Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR7HBCzMTM3WSEZd60w6Ac_MM0I.roa
File: eR7HBCzMTM3WSEZd60w6Ac_MM0I.roa (raw, json)
Hash identifier: agt8PYjwtgiYZOtclpw2V40kFtBbXsRQ8Z2Zt51o2MM=
Subject key identifier: 79:1E:C7:04:2C:CC:4C:CD:D6:48:46:5D:EB:4C:3A:01:CF:CC:33:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A19BD6BE4BC807C6A0828C761166D0270B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR7HBCzMTM3WSEZd60w6Ac_MM0I.roa
Signing time: Mon 02 Nov 2026 10:38:24 +0000
ROA not before: Mon 02 Nov 2026 10:38:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 78.17.127.0/24 maxlen: 24
89.125.97.0/24 maxlen: 24
104.143.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d6:be:4b:c8:07:c6:a0:82:8c:76:11:66:d0:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 2 10:38:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=791ec7042ccc4ccdd648465deb4c3a01cfcc3342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:25:a8:00:8a:5a:8b:79:f1:50:ff:77:c6:
b1:f1:5f:45:46:d6:32:84:7e:52:1f:55:95:1b:66:
6d:93:f5:8b:e4:7d:cb:fd:d0:96:fd:6a:ef:9d:00:
58:8d:25:9f:50:d1:a4:b8:e4:12:82:a6:8f:fc:22:
7b:38:e3:d7:82:d2:f9:cc:18:5a:6a:d2:7a:24:63:
eb:98:5f:85:36:7f:67:ac:09:a4:64:38:6d:c8:d8:
2f:34:59:76:e8:50:84:02:f6:4d:de:d3:37:bc:3d:
6e:68:97:7e:36:59:87:bf:37:2c:b4:32:b9:52:97:
4e:ef:3b:cc:1f:ce:32:ef:40:ba:0c:ee:2d:5e:bd:
c2:7d:3f:61:15:f0:a7:d6:ee:2d:33:c3:34:be:fc:
bc:ec:a7:63:9f:13:8d:e6:d1:c4:a3:34:1b:94:2d:
da:e6:89:5a:ab:49:97:ab:fa:26:a1:e2:4a:cb:c4:
aa:02:71:35:27:bd:74:9e:80:07:33:fd:17:f7:8d:
40:d2:9c:30:0d:ca:86:1b:ba:f0:59:68:98:43:a1:
a1:99:bf:1f:c8:a2:7e:d9:f2:a7:ef:c6:74:0b:1d:
97:59:e7:a9:8d:b3:2e:17:a7:f3:a9:16:7f:55:a9:
29:aa:6c:1c:88:ab:93:b6:7a:bc:f2:a3:74:8d:4a:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:C7:04:2C:CC:4C:CD:D6:48:46:5D:EB:4C:3A:01:CF:CC:33:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR7HBCzMTM3WSEZd60w6Ac_MM0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.127.0/24
89.125.97.0/24
104.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2e:be:a2:d6:a5:db:d0:b8:57:29:ba:26:f3:99:f5:64:d3:
03:0f:29:11:f5:d6:95:95:f1:8c:21:64:36:af:64:f1:31:e4:
af:f7:87:99:fe:ad:39:f2:f0:47:d9:72:b9:2e:6e:b6:a5:e2:
75:25:21:df:63:54:7b:4c:2d:e3:47:15:43:a4:ee:b3:9e:45:
9d:e2:43:2b:7e:2c:97:f3:ee:b9:8d:b7:2d:19:d0:86:cb:ee:
99:17:83:41:17:e3:fe:f6:41:da:ba:b2:2b:e2:1a:f8:32:9b:
ff:31:98:90:1e:a0:df:4e:a1:84:6f:e0:c5:dc:fe:62:6e:9d:
e3:2e:93:ab:66:f6:86:27:0b:f6:bc:e7:f7:fb:20:ca:98:37:
6b:03:ec:59:7f:40:c8:ba:2e:4a:ec:a9:78:6a:80:ae:87:a3:
71:10:46:48:8b:11:cb:41:8e:73:cc:13:69:17:cf:c8:95:26:
36:f7:b9:2e:46:18:29:b7:09:76:54:52:9d:72:33:5b:36:56:
dc:de:2b:78:11:9d:7b:80:37:94:d0:09:46:61:b7:15:a0:54:
78:3d:99:eb:6e:d0:8b:7c:b1:c4:f2:9a:5d:c2:6b:c8:53:0d:
eb:98:68:78:13:ae:f5:16:9a:84:51:81:10:92:5e:95:eb:d1:
9c:30:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:00:10 2026 by rpki-client