Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JysDwnFXRi_NI9qW9xUxLGTz2KM.roa
File: JysDwnFXRi_NI9qW9xUxLGTz2KM.roa (raw, json)
Hash identifier: mESPj/W3vGohroPZ7bhVXQu0D01B2nDFQ48XlXioAds=
Subject key identifier: 27:2B:03:C2:71:57:46:2F:CD:23:DA:96:F7:15:31:2C:64:F3:D8:A3
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0CE617DEB489A1B820C38EABE1C64D186
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JysDwnFXRi_NI9qW9xUxLGTz2KM.roa
Signing time: Wed 23 Sep 2026 13:08:10 +0000
ROA not before: Wed 23 Sep 2026 13:08:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.196.0/24 maxlen: 24
79.172.199.0/24 maxlen: 24
79.172.203.0/24 maxlen: 24
79.172.209.0/24 maxlen: 24
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
79.172.225.0/24 maxlen: 24
79.172.236.0/24 maxlen: 24
79.172.238.0/24 maxlen: 24
79.172.240.0/24 maxlen: 24
79.172.241.0/24 maxlen: 24
79.172.243.0/24 maxlen: 24
79.172.248.0/24 maxlen: 24
79.172.253.0/24 maxlen: 24
79.172.255.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.214.0/24 maxlen: 24
178.238.216.0/21 maxlen: 21
213.181.196.0/24 maxlen: 24
213.181.197.0/24 maxlen: 24
213.181.198.0/24 maxlen: 24
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.59.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
2a02:730:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:61:7d:eb:48:9a:1b:82:0c:38:ea:be:1c:64:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 23 13:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=272b03c27157462fcd23da96f715312c64f3d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:07:d8:74:c2:75:84:43:e8:f5:b3:70:59:
01:2f:a4:63:7a:12:34:0f:56:0f:35:02:52:63:51:
87:34:74:3b:67:a4:54:ed:b4:da:ef:2b:5f:c8:e9:
70:5f:07:25:51:21:51:98:d7:dc:95:ab:74:c6:5d:
9f:b7:c2:5f:e6:30:52:3c:e6:7d:dc:72:8e:c6:bc:
c3:d7:80:52:5c:5c:0c:aa:cf:5d:bc:cf:9f:98:8d:
12:93:37:01:db:94:32:d4:86:c1:f2:e9:4a:76:88:
a5:a0:42:0f:3a:8e:0b:89:25:e0:81:7f:8f:54:0f:
37:c7:c0:ab:1f:33:21:20:73:d2:28:cf:ce:f8:ef:
dd:29:21:a8:6e:39:d1:9c:15:02:2f:4c:25:f3:07:
27:09:a0:9b:6c:1d:4b:2d:7d:9b:54:2b:07:2a:31:
6b:40:ef:9e:c4:f8:ce:94:57:49:b2:4e:3b:c2:ca:
1d:03:d0:d0:64:da:3f:45:62:38:16:fc:60:fc:4c:
11:48:50:ea:c7:e0:7c:29:40:e0:b9:03:fd:ea:f0:
11:2f:f0:7b:23:48:84:a7:90:b8:ef:1a:78:a7:7c:
48:1d:19:71:ad:59:82:bd:11:2c:22:ba:23:f8:5c:
1e:86:ff:5c:a6:53:8e:7b:13:56:0d:96:2f:49:b7:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:03:C2:71:57:46:2F:CD:23:DA:96:F7:15:31:2C:64:F3:D8:A3
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JysDwnFXRi_NI9qW9xUxLGTz2KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.196.0/24
79.172.199.0/24
79.172.203.0/24
79.172.209.0/24
79.172.211.0/24
79.172.213.0/24
79.172.225.0/24
79.172.236.0/24
79.172.238.0/24
79.172.240.0/23
79.172.243.0/24
79.172.248.0/24
79.172.253.0/24
79.172.255.0/24
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.196.0-213.181.198.255
213.181.200.0/24
213.181.204.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.52.255
217.113.59.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f8:09:06:66:bc:12:a0:5a:3f:5e:50:51:4d:8c:05:b1:a4:
29:cc:be:62:8e:f2:00:4d:fb:06:ca:17:39:2d:16:be:6e:31:
f4:c4:8d:43:5a:16:1b:e3:04:1b:21:8f:d4:32:db:72:1d:99:
0f:61:b0:0d:a2:b8:79:cd:cc:de:89:68:7f:d2:8a:78:fe:c2:
21:e5:dd:bb:50:8b:73:62:a0:4d:3d:5e:56:a0:e6:57:9e:62:
b8:96:bf:2d:53:61:ad:97:85:be:43:ca:a8:3a:a9:b7:cd:6a:
4a:dd:c4:a1:6b:a7:c7:28:fb:80:2a:62:01:37:95:43:e3:c3:
6f:1b:8f:bb:c2:a8:9a:0c:de:3e:f5:5b:1e:c5:45:63:8c:f4:
8f:4f:31:2c:a4:90:2f:71:f2:9e:9c:3e:d3:37:e6:23:b9:f2:
5b:2f:9e:a9:40:e4:9a:df:16:18:85:95:fc:87:7d:03:5a:c4:
70:f8:be:82:fa:c5:e6:b7:f2:63:73:40:0e:45:84:23:09:c1:
2f:28:92:5e:b1:82:49:0f:6e:d5:ab:b3:ee:c6:9e:72:87:3f:
a2:3f:fb:ff:92:6b:1b:89:18:75:23:01:ff:13:22:ac:b6:7c:
3d:63:96:31:68:72:5f:68:22:55:8f:a2:70:89:18:cd:41:a2:
7c:c8:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:47:13 2026 by rpki-client