Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qZvuHR3CkWPMd3VVAHLgWrQZVWE.roa
File: qZvuHR3CkWPMd3VVAHLgWrQZVWE.roa (raw, json)
Hash identifier: t6IfCL0UhqYc2hlgPsVpXWZBX0skcrSBlRhkyesLAxM=
Subject key identifier: A9:9B:EE:1D:1D:C2:91:63:CC:77:75:55:00:72:E0:5A:B4:19:55:61
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A19DBEB990974A59A71D9F10C3402A1ADA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qZvuHR3CkWPMd3VVAHLgWrQZVWE.roa
Signing time: Mon 02 Nov 2026 19:31:24 +0000
ROA not before: Mon 02 Nov 2026 19:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218589
IP address blocks: 78.17.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:be:b9:90:97:4a:59:a7:1d:9f:10:c3:40:2a:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 2 19:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99bee1d1dc29163cc7775550072e05ab4195561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:7b:c8:af:cf:6b:44:6e:46:4a:c8:58:de:
80:02:91:a4:10:b1:6c:f5:ec:4a:f9:f0:2f:e6:f0:
34:57:17:14:c0:a4:0f:20:5a:9d:d9:a3:5a:9b:3e:
c4:99:0a:d8:22:c4:68:f9:9a:75:77:32:9d:3d:19:
28:3e:cb:ef:50:e1:3d:17:2a:4f:f2:83:b9:fb:3e:
c1:73:b2:8f:65:ff:89:89:2f:e8:f4:5c:18:31:61:
80:ea:66:11:9a:b3:31:42:3b:c9:5c:9b:53:26:9e:
50:9e:93:b7:c7:66:44:e3:1e:9c:de:47:d4:50:96:
ed:ab:d6:88:5d:bd:98:d9:cb:9a:31:81:17:f5:57:
77:8d:ed:a2:9a:36:ba:3a:7a:93:7d:5d:77:20:1d:
df:fc:e5:cf:ce:5a:46:08:15:73:7a:65:9d:70:f0:
ef:a3:e1:09:b5:70:ae:92:e7:d6:e9:03:8f:4e:fc:
cf:22:8f:56:7d:0b:09:25:09:db:a5:29:12:f7:c7:
4b:9d:c5:c7:05:3c:67:9c:11:49:4a:e2:c7:33:66:
a8:51:52:de:93:e7:49:b8:fa:b4:f2:74:7a:d6:92:
7e:f4:b8:13:c0:10:0c:63:51:7f:1d:71:e3:57:61:
93:52:f9:36:25:ba:c2:c3:29:e2:17:f4:b4:3f:28:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:EE:1D:1D:C2:91:63:CC:77:75:55:00:72:E0:5A:B4:19:55:61
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qZvuHR3CkWPMd3VVAHLgWrQZVWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:25:74:ad:57:da:f9:ef:e4:07:48:78:c0:3d:1a:8d:cc:82:
21:97:7b:b8:df:1c:ef:7d:07:66:71:40:1b:81:27:9c:8f:4d:
e3:dd:56:99:8c:d8:30:af:d5:04:1f:f9:7b:dc:d7:d7:87:20:
22:5f:fd:27:2d:98:58:92:88:6f:cf:ec:40:0c:06:87:50:37:
7b:07:4e:6c:0e:c3:07:86:6e:c6:f7:05:74:86:f5:09:f9:21:
f7:fe:ac:43:d3:f9:30:d5:ee:17:09:48:66:1f:36:51:87:1a:
d0:81:81:c0:94:9a:07:69:c1:b3:1e:84:92:b8:8c:96:50:85:
db:be:fa:cc:9c:75:2b:56:61:65:89:86:9c:41:74:88:80:d3:
19:55:ad:8d:a8:22:81:4d:47:54:6a:d1:e2:66:93:d0:1b:ae:
a9:56:40:61:2d:d6:68:5e:13:3c:5a:67:bb:5e:a1:06:1f:69:
e5:7a:b0:c0:50:66:93:2d:2e:f2:cb:ed:d4:ec:67:e7:60:7f:
39:c3:81:47:44:4d:24:48:2f:8b:3a:22:05:3b:15:26:c6:1d:
9d:e2:de:93:45:4a:db:01:c0:66:d8:e0:e7:90:b2:ee:fd:b5:
40:86:a5:2c:a2:ac:86:fb:0b:28:a6:b2:2c:06:dc:b4:d8:ae:
f0:67:6a:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGdvrmQl0pZpx2fEMNAKhraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTAyMTkzMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTliZWUxZDFkYzI5MTYzY2M3Nzc1NTUwMDcyZTA1YWI0MTk1NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX97yK/Pa0RuRkrIWN6AApGkELFs
9exK+fAv5vA0VxcUwKQPIFqd2aNamz7EmQrYIsRo+Zp1dzKdPRkoPsvvUOE9FypP
8oO5+z7Bc7KPZf+JiS/o9FwYMWGA6mYRmrMxQjvJXJtTJp5QnpO3x2ZE4x6c3kfU
UJbtq9aIXb2Y2cuaMYEX9Vd3je2imja6OnqTfV13IB3f/OXPzlpGCBVzemWdcPDv
o+EJtXCukufW6QOPTvzPIo9WfQsJJQnbpSkS98dLncXHBTxnnBFJSuLHM2aoUVLe
k+dJuPq08nR61pJ+9LgTwBAMY1F/HXHjV2GTUvk2JbrCwyniF/S0PyiJEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmb7h0dwpFjzHd1VQBy4Fq0GVVhMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcVp2dUhSM0NrV1BNZDNWVkFITGdXclFaVldFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThHBMA0G
CSqGSIb3DQEBCwUAA4IBAQAMJXStV9r57+QHSHjAPRqNzIIhl3u43xzvfQdmcUAb
gSecj03j3VaZjNgwr9UEH/l73NfXhyAiX/0nLZhYkohvz+xADAaHUDd7B05sDsMH
hm7G9wV0hvUJ+SH3/qxD0/kw1e4XCUhmHzZRhxrQgYHAlJoHacGzHoSSuIyWUIXb
vvrMnHUrVmFliYacQXSIgNMZVa2NqCKBTUdUatHiZpPQG66pVkBhLdZoXhM8Wme7
XqEGH2nlerDAUGaTLS7yy+3U7GfnYH85w4FHRE0kSC+LOiIFOxUmxh2d4t6TRUrb
AcBm2ODnkLLu/bVAhqUsoqyG+wsoprIsBty02K7wZ2qG
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:42:43 2026 by rpki-client