Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zat31pdgu0IpSQB78Zrk_Ed2WkQ.roa
File: Zat31pdgu0IpSQB78Zrk_Ed2WkQ.roa (raw, json)
Hash identifier: GwbfGHipCaUxBYpxU3MGs+BiaHfHUrS9ppIBnQImSRk=
Subject key identifier: 65:AB:77:D6:97:60:BB:42:29:49:00:7B:F1:9A:E4:FC:47:76:5A:44
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D20BDBD8342D903382DB1F5344BE2A8EF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zat31pdgu0IpSQB78Zrk_Ed2WkQ.roa
Signing time: Tue 24 Mar 2026 16:46:38 +0000
ROA not before: Tue 24 Mar 2026 16:46:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 79.172.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:bd:bd:83:42:d9:03:38:2d:b1:f5:34:4b:e2:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 24 16:46:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65ab77d69760bb422949007bf19ae4fc47765a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:9a:e7:a6:5d:2c:c0:43:c9:25:13:0d:fe:
51:e2:90:3b:c8:92:52:c9:d0:e6:c3:8f:e5:39:37:
41:f9:2c:06:24:43:d8:52:30:8e:d0:06:2e:e4:a2:
af:75:31:34:5a:6a:3a:b3:1f:ed:d5:0a:6e:ab:95:
5e:93:65:81:da:0a:cc:1a:45:95:0d:51:21:35:78:
e6:ff:3c:30:23:32:40:ca:51:e5:3b:10:53:24:60:
84:ed:87:06:6d:77:40:a2:85:98:c3:6c:7f:1e:07:
f9:50:1e:c2:fa:f0:27:3b:b7:9e:60:ff:f3:0d:d3:
8b:7c:03:e2:82:d5:94:68:1b:69:c8:3f:7d:d6:3c:
19:13:3d:58:da:7c:3f:d9:60:c2:cf:ab:4a:29:ed:
eb:f6:aa:55:8f:f0:ab:f1:22:9d:d5:02:76:ee:45:
b9:a7:14:b4:ff:da:fb:97:68:a1:6c:67:42:7c:a9:
8c:29:44:60:86:f5:7f:27:4a:31:47:67:48:0d:a7:
17:62:57:30:5d:0e:a2:4e:48:f0:07:06:bd:55:d0:
21:df:7b:04:49:5f:9d:30:47:26:ff:b6:43:38:ad:
51:8a:dd:f8:4f:7d:11:b1:3f:cd:49:f1:5b:9e:9c:
d2:55:32:23:bb:b5:43:2c:07:58:3c:9a:ae:2e:14:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:77:D6:97:60:BB:42:29:49:00:7B:F1:9A:E4:FC:47:76:5A:44
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zat31pdgu0IpSQB78Zrk_Ed2WkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:17:34:fe:4d:7f:42:13:e5:74:02:36:ca:85:8c:6e:f4:
8a:be:bf:e0:b9:38:6e:3a:88:5b:ed:81:f7:6d:dc:cf:08:7b:
a5:a8:19:a9:b5:05:c0:68:26:46:bd:fd:1b:71:44:97:54:b2:
0e:02:b8:2d:c4:d1:72:8a:de:29:8a:c2:84:42:73:29:20:33:
68:f6:b9:73:0c:d4:43:4f:be:5a:76:1a:1b:6e:a3:f6:68:a3:
24:e6:1a:61:26:1c:f1:13:25:f2:87:55:53:cb:3c:ae:ce:ec:
a5:7b:ed:e5:c0:03:91:13:ea:bd:1b:10:4e:6c:ef:0d:d8:c0:
42:22:0a:6c:96:e7:4b:b6:0f:2e:d3:48:73:0c:7a:a8:30:44:
a6:cf:b7:88:d3:11:e9:8f:b6:5d:b0:0b:d3:94:a6:05:7c:62:
bf:5b:e1:4c:7d:dd:16:15:d5:4f:8d:83:7f:d3:21:64:d4:63:
e1:b1:31:3d:2e:ea:6f:3d:a1:de:26:8b:16:74:31:76:18:c2:
6e:b3:6b:94:c5:f7:8a:41:f3:2e:50:d9:13:81:cf:94:23:c4:
27:fb:cc:4b:fe:20:d2:2b:52:00:4b:59:38:97:82:59:99:51:
1a:35:17:92:fc:08:cb:33:e9:3e:7c:aa:8f:80:f6:aa:4e:c2:
ac:b8:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:11 2026 by rpki-client