Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zMesIVK-W8uE1scLvhQtckduHjw.roa
File: zMesIVK-W8uE1scLvhQtckduHjw.roa (raw, json)
Hash identifier: ZtPt/k/2If+w/v8CKvmnqEl4b6gg7lwfBhAWiuyb3Ls=
Subject key identifier: CC:C7:AC:21:52:BE:5B:CB:84:D6:C7:0B:BE:14:2D:72:47:6E:1E:3C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FACF6AA8A735D5D0AB76D691334FC4BA0
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zMesIVK-W8uE1scLvhQtckduHjw.roa
Signing time: Wed 29 Jul 2026 08:21:14 +0000
ROA not before: Wed 29 Jul 2026 08:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.192.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:f6:aa:8a:73:5d:5d:0a:b7:6d:69:13:34:fc:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 29 08:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccc7ac2152be5bcb84d6c70bbe142d72476e1e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:3a:67:c0:c1:99:37:77:13:93:a0:77:7a:
f0:1e:12:3f:6a:66:66:5d:92:6a:3a:53:30:a1:0e:
19:a7:53:42:bc:9c:44:fb:42:3c:12:35:1d:77:4d:
d5:a8:29:46:77:c8:27:f3:d6:12:f6:56:4c:ec:5f:
c0:21:37:51:e9:a8:31:95:0e:22:12:51:6e:7e:c3:
aa:8e:24:0b:8b:31:41:0e:cb:7f:f8:6c:88:b7:17:
d5:1e:77:22:fc:09:f6:8a:96:b7:69:cd:c7:11:52:
3f:0e:e7:89:1b:58:6d:27:57:76:da:b3:0e:7a:c1:
62:1c:17:67:97:bf:a7:f8:26:9f:0c:00:a6:de:d7:
b3:ee:f6:6e:6d:93:8c:66:d4:b4:8d:48:1b:5b:86:
0d:e6:6b:72:84:06:6b:c3:61:00:13:f6:8c:4b:3d:
aa:da:5e:e0:28:51:1f:b7:d2:73:88:d5:c4:54:c1:
5c:f3:55:45:89:11:4a:a3:3e:ad:31:67:6e:bd:b9:
39:6f:6e:75:8e:a1:13:ed:68:0f:99:a1:d5:f9:1e:
58:87:e8:05:4b:7a:4b:c6:7f:79:ce:25:ef:aa:44:
ff:68:fe:31:4f:80:98:67:e7:32:37:01:b6:8f:a2:
ce:74:b9:e8:c6:67:6d:5c:2b:f2:17:ab:5d:a9:ba:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:AC:21:52:BE:5B:CB:84:D6:C7:0B:BE:14:2D:72:47:6E:1E:3C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zMesIVK-W8uE1scLvhQtckduHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.56.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:78:22:d9:32:b7:7f:be:d9:ce:f1:4d:b0:e1:a0:63:81:f6:
83:e7:11:c0:25:2b:ea:0c:3e:76:55:51:5c:86:be:d9:54:d4:
0f:aa:a3:c8:7e:d5:c5:e8:fe:19:5e:75:51:3b:94:dc:70:cb:
d8:74:21:e7:24:8b:02:20:fd:ba:30:34:fb:39:8c:f6:6b:4c:
58:e4:be:af:39:e2:25:b7:61:c9:f9:f0:5e:b7:23:5f:f2:04:
40:0d:e4:bc:cf:f6:90:85:05:f6:cb:48:da:52:5e:c5:8f:07:
fc:06:81:7d:6c:e9:6c:d8:6d:4e:f4:7b:1f:d1:e7:b8:f8:77:
22:46:62:42:9a:97:cb:a5:de:70:30:c5:43:04:86:8e:49:c9:
e4:9a:73:60:29:07:4f:f5:56:fb:d3:5f:34:9c:c6:05:21:6d:
fd:12:52:9b:0f:46:7e:19:78:20:b4:ec:08:1d:cf:47:36:5a:
16:fa:dc:4f:c2:b0:d4:b6:1c:8b:06:b7:25:9d:d4:4b:06:8f:
23:b0:db:09:65:fd:8d:e6:a3:55:a5:40:78:12:3b:d3:f1:30:
22:2a:4f:5e:6f:18:a8:af:d8:5f:57:d5:44:12:b9:9b:ee:07:
2f:6d:be:aa:d4:13:50:7c:26:95:b0:d1:e4:5a:f9:2d:71:d4:
aa:69:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 19:38:53 2026 by rpki-client