Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fxuirsOQCpyOsIrP4dkzzSTUbdQ.roa
File: fxuirsOQCpyOsIrP4dkzzSTUbdQ.roa (raw, json)
Hash identifier: LVYsV2CNaIkNvAFQoH1d/noSpdpt7+VyFujzjmLy4ho=
Subject key identifier: 7F:1B:A2:AE:C3:90:0A:9C:8E:B0:8A:CF:E1:D9:33:CD:24:D4:6D:D4
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D26CE7AC57345BA1321776FAAA5606C7B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fxuirsOQCpyOsIrP4dkzzSTUbdQ.roa
Signing time: Wed 25 Mar 2026 21:02:39 +0000
ROA not before: Wed 25 Mar 2026 21:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.192.0/23 maxlen: 24
87.229.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:ce:7a:c5:73:45:ba:13:21:77:6f:aa:a5:60:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 25 21:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f1ba2aec3900a9c8eb08acfe1d933cd24d46dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:ce:ed:35:37:a3:8e:16:d5:98:4a:44:02:
8c:ff:d7:9d:0a:8b:d2:5c:34:cd:c5:2d:42:35:da:
cc:d8:b2:41:c7:17:33:04:48:81:12:60:69:f9:3f:
9a:54:37:9a:de:3f:ea:c5:15:ef:ac:b0:31:63:ff:
ae:69:c5:ab:dc:03:b4:52:a3:66:7e:76:54:de:ba:
83:fc:9b:1e:60:8e:07:35:66:92:d6:9a:c0:a6:31:
a8:a6:48:74:62:60:86:68:6a:16:86:e4:b4:4d:b9:
cf:6c:30:4d:71:7d:3b:88:97:58:db:b4:06:90:c3:
c0:31:63:89:bb:da:b2:10:a1:2d:89:43:e4:36:26:
d3:aa:fe:ae:e4:b8:31:22:d7:02:25:27:a0:ea:88:
69:5a:2b:e5:45:6c:cc:cb:d2:c5:40:90:d3:06:65:
a6:46:7c:9e:e3:ec:3e:3a:96:4c:fb:42:3d:e1:5c:
28:ef:d1:ce:a7:0d:5a:5e:9e:6f:a3:df:fc:25:d2:
d6:13:a1:f5:7c:70:e2:4c:30:63:ee:a7:1e:1f:08:
98:c8:0c:7f:99:2d:a1:56:4e:58:10:fb:d2:ab:ff:
fd:0f:af:c5:03:95:fc:8f:27:0b:28:a5:d8:60:19:
f0:c0:44:6e:8a:15:02:bc:e6:db:84:3c:fd:c9:3e:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:A2:AE:C3:90:0A:9C:8E:B0:8A:CF:E1:D9:33:CD:24:D4:6D:D4
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fxuirsOQCpyOsIrP4dkzzSTUbdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/23
87.229.70.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bb:0b:97:f6:9d:04:99:01:ee:9d:ec:0f:6e:dc:ec:dd:01:
eb:4f:4f:ca:29:a7:bc:8d:0c:87:90:20:7b:5f:d3:bd:fc:f1:
0a:2c:d2:76:cd:3e:50:f8:58:02:ea:8a:85:27:29:82:2d:6d:
eb:f5:e9:b5:aa:ec:6d:e7:90:58:95:ff:e9:b4:67:76:12:fb:
23:09:39:10:58:8d:aa:1c:d8:61:28:ae:74:4b:cb:9c:93:6c:
fd:aa:a5:2f:2b:32:d9:22:4d:70:e4:31:bc:0f:f7:34:5d:fd:
22:8c:8c:f7:8a:41:c7:4e:af:0b:31:e6:0a:ae:cb:14:16:00:
e7:55:15:fe:25:0d:eb:82:26:ee:0e:45:1b:8b:ee:8d:5e:66:
e3:0a:6b:29:ef:35:73:44:0f:9b:df:ce:c2:c3:4d:59:8a:18:
bd:b6:5f:cf:39:d1:5e:47:f7:07:1e:2a:0d:0e:7d:f3:4d:d1:
d8:d4:a4:63:56:82:b8:95:e6:65:f4:39:d2:fb:ec:2c:7a:97:
fe:9e:e6:fc:64:fa:53:47:7e:a3:7d:9d:8c:2b:ce:d0:61:15:
42:42:0d:69:97:9a:f9:3a:b8:4a:39:42:88:8d:2a:11:eb:e7:
22:81:30:d8:de:80:4e:3c:b8:d5:44:b1:8e:ff:20:1c:32:a1:
f4:30:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:09 2026 by rpki-client