Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xQT08ASWdjU-6R2JMRbJfz3NZE8.roa
File: xQT08ASWdjU-6R2JMRbJfz3NZE8.roa (raw, json)
Hash identifier: yBfl+GEqlJDl9lkM9jZGtylzHgVZ1YKDAV2jcJgpgOE=
Subject key identifier: C5:04:F4:F0:04:96:76:35:3E:E9:1D:89:31:16:C9:7F:3D:CD:64:4F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DB724F957513E39AB4D1BF5959271AB3D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xQT08ASWdjU-6R2JMRbJfz3NZE8.roa
Signing time: Wed 22 Apr 2026 21:42:26 +0000
ROA not before: Wed 22 Apr 2026 21:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 79.172.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:24:f9:57:51:3e:39:ab:4d:1b:f5:95:92:71:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 22 21:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c504f4f0049676353ee91d893116c97f3dcd644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:1f:de:62:c8:82:0b:ba:51:40:c5:2f:b0:
23:fe:00:87:be:78:e0:c6:65:cb:ee:eb:b0:cc:bf:
bc:fd:3e:a4:06:43:32:ad:0e:34:56:b5:19:a5:10:
87:54:72:44:72:b4:d2:64:c1:31:27:66:b3:95:e8:
18:8b:b8:81:70:25:49:13:e4:38:3f:c1:54:ee:f5:
30:81:92:70:e7:d9:28:03:6b:dd:59:f5:51:03:f1:
16:38:80:26:74:70:06:4c:39:6c:2b:bc:f8:c6:b7:
32:50:2f:0b:ae:a7:00:c0:0a:0e:92:bd:c0:da:d1:
bf:ba:a4:a0:fe:0b:58:21:33:7c:f4:ad:50:23:f1:
68:f6:e6:b7:4f:82:15:cc:93:96:72:65:6f:cf:89:
78:7f:4f:02:ab:74:df:f3:a6:98:be:e0:e0:70:d7:
93:d8:eb:ab:bb:a5:4a:19:b2:77:8c:87:c8:53:49:
5e:d8:71:f5:1b:46:31:7d:fe:4a:33:1d:9a:46:9c:
90:cd:1c:d4:c9:43:b9:ce:44:45:81:36:32:77:05:
72:50:bf:fa:86:30:9a:e2:4c:fb:fc:6a:9d:e4:c1:
dc:6a:3a:fd:96:34:01:ea:cd:6f:8d:0c:4a:69:87:
39:5f:be:7a:5b:b6:8c:bd:0d:70:73:df:11:06:70:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:F4:F0:04:96:76:35:3E:E9:1D:89:31:16:C9:7F:3D:CD:64:4F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xQT08ASWdjU-6R2JMRbJfz3NZE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.201.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4b:fa:6f:1f:83:75:8d:d8:43:71:f5:74:57:1e:9b:e9:36:
ac:5e:cc:ae:c0:25:08:6b:91:06:bf:0b:84:b0:df:ae:a0:12:
f9:b1:64:25:e8:98:80:96:84:8f:a4:27:19:9d:50:19:83:46:
bd:a9:01:3e:3e:13:6d:42:5c:a2:2e:61:6b:d7:97:a7:11:64:
b1:8d:49:ec:af:32:3f:b7:79:0f:d3:3c:14:e8:98:42:8c:3a:
af:70:50:2c:78:4c:4b:16:d1:54:97:c0:55:00:e9:c9:a0:e0:
00:db:db:e0:39:1d:2d:5c:85:26:57:22:6e:81:60:72:e5:4a:
c1:b8:2d:d9:b7:5c:66:72:ba:23:f9:29:b0:f2:20:3f:6d:f8:
9e:30:68:0d:b2:70:2d:5a:1a:7c:8a:65:c5:55:e5:0e:d1:0f:
4a:51:9a:7f:65:b5:0f:84:2d:58:c8:0d:f1:7d:7a:d4:7f:36:
3c:f0:a5:c6:5a:c0:b9:3f:a2:ac:8f:68:c4:9b:0e:a4:3c:3f:
23:c4:2f:ee:1c:fe:7b:02:1f:31:3e:f4:d3:d2:34:d0:74:09:
0c:66:08:32:a1:17:69:0e:ac:64:94:5e:46:e0:b9:53:d1:33:
40:5a:f8:09:34:9c:7e:00:89:b1:a4:7d:7a:7d:99:d1:8b:cf:
b8:cb:f0:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ23JPlXUT45q00b9ZWScas9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNDIyMjE0MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTA0ZjRmMDA0OTY3NjM1M2VlOTFkODkzMTE2Yzk3ZjNkY2Q2NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CQf3mLIggu6UUDFL7Aj/gCHvnjg
xmXL7uuwzL+8/T6kBkMyrQ40VrUZpRCHVHJEcrTSZMExJ2azlegYi7iBcCVJE+Q4
P8FU7vUwgZJw59koA2vdWfVRA/EWOIAmdHAGTDlsK7z4xrcyUC8LrqcAwAoOkr3A
2tG/uqSg/gtYITN89K1QI/Fo9ua3T4IVzJOWcmVvz4l4f08Cq3Tf86aYvuDgcNeT
2Ouru6VKGbJ3jIfIU0le2HH1G0Yxff5KMx2aRpyQzRzUyUO5zkRFgTYydwVyUL/6
hjCa4kz7/Gqd5MHcajr9ljQB6s1vjQxKaYc5X756W7aMvQ1wc98RBnCUTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUE9PAElnY1PukdiTEWyX89zWRPMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEveFFUMDhBU1dkalUtNlIySk1SYkpmejNOWkU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zJMA0G
CSqGSIb3DQEBCwUAA4IBAQBJS/pvH4N1jdhDcfV0Vx6b6TasXsyuwCUIa5EGvwuE
sN+uoBL5sWQl6JiAloSPpCcZnVAZg0a9qQE+PhNtQlyiLmFr15enEWSxjUnsrzI/
t3kP0zwU6JhCjDqvcFAseExLFtFUl8BVAOnJoOAA29vgOR0tXIUmVyJugWBy5UrB
uC3Zt1xmcroj+Smw8iA/bfieMGgNsnAtWhp8imXFVeUO0Q9KUZp/ZbUPhC1YyA3x
fXrUfzY88KXGWsC5P6Ksj2jEmw6kPD8jxC/uHP57Ah8xPvTT0jTQdAkMZggyoRdp
DqxklF5G4LlT0TNAWvgJNJx+AImxpH16fZnRi8+4y/Bu
-----END CERTIFICATE-----
Generated at Sun May 3 18:35:52 2026 by rpki-client