Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fvZYPGJZf3sqPkHlFZEEhBXGaro.roa
File: fvZYPGJZf3sqPkHlFZEEhBXGaro.roa (raw, json)
Hash identifier: bDdBR1YMcTqcvhDvtTg/foh36OVXFl+G5iyY/wQmcuk=
Subject key identifier: 7E:F6:58:3C:62:59:7F:7B:2A:3E:41:E5:15:91:04:84:15:C6:6A:BA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019DF33CEC9D2357282628C6ABA8EBC380C9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fvZYPGJZf3sqPkHlFZEEhBXGaro.roa
Signing time: Mon 04 May 2026 13:45:49 +0000
ROA not before: Mon 04 May 2026 13:45:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 87.229.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:3c:ec:9d:23:57:28:26:28:c6:ab:a8:eb:c3:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 4 13:45:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ef6583c62597f7b2a3e41e51591048415c66aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:05:7f:9e:9e:96:93:1e:f3:d8:23:6a:2c:
a3:a2:11:64:de:e5:45:e9:d7:92:f7:d7:44:2d:ca:
30:99:13:58:de:90:84:53:e9:c6:ae:43:48:b5:63:
fd:c1:ca:e3:a9:8e:cc:d8:c2:2b:6e:84:ba:07:ad:
95:3d:35:f2:c3:e4:aa:8a:8c:d9:d3:49:12:e7:a2:
e0:e5:c1:76:bc:3d:ed:02:7a:9f:7a:30:54:ad:32:
bf:f3:e7:f8:a8:8b:3e:b3:83:db:51:6c:b0:d9:18:
cc:01:b2:fa:2f:a2:56:a3:5f:35:c0:99:7f:0c:2c:
31:53:01:38:63:a5:6d:2c:47:5e:26:43:77:01:24:
66:4a:d8:71:b0:48:c0:3c:82:8a:af:cc:35:32:02:
df:9d:49:d0:30:e9:86:93:36:b7:aa:42:c8:ce:64:
af:d6:ef:3f:8f:a4:c9:52:e6:9a:5f:ce:61:97:8c:
18:eb:df:6e:0b:56:6e:93:61:2e:db:0e:6f:d8:cb:
c9:ee:db:3a:9a:67:26:d5:ca:d1:69:7b:e9:6d:87:
04:06:31:36:69:13:05:45:8d:b6:94:91:ae:6a:39:
b8:f5:65:03:28:bc:d3:38:b7:fb:2b:d4:eb:ab:94:
f7:25:0d:7e:cc:28:b9:41:d0:e1:f0:be:74:2d:db:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:58:3C:62:59:7F:7B:2A:3E:41:E5:15:91:04:84:15:C6:6A:BA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fvZYPGJZf3sqPkHlFZEEhBXGaro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d1:18:6e:77:c8:ff:55:84:da:b4:45:4e:33:2f:52:f4:b3:
db:cc:44:e5:c8:8e:9b:7e:de:35:6d:ba:f6:39:e9:8f:3c:d1:
e8:31:87:50:f5:98:2f:ad:2d:1a:3a:18:06:8c:7e:61:67:19:
51:5e:90:1e:a7:46:0a:ca:4e:d5:3e:ce:cf:4a:b6:c9:3f:45:
07:32:7d:fa:0b:75:b7:4f:a5:f7:ff:9b:23:92:3e:61:2d:00:
1a:26:2f:d1:da:1c:79:ee:98:05:c7:1c:51:af:f8:25:85:a4:
9a:69:14:53:25:32:47:15:06:c2:f1:d2:79:2c:e7:98:16:77:
74:57:71:ee:29:b2:09:3f:c6:c9:8d:0e:e1:bc:f1:74:7c:1d:
8e:f7:b8:f5:b4:31:19:03:55:be:d9:4a:86:4b:3e:54:70:a2:
c0:10:5d:2f:81:4d:a2:ad:5f:3e:60:af:f6:87:fb:18:e3:2c:
49:39:c0:41:96:a8:56:3c:0f:22:31:2b:8c:93:0e:9b:c4:68:
23:87:9f:e5:b7:64:05:79:a1:79:1d:42:44:32:3b:17:e2:20:
6c:a6:ac:0f:77:26:f8:43:a7:ed:50:e4:75:2b:7a:23:3b:c6:
10:28:c1:04:80:4f:cc:67:e9:95:b5:24:9b:f0:af:69:d7:27:
4b:d1:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:10 2026 by rpki-client