6f:a5:58:e1:eb:08:65:83:c0:
ea:1f:51:51:18:d2:b6:6b:f0:cb:62:9d:4a:02:bd:82:32:c8:
4d:e7:5c:23:38:3a:ec:0f:2b:86:f7:ec:c4:6b:ef:d7:76:1f:
8f:a3:90:ee:42:26:88:9e:56:3f:f9:9c:5f:18:2e:ee:11:ca:
a5:3c:13:55:3a:0c:f1:fb:23:5d:e8:4c:86:af:06:12:a5:fd:
7d:57:51:82:a7:04:0b:f4:a0:09:a9:b0:7b:57:a3:6e:96:ab:
42:95:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:02 2026 by rpki-client