Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4gklRL3IvfZqfX6_z_r1f9UlDQE.roa
File: 4gklRL3IvfZqfX6_z_r1f9UlDQE.roa (raw, json)
Hash identifier: OQ5bNSzBJxDZS+efYp+0ljnCCsQ4ZzuVil+VimwaZYM=
Subject key identifier: E2:09:25:44:BD:C8:BD:F6:6A:7D:7E:BF:CF:FA:F5:7F:D5:25:0D:01
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A07D1395B5BEDBD8891F9258D2336CD1A2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4gklRL3IvfZqfX6_z_r1f9UlDQE.roa
Signing time: Mon 07 Sep 2026 18:13:50 +0000
ROA not before: Mon 07 Sep 2026 18:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198037
IP address blocks: 78.17.132.0/23 maxlen: 23
78.17.147.0/24 maxlen: 24
89.125.8.0/24 maxlen: 24
89.125.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:13:95:b5:be:db:d8:89:1f:92:58:d2:33:6c:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 7 18:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2092544bdc8bdf66a7d7ebfcffaf57fd5250d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:68:2d:33:1c:18:62:70:5f:77:d1:00:c4:
3c:df:a9:f2:62:cb:e7:08:e5:30:66:82:cc:7e:ad:
a3:74:11:db:f1:7b:e1:42:c9:1e:05:29:23:16:0a:
25:9c:bc:2c:b9:77:e4:9a:07:71:de:ad:06:c9:df:
d5:fb:6c:de:67:b3:dd:e5:85:e5:4e:81:de:33:ce:
a5:bc:d7:f5:32:a1:0d:3c:b1:e3:fd:aa:35:ed:a3:
44:b2:12:10:0b:93:98:a2:32:51:b4:bc:3f:4a:90:
5f:56:e0:8a:89:47:fe:39:c8:ed:bb:58:9f:a1:fa:
43:2a:0d:fc:42:2c:c5:e0:f4:4a:71:9c:7f:fe:ef:
77:8b:ae:56:d2:c1:0d:12:d0:98:31:69:d2:c2:57:
9c:d4:97:bc:1c:47:fa:3f:30:1f:f2:64:d4:76:3b:
af:47:c9:6c:c2:1d:93:e3:3f:6d:89:d1:27:25:0c:
9b:a9:6e:80:ba:6a:a0:a0:de:04:dd:53:62:df:09:
7b:df:18:7f:72:7a:d8:74:97:3e:c3:44:58:58:6c:
69:ff:13:d8:e1:d3:74:5f:06:82:2a:6e:1e:64:dc:
9c:d2:08:51:85:3d:50:15:c4:80:17:a5:95:94:f5:
50:a2:89:ff:41:e3:8f:a1:ef:cd:1d:91:60:51:86:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:25:44:BD:C8:BD:F6:6A:7D:7E:BF:CF:FA:F5:7F:D5:25:0D:01
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4gklRL3IvfZqfX6_z_r1f9UlDQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.132.0/23
78.17.147.0/24
89.125.8.0/24
89.125.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:91:55:35:48:14:1b:05:ec:14:f5:eb:03:69:89:5e:e4:91:
d4:93:19:05:48:bc:28:a9:16:27:85:ae:0c:87:1c:9a:08:30:
b7:c6:7f:39:ac:89:49:fa:0b:92:e7:d0:4d:e6:05:82:1a:dc:
58:e6:2f:59:41:0f:9b:63:5f:a8:6f:79:90:6a:83:66:84:86:
d4:6e:56:59:76:67:70:64:de:fb:c0:c5:57:7f:f7:16:76:8a:
da:00:bc:fa:77:c2:b9:25:8f:b3:5f:7c:64:eb:d8:8a:48:05:
fb:62:ee:86:22:44:6a:f1:77:04:ac:fb:7b:2b:6a:d1:13:00:
86:bb:75:64:1b:84:3f:e7:cf:21:a1:79:14:e4:8b:14:35:d1:
ca:d6:22:6e:04:35:a4:7a:4a:3d:ad:26:a9:66:ac:37:0d:b0:
72:90:6d:e1:cb:de:5c:28:6f:d0:1b:26:e5:fd:51:d7:cf:a9:
85:f6:91:0d:1b:2e:9d:23:d4:60:ef:0a:4d:eb:00:d5:a5:14:
8b:6b:0a:dc:e9:49:8d:43:7d:bd:08:2c:a0:55:63:51:2c:76:
0b:cd:25:2d:87:60:80:8e:9c:9c:e6:35:52:fd:b1:11:b3:65:
21:cb:b1:b3:ba:b2:bd:73:74:8e:f8:7f:b3:61:b9:69:4e:4e:
bb:23:8b:b8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaB9E5W1vtvYiR+SWNIzbNGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTA3MTgxMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA5MjU0NGJkYzhiZGY2NmE3ZDdlYmZjZmZhZjU3ZmQ1MjUwZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0NoLTMcGGJwX3fRAMQ836nyYsvn
COUwZoLMfq2jdBHb8XvhQskeBSkjFgolnLwsuXfkmgdx3q0Gyd/V+2zeZ7Pd5YXl
ToHeM86lvNf1MqENPLHj/ao17aNEshIQC5OYojJRtLw/SpBfVuCKiUf+Ocjtu1if
ofpDKg38QizF4PRKcZx//u93i65W0sENEtCYMWnSwlec1Je8HEf6PzAf8mTUdjuv
R8lswh2T4z9tidEnJQybqW6AumqgoN4E3VNi3wl73xh/cnrYdJc+w0RYWGxp/xPY
4dN0XwaCKm4eZNyc0ghRhT1QFcSAF6WVlPVQoon/QeOPoe/NHZFgUYadeQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOIJJUS9yL32an1+v8/69X/VJQ0BMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNGdrbFJMM0l2ZlpxZlg2X3pfcjFmOVVsRFFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBThGEAwQA
ThGTAwQAWX0IAwQAWX0hMA0GCSqGSIb3DQEBCwUAA4IBAQAbkVU1SBQbBewU9esD
aYle5JHUkxkFSLwoqRYnha4MhxyaCDC3xn85rIlJ+guS59BN5gWCGtxY5i9ZQQ+b
Y1+ob3mQaoNmhIbUblZZdmdwZN77wMVXf/cWdoraALz6d8K5JY+zX3xk69iKSAX7
Yu6GIkRq8XcErPt7K2rREwCGu3VkG4Q/588hoXkU5IsUNdHK1iJuBDWkeko9rSap
Zqw3DbBykG3hy95cKG/QGybl/VHXz6mF9pENGy6dI9Rg7wpN6wDVpRSLawrc6UmN
Q329CCygVWNRLHYLzSUth2CAjpyc5jVS/bERs2Uhy7GzurK9c3SO+H+zYblpTk67
I4u4
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:56 2026 by rpki-client