Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SPC-eryBppl7kEe_LTsJIMUMedI.roa
File: SPC-eryBppl7kEe_LTsJIMUMedI.roa (raw, json)
Hash identifier: mhhgn4ay8iyhmwkxIUj0Gq4ydj1ge/fbjpL8jYdSKIs=
Subject key identifier: 48:F0:BE:7A:BC:81:A6:99:7B:90:47:BF:2D:3B:09:20:C5:0C:79:D2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0BED4BB06B02A2ABA17C610B663CD15F1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SPC-eryBppl7kEe_LTsJIMUMedI.roa
Signing time: Sun 20 Sep 2026 12:40:07 +0000
ROA not before: Sun 20 Sep 2026 12:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 78.17.62.0/24 maxlen: 24
89.125.96.0/24 maxlen: 24
89.125.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:d4:bb:06:b0:2a:2a:ba:17:c6:10:b6:63:cd:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 20 12:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48f0be7abc81a6997b9047bf2d3b0920c50c79d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:28:8c:b9:15:97:56:2c:e1:3d:12:bc:d2:
d3:f0:98:66:b4:57:eb:59:b3:6a:84:fb:fd:ee:8d:
69:d1:67:cb:62:8d:01:f1:9c:b6:0d:bd:21:9c:db:
df:75:4c:5e:10:c9:e1:0c:c5:b1:28:e7:7c:06:46:
24:f0:af:33:50:29:5a:8a:be:1e:88:ac:95:4d:a9:
2d:ee:95:13:eb:87:ef:44:05:a4:6a:3d:a7:9e:6a:
2b:6b:e5:91:8b:d5:8b:9a:3c:ac:d9:64:ec:f8:96:
08:af:db:66:09:47:85:32:a5:d5:f0:9b:1f:bb:b7:
53:58:23:61:b0:72:26:25:67:9c:d4:5f:43:2c:aa:
79:fd:a1:d7:ca:1c:88:02:42:a6:dd:1c:82:c9:4f:
52:99:c3:20:67:e0:29:19:47:cf:37:84:72:43:3c:
23:98:41:3d:47:80:a2:ab:49:a7:41:c7:11:cc:53:
17:46:15:7a:c2:5d:7c:9e:af:1c:bf:02:b8:c4:67:
f6:78:79:e1:4e:fe:d0:37:c0:a7:ca:84:6c:2a:15:
4a:50:f3:01:2b:af:a1:cd:f9:af:89:a8:eb:69:d4:
7f:8a:ab:c4:76:15:2b:a6:20:27:25:25:56:7f:91:
31:da:40:88:16:86:bc:81:6b:ef:92:55:be:5e:dd:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:BE:7A:BC:81:A6:99:7B:90:47:BF:2D:3B:09:20:C5:0C:79:D2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SPC-eryBppl7kEe_LTsJIMUMedI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.62.0/24
89.125.96.0/24
89.125.154.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e3:97:79:23:13:e0:30:ab:a0:e9:ac:75:c4:f9:97:e1:12:
ec:33:1e:f4:81:80:ed:99:0a:4d:c5:61:b2:b2:18:40:45:9f:
7d:65:b3:d9:39:97:95:26:31:e2:58:4b:fb:a3:17:5c:15:0b:
65:58:03:a3:79:65:a9:69:d9:60:a9:05:89:b8:1a:bb:4b:c5:
eb:f2:92:80:52:18:62:28:22:98:28:47:88:e4:d0:4c:38:59:
07:4e:85:4c:cf:08:2b:ec:fc:e5:42:ac:22:5c:83:12:b5:bd:
e7:6f:84:2c:e6:19:76:f3:58:38:c3:60:5d:55:1f:9a:bf:d0:
c2:e5:ca:f0:a7:f4:c0:28:ac:be:57:a0:9a:28:85:f0:88:b7:
00:d2:81:92:e6:b2:a3:88:23:55:d7:35:c8:87:db:b0:7a:50:
e5:cb:93:54:b1:88:1e:2a:8a:41:2d:d3:62:45:2b:1e:2d:7a:
ae:7b:ba:f1:36:76:89:c3:ed:89:ba:b3:e1:5a:85:cf:4e:be:
5f:16:41:77:3d:3e:dd:7b:c1:2f:3f:5d:18:c2:51:90:5b:d8:
1c:b8:a0:56:d1:c6:11:7b:db:92:b2:81:e0:6e:25:bd:f6:4a:
86:3e:8a:a0:eb:c3:25:59:58:c1:72:82:25:1d:0f:d7:5e:08:
1e:c2:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:47 2026 by rpki-client