Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dy9LrwsTsBwDT4jNzlGL32ShFC0.roa
File: dy9LrwsTsBwDT4jNzlGL32ShFC0.roa (raw, json)
Hash identifier: QA13GggkElNIbOWxjYaZyoI2dLjgL7AfWtYKs/sPlCA=
Subject key identifier: 77:2F:4B:AF:0B:13:B0:1C:03:4F:88:CD:CE:51:8B:DF:64:A1:14:2D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F8EF91CE21BE1497298BD3066669A9EBF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dy9LrwsTsBwDT4jNzlGL32ShFC0.roa
Signing time: Thu 23 Jul 2026 12:35:18 +0000
ROA not before: Thu 23 Jul 2026 12:35:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 79.172.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:f9:1c:e2:1b:e1:49:72:98:bd:30:66:66:9a:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 23 12:35:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=772f4baf0b13b01c034f88cdce518bdf64a1142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:61:7a:80:a5:b7:b7:1a:c3:dc:17:f5:8b:
a9:e2:c6:6e:b8:27:0c:40:b8:50:f1:8a:28:06:b9:
f4:d7:d0:46:fc:50:e9:6c:4a:34:e7:aa:8e:fd:7b:
68:7c:74:9f:e8:6c:e0:1b:a0:ca:55:84:5a:30:3a:
1d:65:ea:24:f0:d3:18:34:21:78:41:6a:0e:ec:1b:
f6:12:08:7b:89:53:eb:5a:c6:38:4b:99:ae:2e:8a:
27:ac:6f:71:08:8c:fe:31:ba:8d:65:45:f7:e7:06:
64:df:bc:8f:3a:c8:f9:07:34:7a:67:2a:02:49:3a:
4d:dc:d6:27:10:b7:ba:98:52:c7:7f:1e:98:45:33:
f4:c5:cd:e6:fd:d6:0e:a8:31:ab:08:72:b4:0b:09:
09:8a:e0:59:cf:8f:f3:51:18:c6:1e:d9:0a:c5:35:
a0:ab:e5:47:27:a1:33:16:3c:1b:1e:e0:a1:2a:17:
4e:9a:04:bd:76:0a:d6:d1:b8:b2:b7:dd:e0:7e:ba:
0c:5a:9f:46:cd:1e:35:7d:86:ca:45:00:d7:25:3a:
4d:e1:16:14:04:4e:0c:e8:c9:73:e6:16:28:3c:84:
28:db:20:59:bf:5b:3b:37:20:46:57:e1:0b:fa:23:
7b:0e:8b:d6:fc:ac:7c:9f:e5:15:95:b8:5d:b4:55:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:4B:AF:0B:13:B0:1C:03:4F:88:CD:CE:51:8B:DF:64:A1:14:2D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dy9LrwsTsBwDT4jNzlGL32ShFC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b9:19:84:61:0b:0b:ef:44:93:92:d8:ff:39:e5:19:fa:f3:
2d:dd:63:9b:fe:bb:2c:4d:da:c1:88:5b:2c:48:56:e3:e7:05:
a2:d3:8c:cb:ef:22:ee:1b:87:50:be:f5:b7:24:f6:ed:4a:f4:
34:03:bf:90:22:4a:bc:aa:be:96:c9:f2:bb:58:b1:fd:f6:a7:
5c:46:f6:be:45:16:c3:17:d5:7f:15:b5:27:d8:24:8e:38:ee:
7d:87:2d:20:7d:c8:07:b4:d4:f0:7c:39:7e:8d:04:92:f8:8e:
4d:76:46:e2:cf:a0:ec:e1:94:82:17:92:01:23:67:22:e6:73:
b0:fa:4f:11:4d:e7:d5:64:4f:80:ab:d4:5d:20:fc:77:53:17:
ab:7e:b6:dd:82:c9:16:ab:96:ef:fc:8e:85:15:b1:aa:2f:51:
47:fe:c2:c4:73:02:cd:1a:62:fb:65:2a:d5:9a:e4:d8:85:c7:
11:5f:07:33:11:b9:47:de:7e:46:5d:0c:d6:55:e0:ab:64:04:
4c:8a:b2:af:67:a2:58:ea:86:90:91:39:6d:f8:39:79:d1:5d:
c7:8e:af:65:72:89:70:55:7d:53:b0:94:e3:2b:9d:de:48:c6:
94:18:6c:57:df:5d:44:bc:12:9e:49:5e:0e:d7:f2:a3:d8:e6:
17:e1:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:58 2026 by rpki-client