Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gQEtuZ62oTIGCADZ7c2Hs5mCcb0.roa
File: gQEtuZ62oTIGCADZ7c2Hs5mCcb0.roa (raw, json)
Hash identifier: einW/Ea+6xdKuWWLH5khFml+0COvazV4YKsS215BV3k=
Subject key identifier: 81:01:2D:B9:9E:B6:A1:32:06:08:00:D9:ED:CD:87:B3:99:82:71:BD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F12582E7FC912874466062F0E98F02AF0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gQEtuZ62oTIGCADZ7c2Hs5mCcb0.roa
Signing time: Mon 29 Jun 2026 07:46:36 +0000
ROA not before: Mon 29 Jun 2026 07:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 78.17.23.0/24 maxlen: 24
78.17.25.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:58:2e:7f:c9:12:87:44:66:06:2f:0e:98:f0:2a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 07:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81012db99eb6a132060800d9edcd87b3998271bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:81:7b:7e:d8:7b:b5:f0:96:9f:50:fd:2e:
28:25:72:91:29:59:20:2f:df:48:3e:f0:b1:fc:5e:
de:e7:db:b7:b2:b1:43:86:07:6f:33:af:ff:76:1a:
cc:4a:3b:b7:53:7e:73:17:ef:67:a6:64:d6:1c:e8:
a2:72:29:7f:11:12:fd:ef:87:a0:62:3e:d0:fa:f3:
79:e9:5d:4d:f2:10:94:5b:53:e4:3c:d7:32:3a:d7:
bd:49:18:f7:63:1e:e2:d8:32:03:70:53:8f:99:40:
4e:87:35:ad:a3:6d:a8:52:4d:ea:a0:5a:e9:2b:e4:
78:d9:58:6c:d9:aa:ec:c0:75:09:64:e0:28:cb:3e:
8b:fd:82:3c:29:1d:75:25:02:22:ef:2c:31:75:71:
32:f1:50:d1:c0:7e:c2:30:a2:e1:45:0d:25:39:73:
ba:58:93:c4:04:d0:8b:eb:a8:1c:e1:b6:86:b8:63:
83:3c:85:d5:10:50:be:df:a4:3a:7a:75:c4:95:cc:
9e:c4:8a:cc:bb:77:4b:39:9e:f7:a4:cd:53:73:cd:
2f:1a:aa:87:65:52:0c:fd:23:59:29:c5:fd:73:84:
7e:22:97:a0:0b:95:48:5a:a3:ff:bf:1b:99:30:f6:
93:5f:a3:e9:da:25:34:b1:96:e1:f9:30:ec:4e:f3:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:01:2D:B9:9E:B6:A1:32:06:08:00:D9:ED:CD:87:B3:99:82:71:BD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gQEtuZ62oTIGCADZ7c2Hs5mCcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.23.0/24
78.17.25.0-78.17.26.255
78.17.69.0/24
78.17.108.0/24
89.125.12.0/24
Signature Algorithm: sha256WithRSAEncryption
08:00:62:0e:dd:d7:77:cd:d3:14:98:d5:fb:e1:31:fb:ab:6d:
db:62:12:48:19:5b:28:9b:ab:4d:c0:ab:cf:d4:f5:b9:ee:67:
c6:4e:b4:6d:45:9b:80:0e:37:1c:d3:16:d5:3b:05:bc:a1:d8:
b4:30:77:00:a5:d3:dd:94:f0:f5:fa:76:fc:f0:05:04:2e:e3:
da:4d:1c:52:ec:46:ca:9d:28:21:89:2b:b8:6c:e9:bf:3b:b5:
85:ab:03:36:6e:34:61:ea:3b:9f:c1:d6:1d:d3:1b:e3:4a:a7:
d7:d3:58:96:b9:07:e8:1a:03:20:39:01:7e:77:fd:47:ce:13:
3c:f5:85:c8:02:5e:e9:d4:bb:9b:32:d3:f4:c6:66:06:cf:63:
df:02:ce:86:13:c1:e6:62:26:4a:28:8d:f0:29:85:13:05:e8:
32:58:f8:0b:74:39:b3:a5:6a:f9:87:58:05:7c:af:f0:d1:07:
5f:db:88:31:09:8b:af:ac:64:71:5c:76:f4:e6:d1:ae:98:39:
e4:95:61:3d:0f:6d:76:a6:8a:b0:56:a1:83:ee:e8:e2:fb:52:
e1:24:28:e8:9b:b5:11:10:ab:5f:72:b4:e2:d3:25:e5:78:18:
7f:ae:f5:e4:45:93:7e:4c:57:4a:6b:dd:c7:1b:5b:1d:82:9a:
e2:f5:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:25 2026 by rpki-client