Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m0M0Zjoqgooe55LfZ-93qpkgkCY.roa
File: m0M0Zjoqgooe55LfZ-93qpkgkCY.roa (raw, json)
Hash identifier: uCCXk2thNBo5HbyV40BUaYXj9ju39tff1MAWBbLOw6Y=
Subject key identifier: 9B:43:34:66:3A:2A:82:8A:1E:E7:92:DF:67:EF:77:AA:99:20:90:26
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D95E586511073F01D71C729C793EA71B1
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m0M0Zjoqgooe55LfZ-93qpkgkCY.roa
Signing time: Thu 16 Apr 2026 10:45:40 +0000
ROA not before: Thu 16 Apr 2026 10:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.200.0/24 maxlen: 24
79.172.201.0/24 maxlen: 24
79.172.204.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.11.0/24 maxlen: 24
87.229.25.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.40.0/24 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
87.229.124.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:e5:86:51:10:73:f0:1d:71:c7:29:c7:93:ea:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 16 10:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b4334663a2a828a1ee792df67ef77aa99209026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:99:c9:68:f9:8f:f1:a1:d4:f6:fe:b5:0e:b2:
5c:17:d7:92:4f:35:0e:72:0d:da:59:a5:6a:41:db:
59:7a:bb:23:44:9a:98:58:46:15:dd:6c:ae:d7:21:
28:d7:c3:13:e3:11:60:62:6f:25:40:27:b5:aa:45:
71:34:66:bc:1e:61:70:19:66:fb:78:4b:96:c5:a3:
c9:aa:44:5c:e6:b1:86:67:8a:e3:a7:1d:fe:73:32:
06:79:09:47:5b:f3:d0:b4:a3:0f:71:e2:d0:5a:a5:
30:9d:4f:5d:0d:fd:a8:85:c4:83:d7:5c:9f:93:03:
57:30:f8:6a:ca:26:df:bb:6b:50:02:9f:a4:78:8c:
31:37:ff:d2:a4:bc:7f:2b:ff:a7:77:27:5e:f5:73:
da:b2:e6:42:70:31:79:4e:55:80:a4:cc:3b:4e:f4:
5e:dd:f5:d7:1a:7d:1e:f2:bf:c3:66:ed:9f:93:4d:
2d:7c:f7:70:53:14:e4:2e:f1:c4:d5:cc:f3:4b:88:
ad:c5:a8:aa:ef:fa:06:17:71:2f:84:2b:47:09:24:
b0:65:a1:07:b9:c3:f9:36:d4:8d:95:73:a4:1c:c2:
0e:81:61:05:60:62:9c:e5:9a:5e:ba:80:8d:70:44:
e8:76:9c:58:da:a2:e3:5f:ff:be:94:50:1d:e9:4f:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:34:66:3A:2A:82:8A:1E:E7:92:DF:67:EF:77:AA:99:20:90:26
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/m0M0Zjoqgooe55LfZ-93qpkgkCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.204.0/24
79.172.242.0/24
79.172.250.0/23
87.229.8.0/22
87.229.25.0/24
87.229.35.0/24
87.229.40.0/24
87.229.52.0/24
87.229.80.0/23
87.229.112.0/24
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
21:06:3e:61:d0:0f:69:16:ef:9d:93:14:ac:a6:22:4e:bc:1f:
52:bd:c1:c4:9e:9d:3e:b6:04:ee:14:3f:47:44:c1:38:0f:ed:
65:46:83:bd:da:33:e0:4d:3c:bc:2f:22:2c:02:da:b8:4c:f7:
24:a4:ae:81:04:a0:2f:f9:8f:0e:c4:23:65:69:13:75:1f:7c:
48:8d:e3:b9:4f:2c:3f:c0:13:cb:83:41:0f:0d:48:4c:b1:0e:
c9:77:05:27:9f:6c:61:78:ae:1a:44:60:f3:75:a0:03:f4:37:
62:ce:f7:7d:47:9f:81:2c:84:7a:1c:95:98:9a:d0:e8:70:f3:
39:f7:c4:37:17:f4:e0:d7:16:86:fb:1f:52:9f:36:a1:f0:4e:
9e:48:3d:17:1d:9a:23:8a:0a:7f:d3:18:d1:fe:e5:fc:9f:b9:
15:96:b1:11:ea:df:0a:de:b6:48:cd:f1:da:e7:20:d1:e8:96:
86:f9:fa:01:6e:d3:cc:55:13:70:f0:28:7b:a3:a0:9a:95:5a:
01:78:37:0b:38:c0:0a:d8:31:9f:5e:db:f2:8e:a9:77:15:f3:
dc:e6:0e:dd:0b:46:ad:4e:61:c7:cd:cf:c0:64:2c:89:c7:fe:
12:27:fe:3e:55:7b:aa:4c:ab:15:59:40:cb:00:e0:98:8c:d3:
d0:d0:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:28:12 2026 by rpki-client