Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uOHpitK1XmwvN08vuWNhhIrpHqg.roa
File: uOHpitK1XmwvN08vuWNhhIrpHqg.roa (raw, json)
Hash identifier: I6bmXDpQjS9dmUr7Y5RDvH7WYg04HaUPO5HAwxUctmU=
Subject key identifier: B8:E1:E9:8A:D2:B5:5E:6C:2F:37:4F:2F:B9:63:61:84:8A:E9:1E:A8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F126D5D18794A4B7B0BC4C902A4EA17B1
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uOHpitK1XmwvN08vuWNhhIrpHqg.roa
Signing time: Mon 29 Jun 2026 08:09:44 +0000
ROA not before: Mon 29 Jun 2026 08:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 79.172.192.0/24 maxlen: 24
79.172.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:6d:5d:18:79:4a:4b:7b:0b:c4:c9:02:a4:ea:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 29 08:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8e1e98ad2b55e6c2f374f2fb96361848ae91ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:65:af:2d:40:d6:ad:17:51:6f:60:b1:3c:
90:65:01:90:3e:dc:38:0d:4e:20:e7:bd:9d:e3:24:
31:20:5b:65:da:f0:03:ba:90:ce:05:80:4b:db:77:
39:65:06:80:79:41:a5:4d:5a:1e:14:39:c6:34:48:
18:11:cd:ba:2e:30:52:00:83:c3:71:1b:fb:34:2f:
c7:6c:c5:e2:0a:6a:a1:ea:22:d9:76:37:fe:3e:d1:
10:de:93:37:28:6c:c4:e4:cc:eb:7c:5e:f8:b2:d6:
9d:e5:ff:dc:22:98:32:06:43:8e:a4:4e:23:fe:6b:
d1:f7:25:83:a9:cf:78:09:d8:68:51:0b:1d:3f:92:
69:f7:a7:e4:13:59:c7:c4:97:a6:17:3b:d3:b0:60:
d9:b1:af:4b:54:28:5b:72:1a:22:35:cd:78:da:8c:
aa:03:9c:2f:9e:3b:1e:02:f0:18:c7:e0:37:25:ba:
0f:55:c4:20:ca:47:5d:e4:aa:9e:ee:ff:95:9f:74:
d1:98:e7:ba:8f:33:2d:41:47:44:4e:d6:5d:e2:84:
cd:20:2c:07:99:b1:49:7f:d2:fd:05:40:9b:55:7c:
1d:bf:52:3e:b9:90:0f:2c:6f:22:eb:a4:07:00:26:
91:c0:a0:62:9d:e7:a7:cd:0a:a4:29:c1:9e:3c:5d:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:E9:8A:D2:B5:5E:6C:2F:37:4F:2F:B9:63:61:84:8A:E9:1E:A8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uOHpitK1XmwvN08vuWNhhIrpHqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
79.172.250.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a9:6d:cf:af:fa:12:0c:b5:8a:97:8d:03:8e:a1:e4:ae:75:
33:67:33:7a:97:bf:71:fb:24:fc:f7:d2:76:e7:17:25:8b:34:
a1:19:fa:46:f5:a3:f9:5b:5c:f2:f2:96:a6:4d:32:a8:ab:6b:
60:23:55:6f:ca:ae:a0:55:4c:11:c2:4a:3e:4d:96:3b:9e:d4:
96:d4:68:70:ed:31:40:93:0b:93:bc:d2:0e:af:f8:91:2f:ed:
f5:6a:06:f6:c7:b5:b6:57:75:a6:60:c0:1e:47:70:16:fb:f5:
c9:9e:de:fb:1d:3f:ec:d5:8e:d7:15:db:79:e0:b4:4e:ac:a1:
01:ca:a8:ad:fc:c5:57:af:94:61:a7:0b:e1:3c:38:b4:a1:f7:
ab:22:c0:c5:5f:59:a7:96:f8:5f:13:15:7c:f1:35:19:89:62:
4a:92:a8:1d:20:4b:f5:71:43:dc:fc:f3:6f:90:ba:d5:a2:73:
b6:87:7b:b4:58:41:4a:04:3f:c7:23:96:0d:3a:6a:d5:4d:ac:
64:60:19:d1:f0:da:78:0e:c6:8f:56:39:7a:38:d0:44:91:a5:
26:e5:d8:7e:3a:ad:a4:22:75:bc:98:a6:0b:98:5e:ed:d5:82:
88:04:1e:dc:f5:90:e2:f9:4b:e2:f5:90:12:09:01:57:c8:57:
75:9f:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:09:59 2026 by rpki-client