Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Z13P24JtGuePjF4JGn2cOqccJ4.roa
File: 7Z13P24JtGuePjF4JGn2cOqccJ4.roa (raw, json)
Hash identifier: ea3ewsKUUobsvehCEx0ekKpi9tKIL7INvoclHCiENrs=
Subject key identifier: ED:9D:77:3F:6E:09:B4:6B:9E:3E:31:78:24:69:F6:70:EA:9C:70:9E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1C1B7179FAB2B35F9A46CDB20E8296350
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Z13P24JtGuePjF4JGn2cOqccJ4.roa
Signing time: Mon 09 Nov 2026 19:09:24 +0000
ROA not before: Mon 09 Nov 2026 19:09:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:b7:17:9f:ab:2b:35:f9:a4:6c:db:20:e8:29:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 9 19:09:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed9d773f6e09b46b9e3e31782469f670ea9c709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:26:c4:a2:37:98:44:41:3f:19:c9:55:a6:
49:9a:a5:94:28:8c:24:ab:1c:0d:16:d0:a6:c1:90:
9b:13:ff:26:86:49:f6:75:fd:59:88:bd:76:77:bc:
d7:93:af:0c:50:0c:7a:4c:ad:73:47:ec:a6:ce:09:
a2:71:07:05:a8:72:9a:0e:b9:3f:65:f1:eb:03:26:
5a:fa:53:0d:91:96:b6:5e:fa:01:c3:df:60:4e:9c:
ea:ab:cc:6e:b9:ea:61:21:d2:bc:ea:8a:46:e1:71:
00:d7:10:2a:96:57:90:a8:5a:f6:57:19:0e:62:28:
b2:83:8d:e8:bb:bd:01:9a:24:e0:34:53:5f:d9:cd:
1c:19:9a:af:bc:76:11:2b:56:fd:98:92:a3:84:92:
95:5c:21:f2:9c:d9:db:25:77:00:9f:f1:be:82:74:
d0:29:0a:35:cf:19:ff:66:35:72:79:62:b6:6e:2b:
2f:1b:3b:34:2e:e2:c1:27:01:29:10:86:54:96:69:
7a:9d:f8:00:31:a1:b2:01:f6:13:18:b4:cb:0c:3f:
25:2a:d7:cc:23:35:74:62:99:6a:93:3f:9e:9b:1d:
44:1f:27:07:3d:d5:52:bc:06:0a:8c:9d:fa:a8:7d:
1a:78:3b:b6:07:bd:45:77:0e:f6:e9:14:64:35:d9:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:77:3F:6E:09:B4:6B:9E:3E:31:78:24:69:F6:70:EA:9C:70:9E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Z13P24JtGuePjF4JGn2cOqccJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
78.17.19.0/24
78.17.115.0/24
89.34.106.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
89.125.120.0/24
89.125.129.0/24
89.125.168.0/24
93.115.107.0/24
104.143.218.0/24
176.223.188.0/24
185.198.233.0/24
188.241.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4f:22:3b:97:90:4f:02:44:d5:90:f7:ec:c2:02:ad:6b:c6:
94:d7:91:9e:f3:b4:91:6f:46:05:cc:f8:8c:4f:37:64:fa:7d:
30:0a:d1:27:9c:10:0f:73:f6:61:e0:76:17:4b:3d:23:e9:8f:
b2:32:53:dc:9d:6b:d7:3b:98:5f:af:03:ad:26:03:6a:74:00:
06:dc:10:d0:1d:83:88:c3:69:cb:b2:af:5b:88:7e:9d:1a:6c:
16:cd:83:a1:b4:29:f3:44:cf:c8:b2:d4:97:55:0e:d8:91:91:
24:b7:0b:a6:db:28:4a:96:19:5e:6b:5c:35:0a:5a:72:88:6b:
c1:1c:43:80:4e:25:89:4f:65:bb:d6:96:2f:8c:19:50:31:2f:
e9:37:b7:50:af:f7:71:82:28:8f:b9:74:74:e4:1f:75:14:15:
5c:1d:6b:d7:0d:0d:43:e8:88:dd:87:21:f8:7e:88:c5:5e:ee:
b3:a0:0f:40:57:96:96:11:aa:25:85:ce:74:99:27:5e:11:78:
00:79:4e:15:cc:85:9b:33:44:17:89:26:50:66:29:b6:2a:b6:
d3:ea:e1:84:ba:62:e3:0f:23:6a:21:84:76:c0:af:c1:ba:c7:
c8:23:60:d9:3f:02:14:41:42:81:a8:3b:31:fa:df:29:c0:2e:
d0:cb:5e:95
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAaHBtxefqys1+aRs2yDoKWNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTA5MTkwOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDlkNzczZjZlMDliNDZiOWUzZTMxNzgyNDY5ZjY3MGVhOWM3MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlQmxKI3mERBPxnJVaZJmqWUKIwk
qxwNFtCmwZCbE/8mhkn2df1ZiL12d7zXk68MUAx6TK1zR+ymzgmicQcFqHKaDrk/
ZfHrAyZa+lMNkZa2XvoBw99gTpzqq8xuuephIdK86opG4XEA1xAqlleQqFr2VxkO
Yiiyg43ou70BmiTgNFNf2c0cGZqvvHYRK1b9mJKjhJKVXCHynNnbJXcAn/G+gnTQ
KQo1zxn/ZjVyeWK2bisvGzs0LuLBJwEpEIZUlml6nfgAMaGyAfYTGLTLDD8lKtfM
IzV0Yplqkz+emx1EHycHPdVSvAYKjJ36qH0aeDu2B71Fdw726RRkNdnpTwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFO2ddz9uCbRrnj4xeCRp9nDqnHCeMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvN1oxM1AyNEp0R3VlUGpGNEpHbjJjT3FjY0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQALVgOAwQA
ThETAwQAThFzAwQAWSJqAwQAWSgkAwQAWSjXAwQAWS0jAwQAWS8kAwQAWX14AwQA
WX2BAwQAWX2oAwQAXXNrAwQAaI/aAwQAsN+8AwQAucbpAwQAvPHdMA0GCSqGSIb3
DQEBCwUAA4IBAQCJTyI7l5BPAkTVkPfswgKta8aU15Ge87SRb0YFzPiMTzdk+n0w
CtEnnBAPc/Zh4HYXSz0j6Y+yMlPcnWvXO5hfrwOtJgNqdAAG3BDQHYOIw2nLsq9b
iH6dGmwWzYOhtCnzRM/IstSXVQ7YkZEktwum2yhKlhlea1w1ClpyiGvBHEOATiWJ
T2W71pYvjBlQMS/pN7dQr/dxgiiPuXR05B91FBVcHWvXDQ1D6IjdhyH4fojFXu6z
oA9AV5aWEaolhc50mSdeEXgAeU4VzIWbM0QXiSZQZim2KrbT6uGEumLjDyNqIYR2
wK/BusfII2DZPwIUQUKBqDsx+t8pwC7Qy16V
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:55:07 2026 by rpki-client