Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UIaYvF1xj0JchKvLX2xZ8xA_Z9s.roa
File: UIaYvF1xj0JchKvLX2xZ8xA_Z9s.roa (raw, json)
Hash identifier: JLHgncBJ+IdwAAAQRJcgMMTP72grfGq+0+q1ye5INzI=
Subject key identifier: 50:86:98:BC:5D:71:8F:42:5C:84:AB:CB:5F:6C:59:F3:10:3F:67:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A08B775289B2C65129ACE3E9723944FC02
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UIaYvF1xj0JchKvLX2xZ8xA_Z9s.roa
Signing time: Thu 10 Sep 2026 13:17:28 +0000
ROA not before: Thu 10 Sep 2026 13:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 78.17.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:77:52:89:b2:c6:51:29:ac:e3:e9:72:39:44:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 10 13:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=508698bc5d718f425c84abcb5f6c59f3103f67db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:76:d4:b6:c7:27:45:43:a1:19:d5:65:cc:
a4:2f:ad:43:9e:6e:67:f2:9a:b2:aa:6b:ae:91:fc:
7d:6f:90:02:6e:f2:ba:27:b2:f2:00:c5:a1:ec:f6:
76:20:86:74:d3:d7:34:69:af:b3:6d:01:23:f0:5e:
30:c1:bd:7a:dd:74:29:5c:4c:ba:de:27:ea:b4:86:
fd:ef:32:0b:9e:d1:6f:6b:ea:e3:36:fb:61:90:10:
66:e4:67:33:dc:64:15:d4:53:fd:7f:6a:11:5c:f9:
05:8b:6d:86:ae:0f:6e:e2:ee:28:5a:89:27:1b:80:
33:ae:c6:8d:cc:e9:f7:58:8a:4a:07:4f:87:94:20:
b2:e8:31:96:44:2f:c1:ab:09:d2:e3:0e:38:e7:5f:
39:6c:59:0f:ca:6a:5a:7b:c7:34:1b:55:0c:37:d9:
40:70:4a:2c:70:b3:30:0d:a5:bf:46:97:1e:b9:a7:
a0:00:ed:d4:91:fc:40:de:2f:1a:42:c2:13:91:c1:
a8:56:b9:3c:8a:01:9a:87:33:f4:1f:bd:da:bb:33:
99:cc:30:12:17:ce:d0:68:81:8e:96:b5:0b:90:f6:
c7:73:02:88:3c:db:b3:bb:77:71:6f:eb:29:09:74:
d7:04:d2:81:12:f3:9d:07:40:83:8c:6a:5b:bc:cb:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:98:BC:5D:71:8F:42:5C:84:AB:CB:5F:6C:59:F3:10:3F:67:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UIaYvF1xj0JchKvLX2xZ8xA_Z9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.25.0/24
Signature Algorithm: sha256WithRSAEncryption
54:64:ab:73:b1:8d:de:4d:36:b0:82:4e:c6:b5:48:4e:69:11:
22:65:6f:e4:1c:d3:47:d3:20:32:83:ec:f7:d3:6e:d8:96:a3:
88:5b:f0:92:65:49:e6:42:dc:65:0b:51:9b:29:b1:20:87:7d:
19:d5:b7:dc:7e:f7:b8:a4:71:df:69:38:48:73:4b:8c:18:39:
15:5c:ac:de:0c:fd:6b:a4:e2:95:4d:11:bd:f7:60:9a:38:32:
ad:ee:2e:b8:6e:99:fd:64:a8:e6:fe:85:d0:66:bc:b4:5e:ae:
a7:03:46:db:c1:7e:b9:ba:63:d7:cf:bc:d7:bd:c5:1f:56:71:
07:ff:32:71:19:31:ff:82:13:44:1f:73:36:7a:f2:81:7d:a6:
c6:39:9e:ca:5f:c4:85:bd:f2:0c:8b:53:e7:56:f2:6d:b7:a6:
c5:34:b8:cb:08:07:42:79:a0:0a:6e:42:68:94:a8:fd:b8:3d:
6e:fa:f6:d4:66:a9:8a:56:0b:33:02:b2:e4:94:e0:9d:12:8f:
24:ba:bf:50:80:6a:e2:fb:11:d3:36:9d:32:e6:07:f0:ab:f0:
68:61:47:fc:f3:99:a6:5b:82:ce:91:1b:9e:ae:ff:ad:2e:ac:
96:17:9f:88:7d:88:57:9e:40:20:30:83:e3:83:ef:45:bc:6e:
33:28:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:23 2026 by rpki-client