Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kMvwvW17-E-LzrwXDcTp9yW3enQ.roa
File: kMvwvW17-E-LzrwXDcTp9yW3enQ.roa (raw, json)
Hash identifier: XVPwrz2pM2ljR7SdoYiuKV4ejB0HfKo6NW3OxA+4dGc=
Subject key identifier: 90:CB:F0:BD:6D:7B:F8:4F:8B:CE:BC:17:0D:C4:E9:F7:25:B7:7A:74
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A070EE4D91988DFB044C19DDB5AD3EF8DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kMvwvW17-E-LzrwXDcTp9yW3enQ.roa
Signing time: Sat 05 Sep 2026 09:37:40 +0000
ROA not before: Sat 05 Sep 2026 09:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 78.17.197.0/24 maxlen: 24
89.125.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:ee:4d:91:98:8d:fb:04:4c:19:dd:b5:ad:3e:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 5 09:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90cbf0bd6d7bf84f8bcebc170dc4e9f725b77a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:a3:55:fd:46:92:d8:74:b6:37:47:d9:2e:
fd:33:a1:0d:ed:23:35:be:60:f4:9c:8a:46:ed:4b:
42:2a:31:63:e1:89:6a:2d:51:65:ed:5c:76:54:a0:
3c:91:02:7f:f4:64:57:26:24:1f:84:bd:a2:76:a7:
25:50:7e:86:5e:1d:e4:89:de:6f:63:d9:c2:aa:53:
18:e5:89:5b:b8:7b:ef:61:d0:e1:43:c8:c1:36:ba:
39:75:b3:82:de:87:83:13:a1:ff:b9:af:a7:dd:73:
1b:e0:47:8e:b0:51:e5:63:d8:7d:6a:e8:1d:bf:d8:
55:3b:28:60:ad:27:b3:7a:d1:11:ac:64:39:78:2c:
6f:5a:f0:8c:f3:bf:09:7d:c0:6e:da:3a:a3:ba:f5:
0c:b2:6c:e8:56:fe:53:dc:c5:a4:c2:c4:e2:6d:f1:
fe:99:3b:90:b3:8e:50:12:dd:d6:17:0a:80:d6:31:
8a:4a:71:15:14:de:e3:2e:c4:64:3b:84:12:44:66:
e9:fd:f1:16:b9:6e:00:8e:96:c9:d7:c6:c0:b5:56:
a7:03:d3:3a:29:b2:32:57:79:e7:c1:f8:fe:9b:1a:
fe:8f:e7:20:e3:b7:19:61:b8:55:9a:43:3b:d8:a8:
57:da:16:c5:ea:0d:1a:e4:37:66:9b:02:89:e2:93:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:F0:BD:6D:7B:F8:4F:8B:CE:BC:17:0D:C4:E9:F7:25:B7:7A:74
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kMvwvW17-E-LzrwXDcTp9yW3enQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.197.0/24
89.125.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0f:db:56:de:38:cd:5d:40:2d:a9:9e:42:20:bb:20:90:02:
79:10:7f:fd:c2:2b:04:7c:7a:08:3c:af:c5:90:52:14:2d:b8:
35:f2:35:8e:e4:67:74:30:0f:75:c3:63:c9:33:ba:c9:9e:2e:
0a:09:1a:e0:ba:cc:aa:fb:23:6a:eb:f1:8d:be:8d:9f:45:00:
1e:2d:aa:2f:ea:2c:81:20:7d:ad:f8:4e:4b:09:e7:f0:b5:95:
da:c3:14:dc:43:f7:31:ab:33:eb:d1:23:2c:c7:b8:ca:88:32:
c4:1a:39:c6:53:29:c7:89:27:be:cd:a8:36:eb:58:98:51:14:
4e:39:8e:38:3c:4f:9c:21:69:80:2d:fd:e5:b7:f0:e7:f2:76:
0d:2f:b8:31:d7:2a:88:13:41:17:62:0d:5f:7c:85:0e:e8:73:
25:fc:54:90:9c:4d:16:43:34:08:4d:54:a3:11:11:6a:71:25:
31:4d:37:42:b1:15:4d:cf:05:e7:82:f7:9f:81:fb:1b:ff:5b:
2e:8e:f1:13:78:6a:ee:6e:0c:ad:a5:c6:70:91:67:9c:23:7b:
fa:a7:5c:99:fa:67:d1:98:51:93:20:39:24:ce:43:84:09:b2:
9f:70:ed:a9:9f:03:ff:1c:a4:99:7a:54:c4:04:8e:b7:cb:73:
1b:22:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:05 2026 by rpki-client