Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IKUXE9u1dKYUaONgkVE5dbdh2YY.roa
File: IKUXE9u1dKYUaONgkVE5dbdh2YY.roa (raw, json)
Hash identifier: 07NhDrm4jP/p+Abb1I/aDXqJ/y58WJKF+88Es2636Fk=
Subject key identifier: 20:A5:17:13:DB:B5:74:A6:14:68:E3:60:91:51:39:75:B7:61:D9:86
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0A8E35DE4676B8CD2E640E16307E73D48
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IKUXE9u1dKYUaONgkVE5dbdh2YY.roa
Signing time: Wed 16 Sep 2026 06:24:28 +0000
ROA not before: Wed 16 Sep 2026 06:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218700
IP address blocks: 78.17.22.0/24 maxlen: 24
78.17.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:e3:5d:e4:67:6b:8c:d2:e6:40:e1:63:07:e7:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 06:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20a51713dbb574a61468e36091513975b761d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:5d:f5:64:66:64:16:e6:ec:65:57:a3:bf:
00:84:46:fd:7e:36:30:91:d4:9c:2e:cd:97:7d:ad:
d2:a6:a5:a0:1d:73:6c:dd:75:97:d6:62:55:57:da:
4d:8b:f4:9b:5c:10:06:7a:27:c0:9a:54:61:97:33:
4b:a7:71:bf:85:a6:99:a7:f3:62:99:3d:fa:10:06:
38:8a:9a:cc:00:89:74:cf:3c:0e:c8:5a:c7:fe:2f:
60:b9:6a:05:97:4c:d4:20:6c:49:2d:c6:e9:0c:6d:
a3:2b:37:10:79:ac:b2:9c:0e:a6:4a:d0:08:14:09:
f0:d9:57:04:97:ce:4a:db:24:4e:50:60:09:6e:89:
80:1f:ca:59:04:74:23:3f:3b:0d:a4:25:2c:bd:e2:
88:7c:d4:c1:47:9d:e6:74:87:e2:7c:87:d3:5e:46:
66:4e:24:fb:94:72:c6:eb:42:72:6a:e9:6f:cf:d0:
18:dd:6b:f2:ed:5b:21:a0:35:35:25:02:a1:fb:f4:
a6:1e:09:06:30:6a:b0:2e:77:b6:72:1d:9f:98:70:
ae:02:a5:ee:30:78:0c:12:2a:08:bf:83:8a:36:6f:
0a:20:8e:18:bd:d8:21:0b:12:a1:1a:3c:95:23:60:
db:47:16:60:c1:28:8e:b4:6a:0f:fa:85:47:e3:13:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:17:13:DB:B5:74:A6:14:68:E3:60:91:51:39:75:B7:61:D9:86
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IKUXE9u1dKYUaONgkVE5dbdh2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.22.0/24
78.17.92.0/24
Signature Algorithm: sha256WithRSAEncryption
08:27:71:f4:63:ef:61:66:9c:44:e2:49:ad:57:07:d6:43:9e:
ea:32:3d:3a:e2:da:c7:ed:eb:87:f3:4c:3f:11:8e:67:2d:15:
0a:03:ce:e0:96:25:e3:b4:a0:94:b7:35:38:3f:3c:b6:2e:54:
09:7e:b9:b0:b4:42:95:a0:7a:12:25:35:a0:99:52:25:eb:8a:
30:96:d8:94:c8:fe:76:52:bd:65:d5:63:e5:8c:fe:ad:9a:b9:
02:76:2b:5d:26:45:fe:9a:1b:f4:c3:06:50:a4:1c:a0:26:69:
4b:69:96:28:b0:9f:d6:57:ac:2e:47:09:3a:69:f9:fd:09:0a:
2a:4d:e3:78:1b:b1:c9:c3:c6:4f:75:1c:4e:ee:8a:bb:c3:8c:
c4:4f:4d:f4:99:f3:0a:84:43:4d:cb:26:e1:1b:81:d8:02:7d:
98:1e:67:40:1a:15:cf:87:d9:18:78:5e:37:84:3a:b7:15:fa:
c0:1a:6a:91:72:45:51:c7:4d:e6:f9:2d:5e:ca:64:be:bc:70:
86:18:bb:92:22:f4:79:95:89:00:74:98:65:04:cd:c8:48:93:
ad:61:62:91:20:84:76:c2:d1:12:e2:fc:17:b3:db:c5:29:e2:
ff:c1:5a:b1:32:a7:b6:5a:2a:4d:20:b7:fe:52:9e:d5:19:40:
9b:71:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:56:04 2026 by rpki-client