Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6sSaMocn7tnEjSRvcvmTMQWLCM.roa
File: K6sSaMocn7tnEjSRvcvmTMQWLCM.roa (raw, json)
Hash identifier: QYUjdvjsdO7uc6q+BJibwFRJDjSPYfYCZDWvAcxtfbo=
Subject key identifier: 2B:AB:12:68:CA:1C:9F:BB:67:12:34:91:BD:CB:E6:4C:C4:16:2C:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F55CDE30B38B84D1A2BB08FCD62612CA6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6sSaMocn7tnEjSRvcvmTMQWLCM.roa
Signing time: Sun 12 Jul 2026 10:09:44 +0000
ROA not before: Sun 12 Jul 2026 10:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63018
IP address blocks: 78.17.88.0/22 maxlen: 22
78.17.164.0/22 maxlen: 22
89.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:cd:e3:0b:38:b8:4d:1a:2b:b0:8f:cd:62:61:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 12 10:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bab1268ca1c9fbb67123491bdcbe64cc4162c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:75:ee:1e:11:5d:4b:15:10:9a:8c:9a:65:e4:
54:a7:a7:ad:58:0b:5d:1d:aa:43:af:4c:09:e6:42:
6a:7d:17:a7:cc:cb:f7:61:74:0e:45:0c:4e:ac:da:
1b:70:77:a7:03:95:c0:15:8a:0a:dc:08:ae:2b:b9:
a1:92:25:2f:37:1a:70:d8:c4:19:a7:34:26:4f:5e:
c7:b7:6e:e1:62:08:6a:9b:d2:22:e3:aa:7f:75:69:
67:11:f3:cc:eb:fc:da:cb:51:64:0a:0b:56:8b:0c:
4c:21:98:df:d2:06:eb:d5:55:82:fb:dd:f8:f9:ef:
98:b4:d6:cf:af:7d:ac:77:f8:07:77:24:9e:63:7f:
36:a3:1a:27:78:b5:86:a9:96:27:46:d9:2f:d8:2a:
c4:a8:39:59:6d:e4:b1:c3:74:c6:b6:84:4a:fe:95:
f2:d6:6f:11:e9:ba:61:8d:e9:05:2b:88:08:db:9b:
4f:ee:44:32:07:6c:49:a0:f3:59:e8:a6:02:cd:b7:
5d:31:b4:fa:c9:61:50:6c:2b:da:0d:ab:d0:4b:05:
57:59:dd:d6:f7:f4:ba:89:68:77:d8:fb:b0:42:fe:
36:0c:99:84:ba:94:64:72:bf:a0:33:de:42:74:19:
b0:e6:3c:7d:a9:1a:6b:45:55:a5:f5:de:39:e8:ef:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:12:68:CA:1C:9F:BB:67:12:34:91:BD:CB:E6:4C:C4:16:2C:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6sSaMocn7tnEjSRvcvmTMQWLCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.88.0/22
78.17.164.0/22
89.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:2c:2d:70:07:92:03:c9:a3:62:4f:14:16:48:85:10:07:e4:
f0:b3:06:84:d0:61:8d:19:d7:18:41:72:47:5b:58:06:99:34:
ab:76:ea:eb:3b:69:6d:64:d0:50:3a:c2:06:ba:f0:19:9a:a3:
56:ea:0b:a3:bc:6f:aa:83:41:49:c2:26:a8:31:81:a9:e4:b9:
8c:23:97:69:fb:df:f6:a9:86:c3:c0:99:08:77:f7:40:3f:e7:
a3:4b:8a:67:57:99:71:48:ec:cc:9d:7c:0c:fe:5e:f2:62:f2:
6e:59:9c:96:7d:13:cc:3d:fb:b7:fc:d0:10:f6:84:85:99:0c:
d5:77:bf:c2:fa:dd:70:4a:23:f4:8d:9e:9e:33:5f:4b:26:8e:
46:cb:60:f8:f4:10:77:49:89:13:4b:b4:b7:62:e0:62:d2:f1:
1d:18:c7:62:09:1e:09:ce:b6:d9:e0:e0:e9:61:85:48:a1:0f:
d7:37:68:31:fd:39:c5:40:be:ac:b3:f0:65:4c:f1:b9:8f:8c:
cb:80:77:0e:a9:66:d5:9d:2b:4e:63:dd:f1:7a:45:19:77:3d:
bd:85:6a:99:1b:ff:a2:01:9d:97:fa:a0:2b:d1:f5:21:c1:15:
b9:80:8a:08:c7:ef:9b:7e:80:fa:72:03:18:14:e0:94:18:1e:
ec:f3:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:24 2026 by rpki-client