Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_pIY4UyclgXJm4p6gIDOUaNgNTE.roa
File: _pIY4UyclgXJm4p6gIDOUaNgNTE.roa (raw, json)
Hash identifier: L/1IvcOa3pHQDXsmHrSKWgKReHP70Ohn3E55MfTYjJE=
Subject key identifier: FE:92:18:E1:4C:9C:96:05:C9:9B:8A:7A:80:80:CE:51:A3:60:35:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0A44F7DD9820D9AAE1C8C5E751D1A4054
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_pIY4UyclgXJm4p6gIDOUaNgNTE.roa
Signing time: Tue 15 Sep 2026 09:04:28 +0000
ROA not before: Tue 15 Sep 2026 09:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 78.17.48.0/22 maxlen: 22
78.17.204.0/22 maxlen: 22
89.37.195.0/24 maxlen: 24
89.125.224.0/23 maxlen: 23
92.114.93.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:4f:7d:d9:82:0d:9a:ae:1c:8c:5e:75:1d:1a:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 15 09:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe9218e14c9c9605c99b8a7a8080ce51a3603531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:0f:9a:f8:1c:fb:fa:7b:88:b3:9a:10:84:
30:00:d6:09:70:d5:de:0f:38:4a:71:2b:ae:f7:c4:
55:de:ed:9f:ab:a0:e4:db:23:32:cf:a2:c9:6b:6b:
4b:00:e4:33:01:d0:01:f5:4b:f5:fe:5f:52:61:90:
ed:59:0e:bc:bd:62:cc:98:bd:02:2b:22:7f:11:e2:
75:1d:80:16:04:2d:f9:e9:c7:23:24:5c:e1:df:f3:
1b:ce:4b:52:53:0d:aa:0f:a7:29:09:35:14:9b:cc:
5c:c2:be:3f:c9:1b:0e:88:4e:a1:68:8f:c4:bb:ef:
3c:0c:68:a4:fb:ec:65:06:5e:82:bc:63:bb:cc:fc:
12:58:06:94:03:87:42:c8:03:09:c6:27:0f:45:1a:
b1:05:27:66:5f:da:58:c8:eb:0e:3a:b0:62:c1:e5:
b8:57:eb:27:30:b5:c7:b9:bc:07:11:da:20:0a:71:
3c:e1:4d:14:8d:38:e1:b9:9e:ca:c3:ec:40:de:d0:
51:70:0a:c3:c6:ff:cf:db:55:cf:e0:f3:de:75:08:
27:9b:67:c3:dc:4d:b1:17:94:50:d5:6f:90:37:c7:
19:8e:18:6e:2e:37:4b:d4:0c:08:d4:67:1d:61:e7:
c3:07:d5:8b:b5:a8:38:c3:a4:80:01:f3:a2:9c:7d:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:18:E1:4C:9C:96:05:C9:9B:8A:7A:80:80:CE:51:A3:60:35:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_pIY4UyclgXJm4p6gIDOUaNgNTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.48.0/22
78.17.204.0/22
89.37.195.0/24
89.125.224.0/23
92.114.93.0/24
93.114.244.0/24
194.135.30.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5d:c2:a2:c4:00:c1:1f:d0:cf:2b:95:79:b1:29:d1:03:5b:
08:4d:4d:2c:ec:8d:8a:7a:21:36:45:dd:86:27:c4:ee:e5:fc:
29:ac:a1:8a:85:7b:af:2a:49:39:c5:b4:19:a1:54:ce:6a:ae:
ed:7e:08:96:bc:5d:ca:c5:a9:fa:15:73:3a:d1:1b:4a:30:84:
a1:62:14:d4:33:c4:97:d6:62:c4:17:3b:ec:76:24:5a:92:b9:
fc:38:66:f5:ca:20:c3:b6:70:90:ec:40:38:35:86:a4:1e:b7:
87:15:e0:be:c5:8e:45:93:b1:91:fc:60:52:05:e7:74:4d:ae:
e3:59:74:8d:6e:78:78:c2:a0:b4:1d:0a:49:a3:5f:b0:f9:8d:
0d:5b:5e:e8:39:91:93:39:da:fb:2b:00:17:c3:8e:5f:32:ae:
0a:64:aa:89:3e:9f:ce:9f:4c:c3:4f:af:29:cc:66:ad:48:36:
c0:27:ab:d5:c8:a8:82:da:e7:f2:0a:c0:94:ad:eb:93:46:09:
f8:10:87:15:9c:c2:e6:77:a3:72:0b:ed:85:d7:f8:4c:63:bb:
01:d9:83:c9:47:31:34:51:97:30:97:d8:3e:e6:ed:d7:eb:65:
50:d9:74:bb:88:d2:3f:35:18:68:d3:1f:ba:98:7e:4c:33:8b:
2a:7a:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:38 2026 by rpki-client