Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4NjOUA8pMIczWQCdGGl-E_oshxA.roa
File: 4NjOUA8pMIczWQCdGGl-E_oshxA.roa (raw, json)
Hash identifier: 0LrXjv8EtajprxU+/xIuUgkCK8Iu7IG/GFOpk3tJy6E=
Subject key identifier: E0:D8:CE:50:0F:29:30:87:33:59:00:9D:18:69:7E:13:FA:2C:87:10
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F3B8DEB88AE11DC9C8CD94F4986DEC04F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4NjOUA8pMIczWQCdGGl-E_oshxA.roa
Signing time: Tue 07 Jul 2026 07:49:44 +0000
ROA not before: Tue 07 Jul 2026 07:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213382
IP address blocks: 79.172.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:8d:eb:88:ae:11:dc:9c:8c:d9:4f:49:86:de:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 7 07:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0d8ce500f2930873359009d18697e13fa2c8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:bd:ff:35:21:67:fb:2d:14:6c:49:2b:c0:
bf:4d:8f:5f:71:16:d1:d9:82:2d:61:90:33:55:41:
bb:39:db:fe:94:65:d7:1b:ae:48:f4:1b:69:2a:86:
f9:35:c2:c7:9d:68:94:34:32:3c:cf:8a:c0:16:e5:
f3:2a:c2:90:87:d6:f7:a2:c0:18:a5:bc:46:61:3b:
9a:8d:93:48:c5:08:47:99:85:46:a0:9e:42:a7:14:
c1:5b:24:28:6d:a2:2d:d0:20:96:8b:1c:e3:89:dd:
fa:59:a4:7e:f5:d9:4b:ac:14:07:6d:19:01:a1:fb:
d6:ee:0d:40:cc:07:57:cb:14:2f:8d:98:0f:9e:0b:
84:75:bb:b4:bd:bd:66:f3:e8:23:c2:03:c1:55:33:
cd:1b:61:dd:50:70:82:96:cb:4b:0b:3b:fe:9d:8a:
ef:45:73:90:44:65:af:10:e4:45:6b:49:82:4d:ba:
73:34:52:17:1b:69:c2:98:73:f2:e7:46:9b:c7:15:
2f:6e:7f:37:47:be:35:d5:5f:2f:7e:c0:56:5b:13:
65:3e:0e:75:58:59:09:b5:44:39:79:bc:1c:77:84:
65:2b:2a:1b:d7:82:71:29:4e:79:ce:ed:e3:39:8f:
53:d9:0e:cb:db:10:d1:68:c9:26:3a:c3:5f:27:72:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:CE:50:0F:29:30:87:33:59:00:9D:18:69:7E:13:FA:2C:87:10
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4NjOUA8pMIczWQCdGGl-E_oshxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a9:1f:f3:96:3c:69:bc:98:e3:cd:ef:48:07:42:47:97:84:
17:69:cf:a6:22:f1:03:f5:47:2b:66:32:d6:34:bc:51:bb:26:
58:54:73:d5:70:98:50:4f:a9:f8:0c:9e:75:57:d1:9d:0b:9d:
6e:f7:d4:32:94:79:0f:63:03:3a:04:9a:9f:74:40:07:d0:a1:
53:5a:e1:bd:5c:11:93:73:bd:ed:fe:bb:dc:de:17:da:91:f7:
e5:d7:16:32:4a:b4:94:22:74:98:0a:6d:5a:c1:22:c4:7d:c0:
c3:8a:f6:2c:08:81:07:c1:40:85:11:e9:da:a0:57:a4:2a:79:
65:ed:5c:73:e2:d9:82:92:02:f0:65:79:bb:69:63:c8:d6:1e:
56:ca:73:98:83:79:d4:9e:16:35:40:ec:fd:ca:f3:97:e0:d0:
96:a0:4a:ee:4c:e5:fe:c2:77:90:32:77:28:6f:9b:ec:62:5a:
ad:41:c1:95:68:b3:6c:72:f5:20:75:be:9b:bb:02:d3:e2:29:
af:07:0c:45:79:f0:27:e1:d0:4b:f8:44:40:fa:24:75:ea:83:
bd:24:a1:e7:26:9a:f6:51:71:a3:a6:f8:69:36:07:f6:43:22:
d0:69:58:a2:d9:61:cb:c0:19:d7:35:df:2c:6a:ce:9c:de:86:
7b:a1:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:33 2026 by rpki-client