Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/o5RsRsZw8LghLiIwWW-jRDbBrXY.roa
File: o5RsRsZw8LghLiIwWW-jRDbBrXY.roa (raw, json)
Hash identifier: HJC6IwABvZmZI+CgVX+P2fEcESzp5jg/K6ZWjRT0kKA=
Subject key identifier: A3:94:6C:46:C6:70:F0:B8:21:2E:22:30:59:6F:A3:44:36:C1:AD:76
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0C9D5CDF6CBCC1AB279581B6BF5165647
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/o5RsRsZw8LghLiIwWW-jRDbBrXY.roa
Signing time: Tue 22 Sep 2026 15:57:07 +0000
ROA not before: Tue 22 Sep 2026 15:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60071
IP address blocks: 87.229.72.0/24 maxlen: 24
87.229.103.0/24 maxlen: 24
87.229.104.0/24 maxlen: 24
87.229.120.0/24 maxlen: 24
217.144.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d5:cd:f6:cb:cc:1a:b2:79:58:1b:6b:f5:16:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 22 15:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3946c46c670f0b8212e2230596fa34436c1ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:90:f0:a7:62:00:c0:1a:38:5d:e8:4a:e4:
78:77:a0:49:45:f9:c8:f1:ae:ad:f6:03:9c:b3:9a:
8c:d7:bf:9c:a4:36:28:61:eb:fb:ac:ff:83:f7:66:
58:cc:40:51:5a:a0:15:ba:24:ef:98:41:ce:04:8d:
4a:6f:d1:ef:11:40:e3:74:39:7d:fc:8c:01:4e:32:
5f:b6:f6:f3:12:1d:06:36:7c:59:33:ce:18:41:a0:
92:af:10:dc:96:e0:d5:2e:42:69:65:c0:ef:54:ba:
62:e5:cf:49:7e:02:42:cd:7b:ff:03:32:fc:b5:2a:
d6:7f:56:5e:cd:2e:af:05:30:1e:f7:3e:01:22:9d:
4c:95:a8:f5:43:7e:b7:b4:dc:64:c4:69:92:ae:a5:
71:3c:3c:af:0e:12:51:dc:8e:68:63:22:7d:33:f2:
4e:4b:49:4b:07:2e:ca:8a:8a:b8:40:ce:82:02:4a:
94:6a:5d:26:bd:c7:68:e4:cd:80:a5:e7:e5:01:36:
9c:6d:ba:69:b4:32:e5:20:53:dc:5e:a5:80:08:57:
6a:a7:dc:15:a6:10:88:93:77:aa:6d:15:dd:b1:62:
8a:e3:2c:71:60:a9:13:e1:19:d6:b9:37:07:ec:4b:
44:04:12:e9:4e:59:b1:d5:d0:a8:42:0e:e3:28:8c:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:6C:46:C6:70:F0:B8:21:2E:22:30:59:6F:A3:44:36:C1:AD:76
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/o5RsRsZw8LghLiIwWW-jRDbBrXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.72.0/24
87.229.103.0-87.229.104.255
87.229.120.0/24
217.144.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8e:ae:7e:ee:f3:27:1b:c7:20:ea:ed:ac:17:26:c8:a6:24:
07:80:41:c8:6d:b3:6d:bb:46:f1:e5:c7:12:93:3f:93:72:cf:
37:c1:0d:3f:3e:8f:21:ff:0f:49:72:15:cc:c4:2f:f5:d4:74:
70:d5:96:8b:f6:b6:41:8e:57:8d:0e:74:0b:0a:47:00:a2:c9:
b4:11:8a:31:9a:fb:d9:14:7b:f2:80:75:7a:6f:ca:bb:1f:5d:
9f:44:01:7c:15:b7:ce:c7:be:28:be:1b:e0:01:17:46:a5:87:
e9:48:f3:f7:48:06:94:4b:db:af:83:6b:e8:46:5f:0f:3d:fb:
fa:3f:23:d6:27:65:f0:8b:94:5c:2b:8a:69:ef:f9:0e:6d:a6:
a7:da:7a:12:6d:03:cb:8c:8b:e6:d3:ef:f3:79:33:0e:02:62:
aa:84:da:bb:e6:ab:ef:a8:16:0c:e2:a0:ca:85:31:5e:b2:d4:
e0:3b:38:1a:29:2b:ec:58:4d:9e:6e:db:83:3b:75:10:28:45:
23:37:12:98:b7:c4:3b:03:32:9f:e9:61:5d:cd:4c:68:ca:d5:
40:0f:87:b6:69:f3:a6:60:1d:14:a5:0d:8c:63:18:cd:da:ae:
18:3a:aa:43:57:a1:8e:00:8b:f3:93:a5:f5:1a:c5:6c:34:f2:
57:41:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:46:35 2026 by rpki-client