Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZkomqnDrPh5C9fH-PhFwMxNIb0.roa
File: _ZkomqnDrPh5C9fH-PhFwMxNIb0.roa (raw, json)
Hash identifier: LmX7IUJX1kWn8c6UAHzG61aKxNusOjlF7q4y2Mxk6sM=
Subject key identifier: FD:99:28:9A:A9:C3:AC:F8:79:0B:D7:C7:F8:F8:45:C0:CC:4D:21:BD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0A44F7EB5C45342088507790705928469
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZkomqnDrPh5C9fH-PhFwMxNIb0.roa
Signing time: Tue 15 Sep 2026 09:04:28 +0000
ROA not before: Tue 15 Sep 2026 09:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 78.17.94.0/23 maxlen: 23
78.17.174.0/23 maxlen: 23
78.17.210.0/23 maxlen: 23
78.17.222.0/23 maxlen: 23
78.17.226.0/23 maxlen: 23
78.17.230.0/23 maxlen: 23
78.17.232.0/23 maxlen: 23
78.17.236.0/23 maxlen: 23
89.125.46.0/23 maxlen: 23
89.125.132.0/23 maxlen: 23
89.125.134.0/23 maxlen: 23
89.125.182.0/23 maxlen: 23
89.125.194.0/23 maxlen: 23
89.125.228.0/23 maxlen: 23
89.125.232.0/23 maxlen: 23
162.35.246.0/23 maxlen: 23
162.35.248.0/23 maxlen: 23
162.35.252.0/23 maxlen: 23
167.17.36.0/23 maxlen: 23
167.17.42.0/23 maxlen: 23
206.245.140.0/23 maxlen: 23
206.245.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:4f:7e:b5:c4:53:42:08:85:07:79:07:05:92:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 15 09:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd99289aa9c3acf8790bd7c7f8f845c0cc4d21bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:73:83:ad:7c:ae:df:c0:be:85:b2:38:19:
8f:41:fb:08:59:34:0f:8d:9c:11:52:1d:17:c3:f7:
4b:29:8a:28:51:d4:67:5e:e3:f4:f4:da:63:15:b9:
07:d0:29:0a:39:22:a1:03:e3:c6:a3:dc:b4:a4:9e:
61:63:b4:8f:c5:8d:28:38:0d:63:5d:11:ab:63:2b:
31:74:7c:e0:42:8b:57:2c:fd:41:75:be:66:8c:31:
81:a6:a0:4e:66:85:88:4c:cb:83:34:2f:a9:4e:a1:
9a:6a:4d:77:d2:8a:d1:38:6d:79:78:be:8e:8a:52:
c5:c5:e2:19:40:a0:a7:d5:12:0e:a6:3b:30:67:27:
3c:35:99:e6:e6:45:e3:4c:c1:93:ae:ad:44:53:5e:
d3:ff:5d:fd:ef:c9:ce:dc:1c:4d:3a:45:f8:92:58:
93:01:08:99:75:d4:ee:fa:65:e0:f1:d3:30:03:46:
54:61:61:6f:42:d8:71:38:e8:94:9d:e2:70:96:d2:
2f:19:c4:d0:30:ca:0d:94:c3:3b:3e:cd:88:d2:76:
82:d2:35:b1:71:cc:63:28:01:10:68:85:04:28:21:
7c:24:5f:1f:c6:89:82:55:7c:e5:df:4d:70:5e:4c:
0d:59:b1:df:b1:30:ee:e1:ae:03:04:1d:82:e7:a0:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:28:9A:A9:C3:AC:F8:79:0B:D7:C7:F8:F8:45:C0:CC:4D:21:BD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZkomqnDrPh5C9fH-PhFwMxNIb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/23
78.17.174.0/23
78.17.210.0/23
78.17.222.0/23
78.17.226.0/23
78.17.230.0-78.17.233.255
78.17.236.0/23
89.125.46.0/23
89.125.132.0/22
89.125.182.0/23
89.125.194.0/23
89.125.228.0/23
89.125.232.0/23
162.35.246.0-162.35.249.255
162.35.252.0/23
167.17.36.0/23
167.17.42.0/23
206.245.140.0/23
206.245.148.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:f6:e2:cf:f8:01:ee:0e:10:8b:d8:3f:27:8b:32:c1:d8:b3:
bc:c5:d8:b7:c9:30:13:08:b9:80:c3:15:51:c8:90:a8:3b:1e:
10:32:6a:13:52:ba:22:ed:45:39:d9:87:6c:1c:79:a2:25:8d:
fa:61:d5:5e:5a:c1:db:37:87:1b:18:b1:5d:b3:f5:81:59:bc:
f5:3a:88:b4:02:41:f6:ca:eb:bd:8d:96:31:06:33:b1:e1:1a:
4d:0e:fd:dc:c9:14:03:c9:91:f0:af:74:24:fe:25:0b:d2:4f:
97:41:c9:66:17:79:7c:2d:0e:76:68:1a:75:e3:a2:06:f1:ad:
e1:37:3c:bf:99:19:a5:bd:e4:59:69:85:f1:bf:2f:40:73:2a:
80:25:77:3e:9b:10:24:80:0f:25:ec:f2:d3:83:60:0f:bf:e1:
43:e3:8a:7c:4a:aa:51:d4:ad:5d:95:e0:1b:06:17:e6:2a:4a:
d2:fc:ea:d1:f8:66:c1:30:17:f5:4a:a7:06:0a:d3:53:f3:ee:
03:c9:07:a2:b0:0c:a3:2a:57:3d:3c:45:1b:0c:94:28:f8:f3:
71:47:95:89:66:de:ca:1a:1e:38:e6:2b:15:cc:2a:01:3d:ae:
22:84:4c:14:13:cd:a2:93:66:08:f9:6a:e5:52:2a:c9:07:a9:
5c:d3:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:36 2026 by rpki-client