Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Faft_4TFzauJFYVcMPItKYyCXog.roa
File: Faft_4TFzauJFYVcMPItKYyCXog.roa (raw, json)
Hash identifier: 2o26eEaG8M88m0ATt+TvwerLt14A7N/bNzKhi7Syvbg=
Subject key identifier: 15:A7:ED:FF:84:C5:CD:AB:89:15:85:5C:30:F2:2D:29:8C:82:5E:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0A87929D2B79A56852C11BDC1B824D42B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Faft_4TFzauJFYVcMPItKYyCXog.roa
Signing time: Wed 16 Sep 2026 04:28:27 +0000
ROA not before: Wed 16 Sep 2026 04:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219288
IP address blocks: 78.17.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:79:29:d2:b7:9a:56:85:2c:11:bd:c1:b8:24:d4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 04:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a7edff84c5cdab8915855c30f22d298c825e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:30:30:6d:73:bb:17:c1:fc:c9:be:e5:ea:
7a:d3:17:71:c6:e6:90:20:5e:93:ca:23:b8:fe:2d:
c5:47:72:11:40:8b:4f:ed:76:13:f8:44:7a:3d:4a:
7f:11:dd:94:a1:49:17:02:d6:ef:ba:d4:fe:96:13:
f3:a1:df:7c:4a:25:eb:a0:9b:a3:dd:5b:82:67:2d:
19:f2:6e:6a:86:66:ae:19:1b:25:11:13:0e:01:35:
f4:1b:2d:88:90:09:4e:72:b6:f3:42:df:28:b1:06:
3a:1b:f8:50:19:d7:62:4f:20:dd:f7:52:dc:e0:c1:
30:f6:42:7a:9f:6b:ee:ea:a5:96:a8:db:57:6d:60:
03:4e:63:38:c2:73:5e:87:af:4c:41:d4:6d:1e:2d:
22:4f:d3:c9:6e:72:65:6c:a9:b0:cd:0b:83:1e:8e:
55:a6:90:66:33:64:17:44:96:d0:6c:45:58:71:50:
b3:f7:fa:4d:83:af:ed:0b:2d:c6:60:66:da:39:73:
2d:56:4d:81:7d:90:cc:ba:a5:93:eb:98:ba:23:e5:
37:2c:93:66:64:b1:f9:4f:d8:8a:aa:9c:3b:7c:9d:
cb:af:4b:35:25:f9:08:42:37:e2:98:c6:a3:2d:86:
f4:f6:7a:6c:88:39:66:65:1b:fe:e4:88:c7:2c:5b:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:ED:FF:84:C5:CD:AB:89:15:85:5C:30:F2:2D:29:8C:82:5E:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Faft_4TFzauJFYVcMPItKYyCXog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c7:56:3b:d9:62:90:10:78:1d:e9:3b:0f:54:b7:bf:19:04:
50:72:3e:4d:05:96:24:6a:a5:83:f2:20:00:7d:be:38:b5:08:
2a:cd:ca:15:c5:02:62:2b:48:fe:22:29:07:9e:4f:62:20:29:
b1:18:32:d6:da:02:67:fc:d8:cb:3c:a4:e1:4d:0e:d1:dd:7d:
c0:d7:fb:4d:26:2a:7b:cc:99:0f:2a:42:72:52:da:dc:80:ea:
32:a0:3f:b0:1c:05:66:63:17:85:e1:0c:67:2c:8b:83:02:6e:
0e:aa:62:0c:59:1a:2f:36:9b:c9:c4:cc:b3:06:05:2e:47:11:
33:d8:6d:17:6e:1a:83:d8:1f:50:cc:24:f1:e7:98:fa:98:1d:
6b:23:ee:78:cb:1e:10:0b:91:8f:2d:9e:7a:6c:c5:08:b9:fa:
f9:18:7c:32:57:d3:69:8c:63:b1:cb:ea:58:48:90:ff:8d:00:
25:87:c5:b6:76:63:19:9d:d2:59:c1:c7:ea:82:b5:31:07:c3:
15:bc:e1:bd:26:a1:92:67:d7:52:01:4b:d3:37:8e:b4:f9:c2:
13:02:71:cc:5a:9b:86:dc:33:bf:b7:f0:b3:10:ab:56:69:34:
9e:33:2a:09:28:57:16:4a:d5:b0:81:b1:62:84:31:0a:68:96:
42:f2:61:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCoeSnSt5pWhSwRvcG4JNQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTE2MDQyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWE3ZWRmZjg0YzVjZGFiODkxNTg1NWMzMGYyMmQyOThjODI1ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9cwMG1zuxfB/Mm+5ep60xdxxuaQ
IF6TyiO4/i3FR3IRQItP7XYT+ER6PUp/Ed2UoUkXAtbvutT+lhPzod98SiXroJuj
3VuCZy0Z8m5qhmauGRslERMOATX0Gy2IkAlOcrbzQt8osQY6G/hQGddiTyDd91Lc
4MEw9kJ6n2vu6qWWqNtXbWADTmM4wnNeh69MQdRtHi0iT9PJbnJlbKmwzQuDHo5V
ppBmM2QXRJbQbEVYcVCz9/pNg6/tCy3GYGbaOXMtVk2BfZDMuqWT65i6I+U3LJNm
ZLH5T9iKqpw7fJ3Lr0s1JfkIQjfimMajLYb09npsiDlmZRv+5IjHLFspuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWn7f+Exc2riRWFXDDyLSmMgl6IMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRmFmdF80VEZ6YXVKRllWY01QSXRLWXlDWG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThHXMA0G
CSqGSIb3DQEBCwUAA4IBAQAdx1Y72WKQEHgd6TsPVLe/GQRQcj5NBZYkaqWD8iAA
fb44tQgqzcoVxQJiK0j+IikHnk9iICmxGDLW2gJn/NjLPKThTQ7R3X3A1/tNJip7
zJkPKkJyUtrcgOoyoD+wHAVmYxeF4QxnLIuDAm4OqmIMWRovNpvJxMyzBgUuRxEz
2G0XbhqD2B9QzCTx55j6mB1rI+54yx4QC5GPLZ56bMUIufr5GHwyV9NpjGOxy+pY
SJD/jQAlh8W2dmMZndJZwcfqgrUxB8MVvOG9JqGSZ9dSAUvTN460+cITAnHMWpuG
3DO/t/CzEKtWaTSeMyoJKFcWStWwgbFihDEKaJZC8mH5
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:24 2026 by rpki-client