Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kC6EdKp5kAxE6ipuvOFxOVSh72Y.roa
File: kC6EdKp5kAxE6ipuvOFxOVSh72Y.roa (raw, json)
Hash identifier: +6n4orNYlJUO+Ll/9OFpnQV7inpEBFVTeZ73EjLRnOI=
Subject key identifier: 90:2E:84:74:AA:79:90:0C:44:EA:2A:6E:BC:E1:71:39:54:A1:EF:66
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019C57100441F2D6D8180040FEA31492571C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kC6EdKp5kAxE6ipuvOFxOVSh72Y.roa
Signing time: Fri 13 Feb 2026 12:53:13 +0000
ROA not before: Fri 13 Feb 2026 12:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 87.229.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:10:04:41:f2:d6:d8:18:00:40:fe:a3:14:92:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 12:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=902e8474aa79900c44ea2a6ebce1713954a1ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:7c:46:05:4e:66:a7:5f:9e:1a:cd:b1:6b:
4c:5d:0b:7c:71:78:77:bc:77:c6:16:40:9c:21:de:
f7:b9:5a:1e:98:1f:69:ec:52:4f:b8:dd:a4:da:2d:
76:b3:ca:d7:81:d7:fc:80:17:c7:d4:41:47:7b:02:
77:8e:4e:68:34:b2:20:79:8d:37:73:01:29:2a:ed:
3f:fa:9a:a0:92:f3:5f:d1:e5:37:d4:ed:41:7e:d3:
bc:39:6b:3f:cb:e5:56:4f:6e:95:26:cb:e7:d6:ed:
53:70:fb:ea:32:ee:2b:8f:3f:74:b7:55:05:c4:e2:
a1:99:14:c9:6c:e5:06:2b:09:f7:c5:39:ba:ad:43:
bb:ff:50:d7:53:f2:07:de:fb:97:ed:39:10:51:f0:
d5:34:84:6d:84:91:8c:5f:45:e1:c1:5c:11:4b:23:
ae:ad:68:8f:98:d9:59:ac:ee:93:fe:f4:4e:ce:f6:
21:b2:23:04:2e:14:57:bd:ac:dd:8d:55:53:fd:1c:
d0:a4:0e:4f:c6:2c:14:d0:dc:e6:23:82:65:be:fd:
3a:b4:4e:98:a2:6d:88:53:24:23:d4:a6:b9:12:a4:
12:12:8d:e3:be:bd:41:0e:91:6e:a3:8a:ca:f6:de:
00:22:e1:48:ce:08:26:68:1a:fe:80:97:29:fd:98:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2E:84:74:AA:79:90:0C:44:EA:2A:6E:BC:E1:71:39:54:A1:EF:66
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kC6EdKp5kAxE6ipuvOFxOVSh72Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.81.0/24
Signature Algorithm: sha256WithRSAEncryption
04:59:d3:8d:b2:0a:83:17:65:50:0e:c8:f4:36:6c:45:6a:b8:
ee:d2:10:a4:38:7f:48:6f:09:80:85:5d:b6:24:d1:2f:b0:7a:
a3:0f:c1:92:14:67:61:4f:45:ed:5c:33:a2:0f:4b:9f:d2:a9:
26:2b:cd:f8:0b:f0:e8:12:1c:42:c6:59:18:e7:b9:ac:ac:3c:
57:24:94:50:39:93:5d:05:f3:4d:00:a0:98:12:6e:e8:5b:df:
d2:60:f0:b9:7f:f5:5e:c3:8c:90:c7:70:1d:a8:44:2b:c2:ca:
3e:71:54:b6:87:57:94:56:aa:b8:ad:e1:89:13:1c:e7:8d:49:
e0:35:ef:98:94:26:b3:cd:94:e7:fc:00:d0:78:9f:2b:22:00:
28:c0:f9:6a:b2:27:83:48:8c:67:45:87:ba:b8:ab:68:6f:55:
0b:a6:aa:a1:c9:5b:ce:a7:71:6d:7d:29:00:e8:49:d4:ff:16:
39:6b:56:4d:46:13:05:3a:b1:07:e4:2f:85:ec:c5:9a:f7:77:
2b:76:b3:cd:7e:04:28:a3:9b:0c:e1:e0:b2:8e:28:36:c1:cb:
cf:6d:b2:1c:2c:22:cf:ef:56:84:ed:c9:08:43:7f:f1:31:d4:
73:cd:1f:77:cd:9f:af:84:8c:1c:52:32:49:dc:7b:86:3c:b7:
39:2c:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:51 2026 by rpki-client