Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7nhA03ENKpaMJClzt3SE5wPrW8.roa
File: S7nhA03ENKpaMJClzt3SE5wPrW8.roa (raw, json)
Hash identifier: VfUFKacHrOKbL69Tb9VpYN0uqN1V53p4CrkskpZxpSc=
Subject key identifier: 4B:B9:E1:03:4D:C4:34:AA:5A:30:90:A5:CE:DD:D2:13:9C:0F:AD:6F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D0A280C3C432CB7C136A68EAE7FAE704A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7nhA03ENKpaMJClzt3SE5wPrW8.roa
Signing time: Fri 20 Mar 2026 07:31:29 +0000
ROA not before: Fri 20 Mar 2026 07:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201949
IP address blocks: 87.229.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:28:0c:3c:43:2c:b7:c1:36:a6:8e:ae:7f:ae:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 20 07:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bb9e1034dc434aa5a3090a5ceddd2139c0fad6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:f3:f9:af:0c:cf:61:1c:12:e4:c3:1c:92:
40:68:f6:51:a9:3d:f2:96:e1:ad:04:0c:3d:65:f0:
86:e5:c6:5c:89:8d:81:bf:48:01:78:e1:17:e0:1f:
dd:09:2c:5e:75:a8:24:3b:0d:d2:46:71:e7:66:fa:
cc:c6:d1:bb:54:0c:6a:eb:05:b1:8e:2e:14:8d:79:
70:39:4e:c1:42:a4:1f:20:f8:f5:5b:2d:b7:15:2c:
1d:5c:68:69:dd:29:de:8e:e0:76:b2:e3:4f:7b:eb:
15:6f:55:00:28:87:06:82:9c:1b:b4:fa:80:6c:fc:
b8:44:67:36:ad:9d:c4:f9:63:b5:f4:87:a4:b7:be:
bd:c3:86:63:6a:d0:c8:60:6d:26:df:e4:6e:8d:0d:
09:7d:f0:d4:21:c3:c1:67:ff:95:a3:a6:72:07:41:
1f:0f:d3:df:77:a0:6f:22:0f:44:84:96:27:2d:c4:
7c:27:9e:70:70:57:fa:d0:ac:1a:d1:57:c8:dc:bc:
a8:c3:c7:a1:c1:f9:22:fb:b6:c0:0e:85:70:b5:d3:
59:2c:b7:72:cc:70:f3:3c:3d:7d:88:d3:f6:88:74:
49:05:d4:9b:1e:6c:b8:d8:66:cc:28:64:e0:8c:02:
85:0c:92:cb:2c:78:5a:f2:1b:e8:15:6d:51:ad:64:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:E1:03:4D:C4:34:AA:5A:30:90:A5:CE:DD:D2:13:9C:0F:AD:6F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/S7nhA03ENKpaMJClzt3SE5wPrW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:49:7d:bc:41:be:aa:b5:c3:7d:c7:c2:5b:8d:6d:dc:de:37:
06:2d:f1:5a:23:7f:98:2e:18:b2:5f:2b:ea:75:88:95:0b:68:
f4:aa:72:17:a0:93:7b:33:78:68:81:c4:16:80:94:37:ac:98:
25:e5:24:ee:10:52:15:66:cf:bb:8e:b2:35:16:26:3e:dd:22:
f9:8d:f3:56:5f:c4:e4:32:91:5a:95:7a:eb:ad:a8:52:a1:2c:
2e:84:e5:8a:91:ef:28:49:d6:d4:06:ef:4a:ed:01:77:7d:a0:
0b:c8:87:61:d8:ba:bc:fc:ca:bc:fb:3d:1d:ac:bb:fc:f5:98:
b3:09:63:af:89:b9:27:c6:8c:62:f2:6a:96:64:ac:93:e0:8d:
8e:ee:1f:da:e1:1f:31:f7:d6:7e:0c:2a:cc:c4:51:b4:04:06:
c3:0e:8d:3d:46:ee:9b:c7:47:d8:6f:cf:fd:f6:a0:ee:e3:63:
ae:05:7b:71:e1:12:11:cb:d9:26:a7:f5:71:fe:e5:11:17:7c:
18:10:a5:84:c5:fe:41:e7:12:af:60:d0:7b:60:c2:d5:57:4d:
d5:ac:0d:da:1b:a8:48:29:85:f4:61:7c:3e:8c:89:08:03:d1:
84:c5:b6:45:b1:92:d2:e5:4c:37:17:f0:41:ae:46:21:8c:e3:
8e:74:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:58 2026 by rpki-client