Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aGevVy40SK53X-H87hEdQ5uNfdk.roa
File: aGevVy40SK53X-H87hEdQ5uNfdk.roa (raw, json)
Hash identifier: ccaAqW2oi1/72Nlrr1rP4GdAQj3xSK8yF5lQ8kAsKUM=
Subject key identifier: 68:67:AF:57:2E:34:48:AE:77:5F:E1:FC:EE:11:1D:43:9B:8D:7D:D9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D9ACE3E77F4344626553E70C36BE08866
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aGevVy40SK53X-H87hEdQ5uNfdk.roa
Signing time: Fri 17 Apr 2026 09:38:20 +0000
ROA not before: Fri 17 Apr 2026 09:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.200.0/24 maxlen: 24
79.172.201.0/24 maxlen: 24
79.172.204.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.25.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.40.0/24 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
87.229.124.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ce:3e:77:f4:34:46:26:55:3e:70:c3:6b:e0:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 17 09:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6867af572e3448ae775fe1fcee111d439b8d7dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:a0:05:af:d9:04:06:a6:74:9d:c5:2a:d3:
99:f4:62:da:db:bd:db:e5:c7:31:29:f9:9a:89:0a:
e2:e6:b2:7d:2a:05:a5:db:83:52:43:df:41:a6:1a:
a4:26:84:20:70:be:5f:29:e3:8b:15:78:e8:32:7a:
5f:c0:6f:f4:0e:70:7a:95:9f:f6:6c:f1:d1:44:85:
e9:3c:f5:7b:6f:93:62:c5:d4:0e:38:18:fa:86:ca:
92:45:35:c0:90:1b:d7:1b:7c:67:0d:16:1d:8a:da:
23:d3:79:1c:88:56:04:b1:35:cc:73:12:87:50:e7:
bf:0a:f3:7c:2d:d7:1c:06:5c:b8:eb:82:05:cc:7f:
12:d0:f6:ec:22:77:1f:cf:86:fa:93:4d:64:6e:c0:
f2:bf:9b:48:a9:fd:56:77:a3:e5:d5:d4:46:c5:04:
b7:3c:7f:03:f9:ff:ef:74:2a:ef:25:e6:3c:c7:82:
df:d7:46:09:e6:c4:f2:81:27:f9:10:f8:34:bd:eb:
98:ab:d4:4f:10:54:9e:d3:db:93:b6:2b:21:a2:4c:
4d:ad:ae:f7:ac:37:6d:50:fc:b5:29:d7:ed:71:bf:
f8:6e:81:3a:0d:35:f5:61:9e:11:60:bb:7a:4b:4d:
79:b8:cf:50:9c:ba:13:dd:c9:0a:e1:c5:9a:2a:df:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:67:AF:57:2E:34:48:AE:77:5F:E1:FC:EE:11:1D:43:9B:8D:7D:D9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aGevVy40SK53X-H87hEdQ5uNfdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.204.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.25.0/24
87.229.35.0/24
87.229.40.0/24
87.229.52.0/24
87.229.80.0/23
87.229.112.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
06:9e:15:09:27:ce:cb:2c:a6:17:88:38:3b:51:76:92:72:19:
cf:93:3f:a0:98:d0:38:20:e3:45:70:24:76:78:f7:89:4d:00:
00:82:43:8f:64:7f:33:a4:62:8f:65:97:8d:a3:3d:b9:25:b0:
40:f6:76:83:4d:15:5b:16:ab:49:15:29:ed:62:42:ed:a8:28:
1d:97:fc:ff:fc:44:b2:44:57:2a:e8:bd:a2:fd:ca:41:de:a9:
98:33:79:e9:92:dc:e7:af:fe:b6:4f:3f:6d:19:81:5b:bd:07:
81:33:d3:d8:5d:0b:98:8e:88:c9:30:5c:51:bc:6c:3f:a2:68:
67:6c:90:90:7f:aa:a0:22:4f:2c:de:a4:5c:4b:94:02:66:1b:
91:9d:a6:25:e7:82:da:87:cb:0b:80:28:85:ac:93:e2:f7:b6:
50:57:26:7c:45:0d:10:54:ab:40:cc:4e:c2:b2:b6:33:f9:15:
b4:08:4a:da:e2:af:a5:68:d9:a6:5a:07:c6:6c:c7:40:3c:cf:
b0:77:1a:53:57:69:1a:86:4c:64:49:7e:ab:14:c8:ff:57:88:
a8:8a:a7:42:c1:41:60:63:10:c2:21:0a:d7:d9:29:26:83:4f:
06:28:62:b0:fa:09:fd:53:29:71:2e:c1:d6:96:ff:93:33:3b:
47:8c:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:02 2026 by rpki-client