Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u5i8rJj9gXjqgPXGTDGj_CYhUUE.roa
File: u5i8rJj9gXjqgPXGTDGj_CYhUUE.roa (raw, json)
Hash identifier: f5qdbjy3wSWH1jEYd/jVa5oPv5NHVI3KSTWVb//HlcM=
Subject key identifier: BB:98:BC:AC:98:FD:81:78:EA:80:F5:C6:4C:31:A3:FC:26:21:51:41
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F21B2A7F6A789376108A0EA7DF0602F81
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u5i8rJj9gXjqgPXGTDGj_CYhUUE.roa
Signing time: Thu 02 Jul 2026 07:19:44 +0000
ROA not before: Thu 02 Jul 2026 07:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 78.17.70.0/23 maxlen: 23
78.17.212.0/23 maxlen: 23
89.125.50.0/24 maxlen: 24
89.125.66.0/24 maxlen: 24
89.125.69.0/24 maxlen: 24
89.125.187.0/24 maxlen: 24
89.125.209.0/24 maxlen: 24
89.125.255.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:b2:a7:f6:a7:89:37:61:08:a0:ea:7d:f0:60:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 2 07:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb98bcac98fd8178ea80f5c64c31a3fc26215141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:9e:df:a3:81:60:86:19:b7:cd:1d:83:26:
24:db:95:fb:40:04:bf:87:a0:d0:a5:41:79:08:57:
2a:e8:75:2e:77:72:8b:15:a8:68:4f:cd:c2:6a:3f:
c1:33:b9:f1:42:b6:5e:da:fe:25:8b:ac:18:a8:54:
cb:e5:2b:bf:47:b4:86:92:c0:2d:96:74:77:be:53:
df:32:8b:b3:fa:c9:61:e1:fa:68:79:a0:41:ac:c6:
9c:59:72:c5:cd:f0:67:fe:f4:ed:34:04:de:8a:49:
c3:fa:7f:dc:03:e3:75:a6:22:69:2a:27:30:2a:7c:
7f:44:d3:df:9b:df:41:5f:bc:41:41:b6:cb:df:0c:
65:c3:61:40:95:ee:24:fb:3d:6a:2d:8e:97:ab:66:
44:5b:ee:b8:71:82:b5:ba:25:25:17:33:13:d2:ca:
86:ba:b8:96:df:6c:78:d2:19:96:39:c0:31:f4:b1:
0c:9d:77:8a:7f:4b:aa:48:a5:7c:d6:77:46:af:e9:
fb:04:b7:b6:a3:92:9b:dc:af:e1:bc:a1:a4:c0:45:
ee:11:36:31:d0:0b:85:e8:f8:2d:0a:96:31:5a:cd:
98:d5:af:0a:0e:df:cf:16:7b:e4:db:d7:05:40:57:
dc:98:7e:c2:c8:94:b6:9c:88:70:ed:0f:5b:f0:ff:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:BC:AC:98:FD:81:78:EA:80:F5:C6:4C:31:A3:FC:26:21:51:41
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u5i8rJj9gXjqgPXGTDGj_CYhUUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.70.0/23
78.17.212.0/23
89.125.50.0/24
89.125.66.0/24
89.125.69.0/24
89.125.187.0/24
89.125.209.0/24
89.125.255.0/24
103.245.231.0/24
185.198.234.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:c6:b1:f5:c9:11:92:4a:f0:3c:59:96:15:66:3e:12:c3:
46:58:d2:7e:9e:89:69:11:dd:22:f3:a3:c5:59:b4:56:89:f1:
df:24:a2:9b:2d:c7:e5:27:dd:b7:5a:67:3b:6d:73:fe:09:31:
65:2b:2f:1c:04:61:24:be:1f:5c:b9:4c:cd:0a:58:81:e3:26:
ab:07:3e:c7:3d:e8:a0:6d:fa:2c:9a:25:29:af:66:42:e2:fc:
a7:8a:cd:cf:9f:4d:33:a3:c7:29:a5:e3:f8:8c:90:cc:08:c5:
c4:ec:8e:74:14:11:9c:24:3d:f9:31:d9:fe:68:25:55:cf:42:
86:9c:e2:85:9f:66:c1:55:ae:bd:ef:73:00:6e:2e:c6:92:ef:
38:34:11:6f:73:bd:c1:37:3e:c5:dd:24:99:82:84:e2:22:ee:
11:63:4a:99:08:07:83:25:36:49:30:23:76:ef:34:97:3b:c2:
75:80:d0:92:50:2b:3f:05:4f:24:6b:11:e1:7d:f9:67:26:59:
cc:6a:ec:4a:e0:6e:eb:ee:ef:12:ea:eb:4c:33:39:16:ab:ec:
03:08:42:36:d8:e4:4b:30:27:37:89:ca:4b:29:57:da:35:82:
05:d5:6a:ee:fe:38:8e:49:c3:c8:ef:e1:ad:bb:30:e2:83:29:
4c:b5:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:39 2026 by rpki-client