Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Qm2dN6EXMJVa4M48El4fgZJQtU.roa
File: 1Qm2dN6EXMJVa4M48El4fgZJQtU.roa (raw, json)
Hash identifier: Gja+zGdlEV1K+WCA2xP9HUb0jFzaHU6U31yVGXzC0rI=
Subject key identifier: D5:09:B6:74:DE:84:5C:C2:55:6B:83:38:F0:49:78:7E:06:49:42:D5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D97D4879A17F9EB8FF6B4D41992CB886E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Qm2dN6EXMJVa4M48El4fgZJQtU.roa
Signing time: Thu 16 Apr 2026 19:46:21 +0000
ROA not before: Thu 16 Apr 2026 19:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 78.17.6.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:d4:87:9a:17:f9:eb:8f:f6:b4:d4:19:92:cb:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 16 19:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d509b674de845cc2556b8338f049787e064942d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:18:69:29:46:eb:af:57:96:69:dd:b1:61:
bd:80:2c:b9:82:fd:c9:e0:f9:e3:f9:94:ab:2f:aa:
0d:2f:f5:31:63:8a:0d:77:98:6f:4b:67:70:64:e4:
95:e6:54:8c:cf:98:56:7b:c8:94:d4:d8:4c:14:1d:
29:fa:24:59:70:d9:41:c0:47:ba:c0:b2:b5:39:ce:
35:1b:6b:72:bf:91:c5:71:20:54:a4:40:30:38:12:
3a:cc:a6:be:9f:5f:bf:de:ba:3c:4b:6b:4c:2c:37:
ca:bb:d2:ff:e2:23:3d:bf:f0:d7:f3:8c:d2:9a:f3:
11:17:d7:a7:67:04:da:a5:ff:9b:40:d8:53:60:7d:
78:0b:97:8b:21:78:43:f9:24:ba:a2:34:45:9b:77:
1c:7f:59:5d:b7:af:6f:08:88:4c:0c:3f:bd:1d:ee:
71:0f:c0:cc:29:da:98:bc:1c:8e:df:9d:0f:66:a8:
66:19:39:b2:3b:b1:ca:4f:f1:ab:63:de:68:e1:d8:
08:89:3f:8e:d7:82:50:3f:e5:1e:1d:4f:63:ca:71:
42:ad:c9:b1:bb:4f:a2:52:67:b3:ac:87:e0:68:f6:
d6:24:e2:2e:e3:78:3b:57:a8:b3:76:63:c8:cb:98:
07:7f:89:f3:5b:70:5d:a7:dd:c9:b3:19:69:9f:e2:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:B6:74:DE:84:5C:C2:55:6B:83:38:F0:49:78:7E:06:49:42:D5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Qm2dN6EXMJVa4M48El4fgZJQtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.6.0/24
78.17.36.0/24
78.17.43.0/24
78.17.151.0/24
89.125.27.0/24
89.125.38.0/24
89.125.62.0/24
89.125.84.0/24
89.125.93.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:39:ae:7e:5b:98:b8:a6:16:98:cf:ea:71:0f:34:d2:b7:0f:
99:04:c0:43:d1:99:13:a0:e9:25:5f:ae:56:93:62:33:1d:03:
f6:45:33:5d:0b:3c:17:46:87:3c:1e:8a:ab:2a:2a:fd:0d:67:
04:6a:1a:9b:14:88:09:b1:71:dd:70:3f:20:fa:0e:13:3b:8e:
d1:8c:40:4a:56:b3:8d:41:51:73:cc:a8:39:42:23:18:b0:15:
08:aa:28:bb:f2:a7:e2:e5:f8:d2:69:17:bc:9d:e0:1c:2e:79:
74:48:0b:6c:2b:29:db:dd:0e:78:31:1d:8d:18:ad:07:99:a7:
ed:92:20:97:53:04:d2:86:4e:8b:a8:05:61:89:ef:a7:c5:f4:
5e:3c:02:d1:00:d6:ab:f2:7e:0d:96:85:35:9b:ba:b2:57:f3:
48:30:50:9c:24:26:36:ad:c1:48:80:31:a9:e0:9d:dd:72:a0:
ca:e3:df:0e:a9:dc:58:f6:c7:b2:77:59:17:1b:a0:95:69:74:
66:04:3a:09:d0:40:08:a5:ec:9d:ab:24:86:5f:8a:fb:05:97:
a6:87:0b:03:84:aa:b9:8f:fb:9c:98:25:76:1a:d2:c9:21:a3:
1e:ba:7a:09:65:b6:89:60:60:05:4a:e5:90:ed:35:67:9d:51:
67:a8:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:22 2026 by rpki-client