Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VdQ35Sx1nerE5eN_mwRDlH-0BuU.roa
File: VdQ35Sx1nerE5eN_mwRDlH-0BuU.roa (raw, json)
Hash identifier: d3wbVqdQFwz8Zlkl2IdWzud717BPWPIimxXU4XakwWM=
Subject key identifier: 55:D4:37:E5:2C:75:9D:EA:C4:E5:E3:7F:9B:04:43:94:7F:B4:06:E5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019EA629FDE4A5C6A6E9E10519755A6BE49C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VdQ35Sx1nerE5eN_mwRDlH-0BuU.roa
Signing time: Mon 08 Jun 2026 07:37:10 +0000
ROA not before: Mon 08 Jun 2026 07:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 79.172.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:29:fd:e4:a5:c6:a6:e9:e1:05:19:75:5a:6b:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 8 07:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d437e52c759deac4e5e37f9b0443947fb406e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:fb:c7:1d:e8:ff:46:04:5f:62:ea:16:12:
4c:cf:a5:c2:08:fb:90:ef:02:8c:21:53:d8:c5:51:
69:0a:ed:d9:e1:11:10:38:88:05:f7:bb:e2:19:23:
63:67:a3:5c:4d:a6:40:00:2c:c4:ff:e4:98:5b:40:
0a:c3:bf:26:73:0a:85:69:e8:47:90:10:75:0a:19:
4a:b8:dd:61:68:66:eb:6d:ec:e5:fe:28:2d:02:97:
bb:9f:8e:d4:20:38:4a:1e:5c:9b:cf:16:1b:0a:d0:
4f:98:4c:db:d9:35:5f:3d:78:f8:81:d0:48:a5:9e:
0c:5a:19:3d:2e:97:f6:95:bc:9f:9c:0d:3c:22:bb:
a1:91:bb:5b:59:96:d9:19:37:74:64:31:a8:e9:59:
7a:31:e1:ba:67:06:0d:40:89:0b:93:c9:05:2f:57:
c4:4e:f3:c2:22:87:28:5e:3a:73:c4:df:f9:0e:38:
e8:40:ab:0c:6b:39:97:47:96:8b:28:2c:0f:30:84:
1f:49:fa:58:22:78:13:e1:9c:27:ba:55:93:4b:81:
43:b8:a7:c6:c9:76:ae:b3:1f:b8:31:22:74:96:33:
26:d0:8e:7a:de:87:23:89:90:92:c1:5c:09:0f:a4:
c2:cf:74:28:5a:a4:6a:d0:68:fd:91:96:68:2d:0a:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:37:E5:2C:75:9D:EA:C4:E5:E3:7F:9B:04:43:94:7F:B4:06:E5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VdQ35Sx1nerE5eN_mwRDlH-0BuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:f8:e9:2a:9e:07:5e:49:bc:10:b4:cd:46:fe:1e:99:c6:
fd:c0:1c:8f:b7:94:58:c7:e5:37:9e:ce:11:b9:36:e7:9d:bf:
64:b2:50:d0:3d:df:f4:a7:d4:84:75:8a:af:27:24:3f:ba:2e:
fd:c0:1e:c9:24:c9:7a:e3:7f:67:7c:58:b3:82:6e:c8:20:a7:
3e:0a:38:b0:e3:4a:36:2c:08:a8:a0:14:58:9b:25:1e:8c:44:
1e:c6:b9:4a:7c:8c:c0:e9:54:26:b2:78:64:e7:9f:2a:17:c9:
61:98:99:97:00:b3:d8:5d:b2:0b:c9:cf:60:de:3d:ea:23:e9:
43:e5:2e:91:85:3f:9b:77:e8:3f:a4:84:0c:14:91:fc:c9:7b:
48:a9:7e:a7:9c:4a:e4:ac:43:d0:af:d7:94:2f:cf:e9:5d:cb:
a5:87:14:6f:2d:66:72:25:8d:ab:1f:16:9e:e0:b2:14:c0:8e:
4f:bf:13:e4:08:0a:4b:28:9a:55:4b:1d:5e:9f:fc:01:a5:d5:
70:13:08:3f:f6:22:8c:92:eb:32:db:d6:88:f4:d1:56:16:51:
51:79:3f:38:39:28:e1:23:8e:ba:01:28:dc:37:e2:62:18:cf:
99:75:7e:48:aa:f1:f0:e9:d0:cd:fd:60:6c:67:8b:2a:41:28:
94:35:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:14 2026 by rpki-client