Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xSsNQD8lVZSjJAzE19QqkqeySiE.roa
File: xSsNQD8lVZSjJAzE19QqkqeySiE.roa (raw, json)
Hash identifier: HoK59wOpzb0WJjgFsBRT1zHohawOW9v9PT5FO5gYKw8=
Subject key identifier: C5:2B:0D:40:3F:25:55:94:A3:24:0C:C4:D7:D4:2A:92:A7:B2:4A:21
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E9200400E9E2B866796BBDECAB2D8D377
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xSsNQD8lVZSjJAzE19QqkqeySiE.roa
Signing time: Thu 04 Jun 2026 09:39:10 +0000
ROA not before: Thu 04 Jun 2026 09:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48300
IP address blocks: 79.172.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:00:40:0e:9e:2b:86:67:96:bb:de:ca:b2:d8:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 4 09:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c52b0d403f255594a3240cc4d7d42a92a7b24a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:d5:3f:30:0c:d3:51:05:1f:18:a1:b3:4b:
f0:b1:bb:86:eb:85:e1:2f:cd:c7:6f:fb:3c:ff:9d:
fb:be:95:8a:45:2c:59:aa:d1:8c:b2:9c:ce:d9:70:
b8:58:41:d6:4b:11:fc:a8:29:9b:9a:14:6e:59:52:
1b:10:83:19:99:ed:c8:3f:f9:1a:1c:7a:75:f9:84:
2b:fe:34:24:6a:34:af:5a:15:19:c0:83:b3:df:94:
39:92:6a:bc:01:a3:17:25:93:31:aa:82:54:a0:a6:
26:b9:79:d5:18:a4:39:b4:bb:e1:db:56:cc:8d:9a:
70:6d:07:39:9e:61:95:01:1b:e5:1e:8b:5c:2e:49:
10:da:16:c3:42:9d:b1:dd:ea:97:ec:8a:f4:98:29:
e7:a4:f5:b3:96:60:7e:97:75:86:f1:1e:67:f7:0a:
72:aa:82:ce:cc:27:96:9e:ed:d0:10:d6:c8:33:87:
58:1b:02:7b:03:5a:56:04:16:9d:d8:e9:08:a2:ae:
a5:3f:72:68:08:45:2c:3b:a1:d9:e8:b7:74:34:f5:
8c:04:83:78:e0:eb:58:2a:22:40:7d:98:d2:42:28:
d0:36:c7:ec:26:1a:48:3f:1d:1b:80:64:7e:18:e3:
b3:0d:aa:a8:29:a9:b6:db:d6:20:26:17:c6:04:cb:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:0D:40:3F:25:55:94:A3:24:0C:C4:D7:D4:2A:92:A7:B2:4A:21
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xSsNQD8lVZSjJAzE19QqkqeySiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:06:0b:e9:bb:58:29:fc:c7:a3:36:28:e8:6a:b9:38:59:63:
21:e6:56:54:e7:1c:a0:65:c4:94:38:60:cf:eb:6a:1c:44:67:
d9:85:8c:73:8d:81:93:b2:98:d6:9b:dc:5b:f1:fb:62:c3:66:
2a:a3:dd:21:c6:66:db:c3:12:7b:98:6e:a3:d3:9f:a9:93:f3:
63:aa:c5:63:e5:2b:a7:26:8f:8e:dd:6d:7e:99:b1:a1:f2:41:
61:5f:48:e5:15:a8:29:bc:10:05:77:a4:97:4b:b7:d9:ec:76:
0b:45:29:47:12:69:0f:0d:cc:74:84:5a:59:19:9f:b9:fa:82:
4d:25:90:e7:fa:41:68:ef:46:5a:02:b1:40:58:e2:7d:70:6c:
09:c5:a2:b9:fd:28:84:11:dc:95:c7:7a:7d:7c:df:b6:fb:d1:
03:0b:15:b5:3f:86:66:0f:e6:2c:3f:71:21:ed:89:7a:75:6c:
b4:c2:8d:ca:bc:56:97:ae:90:a5:ea:ab:bf:fd:d5:c5:18:75:
86:09:51:8b:cb:cd:2c:08:cd:e4:e5:75:41:86:98:6c:4f:4c:
ec:61:5f:82:e3:13:39:b0:89:85:31:d5:8a:6b:20:4f:71:25:
c6:89:d2:63:46:11:ee:5e:c1:e3:26:f6:41:d7:05:14:cb:1e:
7b:b0:d6:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6SAEAOniuGZ5a73sqy2NN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNjA0MDkzOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTJiMGQ0MDNmMjU1NTk0YTMyNDBjYzRkN2Q0MmE5MmE3YjI0YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6LVPzAM01EFHxihs0vwsbuG64Xh
L83Hb/s8/537vpWKRSxZqtGMspzO2XC4WEHWSxH8qCmbmhRuWVIbEIMZme3IP/ka
HHp1+YQr/jQkajSvWhUZwIOz35Q5kmq8AaMXJZMxqoJUoKYmuXnVGKQ5tLvh21bM
jZpwbQc5nmGVARvlHotcLkkQ2hbDQp2x3eqX7Ir0mCnnpPWzlmB+l3WG8R5n9wpy
qoLOzCeWnu3QENbIM4dYGwJ7A1pWBBad2OkIoq6lP3JoCEUsO6HZ6Ld0NPWMBIN4
4OtYKiJAfZjSQijQNsfsJhpIPx0bgGR+GOOzDaqoKam229YgJhfGBMutFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUrDUA/JVWUoyQMxNfUKpKnskohMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEveFNzTlFEOGxWWlNqSkF6RTE5UXFrcWV5U2lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zMMA0G
CSqGSIb3DQEBCwUAA4IBAQCKBgvpu1gp/MejNijoark4WWMh5lZU5xygZcSUOGDP
62ocRGfZhYxzjYGTspjWm9xb8ftiw2Yqo90hxmbbwxJ7mG6j05+pk/NjqsVj5Sun
Jo+O3W1+mbGh8kFhX0jlFagpvBAFd6SXS7fZ7HYLRSlHEmkPDcx0hFpZGZ+5+oJN
JZDn+kFo70ZaArFAWOJ9cGwJxaK5/SiEEdyVx3p9fN+2+9EDCxW1P4ZmD+YsP3Eh
7Yl6dWy0wo3KvFaXrpCl6qu//dXFGHWGCVGLy80sCM3k5XVBhphsT0zsYV+C4xM5
sImFMdWKayBPcSXGidJjRhHuXsHjJvZB1wUUyx57sNZU
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:28 2026 by rpki-client