Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-zTQvWzWQGuERMXpxARk7XbiTSo.roa
File: 1-zTQvWzWQGuERMXpxARk7XbiTSo.roa (raw, json)
Hash identifier: Gjwyl90Z23wvGdIEWkCPR/7HQYcJVhBwaJQbpgJjRws=
Subject key identifier: FB:34:D0:BD:6C:D6:40:6B:84:44:C5:E9:C4:04:64:ED:76:E2:4D:2A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F8E003F12A2DAC0A5D109596408914339
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-zTQvWzWQGuERMXpxARk7XbiTSo.roa
Signing time: Thu 23 Jul 2026 08:03:28 +0000
ROA not before: Thu 23 Jul 2026 08:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.192.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:00:3f:12:a2:da:c0:a5:d1:09:59:64:08:91:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 23 08:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb34d0bd6cd6406b8444c5e9c40464ed76e24d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:a2:bf:a4:fa:ec:73:b0:37:1a:87:13:5c:
27:66:e9:7d:4a:72:4c:07:f6:f8:e8:99:80:37:ba:
da:78:a4:9e:9c:49:d0:57:d5:cd:76:fb:d4:80:50:
bf:96:1c:57:d4:ef:12:c5:4f:dd:1e:cf:63:9f:00:
6b:8f:21:e0:38:3b:47:1f:72:a8:e7:1f:8b:1a:26:
b0:15:9a:e7:f2:8c:3a:50:9f:d6:1d:6c:fe:a7:58:
40:af:bc:ad:50:84:53:2e:f0:5c:8e:57:86:b5:86:
2d:1f:d6:29:07:ec:00:5b:de:30:d1:10:3a:ac:83:
15:e5:a0:be:8e:46:dd:90:83:11:49:9a:8d:e4:43:
2d:11:65:07:4f:d2:6f:bb:14:19:19:7b:3b:ca:68:
b8:2e:02:95:19:50:cc:4d:b2:21:1e:d0:bb:19:90:
1a:88:09:01:bc:2d:7a:0f:1e:a2:07:0a:31:0c:06:
c4:df:28:81:c0:73:c7:72:40:be:54:fb:ad:1e:96:
ab:2f:93:d8:f4:c7:4c:3a:e0:6b:32:c5:7f:43:c6:
4f:9b:6a:46:00:51:6b:20:7e:24:03:7d:ce:69:57:
67:bd:c1:19:aa:09:1b:ea:de:53:0f:37:cb:ed:d2:
dd:45:68:80:14:b5:9b:9e:16:26:b1:d7:23:ee:86:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:D0:BD:6C:D6:40:6B:84:44:C5:E9:C4:04:64:ED:76:E2:4D:2A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-zTQvWzWQGuERMXpxARk7XbiTSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
79.172.250.0/23
87.229.8.0/22
87.229.37.0/24
87.229.56.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:06:ec:31:19:61:f8:e2:1c:47:db:2c:83:2b:5b:86:51:c4:
97:07:9f:36:3b:00:b3:bb:ca:6e:2b:18:76:29:c4:cf:07:20:
96:4a:60:b3:41:30:d9:14:7b:0d:16:06:df:05:0b:40:5a:dd:
32:ab:8a:4f:1e:c2:82:f2:26:9f:dd:0d:4b:45:ef:c9:cd:38:
fc:dc:8c:1e:94:f6:1d:64:11:18:eb:f6:89:d5:b9:11:5c:8b:
b0:16:4b:fe:c6:39:5f:f7:3c:c6:fb:6c:b9:c7:3e:3e:2d:8c:
f2:bc:10:29:da:62:df:42:fa:b2:d1:9e:e3:5b:f6:75:e9:53:
aa:49:fa:b5:48:38:44:e6:0b:24:b8:5f:33:47:79:68:f0:12:
b7:f8:21:ea:88:00:cb:90:62:f9:0e:7f:85:b0:e8:89:67:e3:
7a:ab:b1:46:f8:ba:ea:9c:8e:6b:2c:a9:79:75:ca:95:1f:cf:
4e:23:73:75:35:90:3b:49:74:eb:67:52:2a:51:03:96:6a:b6:
87:c7:63:b5:f3:f7:48:42:9b:61:cd:80:c3:41:7f:27:85:b5:
d1:7e:78:60:8d:81:e8:3f:87:47:9f:1c:12:0b:f8:c4:c9:f9:
67:2c:cb:91:be:f7:b4:8d:eb:a1:e1:4a:c1:09:48:d1:f9:ce:
89:3d:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:16 2026 by rpki-client