Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P71wbV4eLJ7hkcVflZK8-jPJCwU.roa
File: P71wbV4eLJ7hkcVflZK8-jPJCwU.roa (raw, json)
Hash identifier: r8gbkLS7m3jXKH3u0RkKOfR9le43QyJ1fTWon/xWzNs=
Subject key identifier: 3F:BD:70:6D:5E:1E:2C:9E:E1:91:C5:5F:95:92:BC:FA:33:C9:0B:05
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D91F364F92D6ABCBE5A4CEEFD3FAEA01F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P71wbV4eLJ7hkcVflZK8-jPJCwU.roa
Signing time: Wed 15 Apr 2026 16:22:20 +0000
ROA not before: Wed 15 Apr 2026 16:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 79.172.251.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:f3:64:f9:2d:6a:bc:be:5a:4c:ee:fd:3f:ae:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 15 16:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fbd706d5e1e2c9ee191c55f9592bcfa33c90b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:18:ed:d6:b6:c6:ba:c9:50:6e:88:c8:8c:
e6:02:38:ad:6d:5f:09:c8:a6:05:2c:4a:aa:4e:88:
bf:73:b1:fb:08:53:1a:38:4b:c4:0b:61:38:29:b5:
ce:39:37:ec:e0:73:06:9b:51:ec:f3:c1:c3:bd:88:
83:53:39:ef:29:4d:6b:63:81:6c:94:fa:2a:a3:ae:
8d:a0:ba:ba:5e:24:4c:ce:32:75:cb:c4:c4:97:b0:
88:db:d4:fb:af:c4:1b:56:15:71:45:3f:db:4c:fd:
e7:7e:6a:e0:d8:66:28:34:8d:f6:c9:f1:25:ac:d6:
0e:71:48:31:48:9d:b1:82:1c:de:ed:59:18:19:b6:
54:dd:e3:f8:c5:21:56:07:ce:2d:35:f7:ab:ff:a0:
1b:ae:53:32:6e:87:f9:1b:d0:c8:fb:d2:07:8d:73:
e7:80:3f:22:b9:96:f9:a7:67:b2:ca:16:30:d9:87:
83:cc:bb:51:fd:4f:04:67:e0:9d:76:8a:d1:46:a3:
82:22:80:a3:9d:81:3b:2e:32:90:e5:75:74:31:98:
15:f5:bb:a2:f6:45:ea:88:d8:4f:f9:ce:37:e5:f2:
1b:a0:f5:5f:81:80:a3:52:1a:04:2d:ae:bc:46:31:
8b:b4:55:fe:7c:c7:9d:61:e0:82:0e:5c:b5:a2:9a:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:70:6D:5E:1E:2C:9E:E1:91:C5:5F:95:92:BC:FA:33:C9:0B:05
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P71wbV4eLJ7hkcVflZK8-jPJCwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.251.0/24
87.229.50.0/24
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ea:10:f0:97:43:49:b8:f4:1f:fa:13:1f:28:cc:cf:86:ea:
a7:29:07:2a:37:5d:16:50:c5:21:29:94:4a:5b:58:36:7e:44:
3a:d7:0a:61:64:11:55:ec:bd:2a:cb:aa:3a:68:38:c5:c0:b6:
0b:f8:1a:61:cf:30:e9:49:44:f6:d6:13:ca:1a:d4:bc:96:75:
da:7c:61:4a:d6:5a:e8:72:b1:4c:c3:cf:ff:ba:44:86:e4:1e:
f7:60:c9:7f:e1:f1:fa:18:b4:36:35:6b:f7:54:75:48:1a:d4:
b4:bb:f5:1d:1a:3f:59:7a:14:98:1c:c7:26:1f:3e:43:13:61:
8f:84:9e:87:c7:56:5c:be:e3:3d:c7:5a:34:98:1f:7f:4d:27:
86:4c:87:f6:f8:28:86:74:c2:b5:f2:06:f6:10:bf:63:84:6c:
39:40:f3:22:4c:61:2b:6c:7d:ce:7f:11:7b:3e:1f:c5:1a:d3:
05:98:c8:4b:9c:31:dd:64:35:6e:2d:e0:6e:b5:f3:57:c9:3b:
cf:ad:21:13:98:4f:5a:d2:de:4b:f1:aa:50:eb:ab:54:88:c4:
9d:87:2d:b3:30:be:93:8b:4a:9f:64:d1:03:ef:52:8b:bf:56:
3d:a6:1a:99:1f:8d:ef:2b:4e:e1:1f:44:fd:77:45:59:f5:0e:
88:70:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:08 2026 by rpki-client