Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vM2TcHdAwli-xJL-oxK-Bux7Gtg.roa
File: vM2TcHdAwli-xJL-oxK-Bux7Gtg.roa (raw, json)
Hash identifier: efDwC8gfbBd53SPTb155HIIVOMWmI13o7QW3wcn4Gh8=
Subject key identifier: BC:CD:93:70:77:40:C2:58:BE:C4:92:FE:A3:12:BE:06:EC:7B:1A:D8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0B3FB050599726A10EA9C2D5FE8E2CA62
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vM2TcHdAwli-xJL-oxK-Bux7Gtg.roa
Signing time: Fri 18 Sep 2026 10:06:07 +0000
ROA not before: Fri 18 Sep 2026 10:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.171.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.167.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
104.143.212.0/22 maxlen: 22
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
140.225.214.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
153.76.202.0/23 maxlen: 23
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:fb:05:05:99:72:6a:10:ea:9c:2d:5f:e8:e2:ca:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 18 10:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bccd93707740c258bec492fea312be06ec7b1ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:27:b9:a7:c7:39:ad:1f:ed:db:b3:4f:fe:
9d:4f:f6:5f:ec:72:8e:f9:c9:22:90:50:14:80:36:
08:fe:29:5f:4d:7b:b8:23:66:7f:de:3e:cc:94:23:
bd:fc:5a:ca:59:9d:02:cb:86:20:ec:34:7b:5c:59:
5e:64:ab:4a:11:e9:86:93:89:d5:c5:15:c7:bc:4a:
27:c4:17:04:9e:d4:95:56:3f:cf:8a:9c:86:eb:93:
85:3d:38:10:5e:c3:02:30:da:f5:f0:51:5b:10:33:
8b:5e:d5:a2:71:be:21:2a:ac:f7:71:17:b1:ec:59:
49:ad:34:e2:9c:19:08:83:1c:54:fd:41:ec:5e:7c:
0b:a2:a9:48:cd:0f:c1:b6:1d:bc:78:0a:70:6c:29:
b5:55:ff:8d:06:73:fe:39:78:c0:da:a8:83:ac:5d:
ee:cb:46:96:af:94:47:6a:64:d9:d3:50:0c:35:c8:
c9:73:f6:c2:cd:a3:a3:64:da:87:60:72:3b:08:4a:
4c:e8:96:b2:52:ea:4a:e4:a0:65:f1:c2:f1:1c:5c:
7a:62:8b:81:32:65:46:1e:4b:94:7d:d8:db:42:a0:
1b:88:5c:ba:cc:20:75:12:56:24:21:47:2f:6e:4e:
73:cf:ed:d9:7b:09:fd:82:76:c3:63:02:83:e7:d1:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:93:70:77:40:C2:58:BE:C4:92:FE:A3:12:BE:06:EC:7B:1A:D8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vM2TcHdAwli-xJL-oxK-Bux7Gtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.171.0/24
89.34.106.0/24
89.125.143.0/24
89.125.167.0/24
93.114.183.0/24
104.143.212.0/22
140.225.194.0/23
140.225.199.0/24
140.225.214.0/24
153.76.198.0/24
153.76.202.0/23
162.35.244.0/23
167.17.32.0/23
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e8:c6:a9:13:77:d8:e2:0b:c7:63:c1:3c:79:41:bf:35:88:
c4:a4:d1:be:a3:ae:ee:1b:e0:d4:6e:5f:27:3e:67:67:fd:a2:
c0:19:95:0f:ba:34:59:20:7b:96:c7:79:4d:2f:da:da:2c:e6:
e9:85:e5:fe:3b:64:17:82:61:84:37:5c:ff:fc:a7:c3:de:df:
d5:97:70:7c:d5:c7:4c:41:34:c9:35:a3:10:88:b8:79:c3:4d:
90:53:1a:5e:4c:64:90:a8:3e:8e:0f:5f:66:c8:38:31:59:9e:
e3:e4:ee:5c:a0:64:26:57:6a:9a:e2:9e:4a:d6:db:14:28:63:
8b:67:d9:e1:d0:cd:08:95:26:58:a4:3d:f8:90:df:12:fb:f7:
4a:ce:94:a6:70:2f:44:a6:f9:79:fc:12:b7:2b:49:9c:65:b6:
ad:99:40:41:07:40:fa:bc:9f:5f:21:0d:d9:01:4d:44:f1:12:
26:52:f1:c8:76:cd:4a:aa:b1:ae:73:a9:97:26:dc:50:20:69:
eb:05:97:bc:4e:24:54:62:f4:54:14:d1:8f:0c:81:94:08:01:
65:c7:9f:3d:ea:e3:cc:c9:ee:84:0b:3b:75:4e:cc:cc:51:0b:
73:a8:99:60:0a:e5:ab:29:01:dc:73:48:3b:3c:5f:fc:d2:e2:
fd:94:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:28 2026 by rpki-client