Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9DiZpDkqrYoFLLdfZXtSQa1TB5g.roa
File: 9DiZpDkqrYoFLLdfZXtSQa1TB5g.roa (raw, json)
Hash identifier: W+eIKa+2S0W3afgsnEsZYkpl1EA41oLDbozeMT5F01Q=
Subject key identifier: F4:38:99:A4:39:2A:AD:8A:05:2C:B7:5F:65:7B:52:41:AD:53:07:98
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F8B4CCEBEDA603ED3D712A2B561771D00
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9DiZpDkqrYoFLLdfZXtSQa1TB5g.roa
Signing time: Wed 22 Jul 2026 19:28:14 +0000
ROA not before: Wed 22 Jul 2026 19:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 79.172.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:4c:ce:be:da:60:3e:d3:d7:12:a2:b5:61:77:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 22 19:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f43899a4392aad8a052cb75f657b5241ad530798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:8b:e1:0b:6f:54:66:6a:ed:c3:62:dd:2e:
dd:08:90:3b:1f:67:e7:7e:17:9e:ac:a2:00:d2:c7:
3c:44:6d:7b:46:e5:60:13:fd:87:e2:e7:47:f7:89:
0e:11:f7:db:62:15:4d:07:6a:0c:eb:60:54:83:3a:
2b:56:d7:4b:e7:07:5d:94:c5:f4:1d:66:7c:1a:da:
55:17:d5:b4:f4:30:2d:3e:cd:83:79:e3:6b:4e:13:
c6:be:0f:ae:94:db:2d:e8:e2:cc:5a:12:bc:2f:46:
3c:c5:e0:d6:7e:2a:7a:62:e3:56:b0:f9:58:46:d2:
09:57:02:d3:bc:17:6e:10:0d:05:d0:6b:7b:8e:ad:
74:7e:2d:a5:c4:50:f1:ed:6f:3b:a0:3f:fe:81:e6:
1b:91:c6:98:d7:0b:6f:94:7a:ed:35:07:f7:18:b8:
25:63:a9:77:a6:16:7a:13:ec:91:bb:79:c3:c9:3d:
10:f3:49:5f:d8:45:5f:1a:d3:d2:18:62:8d:a1:f1:
79:e0:ae:95:c2:86:e6:d6:02:9f:e8:6b:f3:8c:59:
41:91:f5:e1:ec:81:ab:b7:1c:57:b4:db:0a:19:7c:
77:b5:c3:72:48:3d:e1:22:9a:1d:7d:b8:47:e2:21:
19:a9:38:08:70:f5:27:a5:b2:e8:14:2f:9c:69:45:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:99:A4:39:2A:AD:8A:05:2C:B7:5F:65:7B:52:41:AD:53:07:98
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9DiZpDkqrYoFLLdfZXtSQa1TB5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
Signature Algorithm: sha256WithRSAEncryption
00:56:82:33:5a:3c:44:c4:ad:fe:2f:66:73:a1:34:45:12:63:
e6:16:5d:58:e7:8e:a8:c7:4e:a7:71:07:0d:f7:de:5c:2b:20:
50:53:d0:eb:a4:f4:75:cc:e1:b1:e1:23:79:44:bc:f9:35:65:
f7:52:4b:3b:4a:ad:73:4e:11:da:24:b7:9c:88:ad:79:ca:be:
39:8b:1b:b8:62:2e:87:d8:25:d5:b5:0e:a2:8c:c1:87:54:88:
5e:e8:8c:86:94:17:7f:27:46:fd:1f:e1:0a:49:ae:29:8c:95:
f1:3b:f9:92:8f:ef:4a:8c:82:d3:e1:07:63:31:33:09:0f:09:
e8:0a:c7:2b:29:3f:4c:f9:b2:cb:17:5c:f3:b4:45:45:cf:95:
fd:e6:f3:5c:08:93:0e:95:2e:6e:a5:66:a3:70:65:21:ae:27:
d3:77:38:f6:f5:c2:7f:4c:df:3e:54:24:75:e2:70:c4:8e:40:
f0:a0:92:9c:46:35:35:e4:da:81:a0:08:06:dd:4e:0a:b0:72:
03:b1:e4:4a:90:96:80:bd:4c:b7:91:a1:7c:96:e0:75:a2:be:
c4:a4:1c:fe:01:bb:de:1a:09:6b:3f:fd:f2:dd:2b:4f:cb:7e:
50:e3:b2:46:ff:e2:70:d4:a6:40:fb:56:02:9d:e2:07:4f:b8:
1b:eb:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:57 2026 by rpki-client