Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/c_HA-Etv_DK7ul5tohMAiJot_i8.roa
File: c_HA-Etv_DK7ul5tohMAiJot_i8.roa (raw, json)
Hash identifier: zyYGhNMoS9O7fILOo1+yEJ54d1b+X8Iees0YTM640r4=
Subject key identifier: 73:F1:C0:F8:4B:6F:FC:32:BB:BA:5E:6D:A2:13:00:88:9A:2D:FE:2F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A126E183675B87DA97E421A70F0B7922B0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/c_HA-Etv_DK7ul5tohMAiJot_i8.roa
Signing time: Sat 10 Oct 2026 17:34:35 +0000
ROA not before: Sat 10 Oct 2026 17:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 78.154.108.0/24 maxlen: 24
78.154.114.0/24 maxlen: 24
217.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:e1:83:67:5b:87:da:97:e4:21:a7:0f:0b:79:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 10 17:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73f1c0f84b6ffc32bbba5e6da21300889a2dfe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:19:40:af:de:90:7a:28:32:3b:76:6c:b8:
6c:1f:18:d0:ce:e5:88:89:38:fc:02:78:66:01:90:
d8:79:a2:07:e3:d1:08:75:e6:8e:0e:69:cc:99:4f:
32:0a:80:2f:4c:02:27:e1:56:e9:a8:a9:89:ba:a2:
3c:81:8d:6a:3a:59:a3:da:d5:2f:bf:50:09:59:8f:
94:b7:f2:4e:46:e2:ab:5e:8d:5c:b3:9c:c6:66:ad:
7f:05:a1:66:e4:1e:5e:c2:d5:c6:af:70:bb:18:5b:
5a:34:c2:49:d2:32:3b:94:64:bd:a0:a2:b9:3c:0f:
1c:cf:cd:55:c6:ca:c7:9c:a6:93:cb:39:56:f8:35:
7f:8e:1e:18:bc:9c:03:79:42:3c:cf:84:6f:83:55:
86:b1:d4:e8:8a:d0:65:17:db:ec:1d:f0:16:02:7c:
ad:ac:cc:25:a2:de:8b:c1:ef:af:0c:7f:76:1e:9a:
c1:7e:91:34:9a:37:91:64:63:1f:80:24:64:8c:93:
72:a9:e4:88:97:59:b2:68:bd:65:30:37:68:89:94:
93:6b:2b:d2:4c:aa:9f:3d:f3:0a:6c:ae:f8:ab:79:
d9:5b:64:cb:b9:9c:d1:f1:a4:bb:fb:d2:3a:24:3c:
fc:29:e8:a5:5c:db:56:0c:70:64:63:7f:05:4f:46:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:C0:F8:4B:6F:FC:32:BB:BA:5E:6D:A2:13:00:88:9A:2D:FE:2F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/c_HA-Etv_DK7ul5tohMAiJot_i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
78.154.114.0/24
217.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:cb:1c:b2:13:99:43:3d:c0:f8:58:e3:b4:28:66:b6:4e:
bb:a6:9d:34:df:92:85:89:86:fc:ca:00:45:6d:cd:c8:e0:3f:
ea:c4:c7:bf:a5:4b:66:97:cd:3a:db:e5:ca:73:ed:2c:bc:57:
f6:1b:b1:b3:98:fc:3c:df:06:ad:88:92:18:4d:86:e2:04:6c:
cf:48:f1:8b:9e:61:a3:5f:2e:e4:74:d2:48:4f:4e:8f:37:75:
4c:ef:39:34:a9:91:6c:cf:ac:19:50:46:71:f7:33:ba:65:3a:
71:ea:b9:28:4d:de:10:7f:1c:8c:ed:3d:2f:5b:c4:d1:e8:f8:
27:59:31:d4:c1:c5:46:af:ea:8d:8a:d9:34:eb:77:ed:33:c3:
c0:cb:de:c5:f7:cb:16:19:66:01:8c:16:c4:6e:3e:54:d5:4d:
88:10:5b:38:41:3a:3c:a3:c8:08:8e:b6:6f:73:87:1c:18:35:
46:07:a2:67:89:d0:77:3e:47:d8:f5:7f:66:a0:01:7f:9f:6f:
bd:35:72:c4:31:d7:05:66:27:57:12:8f:64:5e:f5:bd:8f:40:
b1:26:76:1d:f2:5a:ca:05:cb:ab:85:c5:65:cc:1f:03:34:75:
f2:36:ad:00:e1:ec:d0:a6:2c:5a:65:3c:6d:1e:09:5c:f4:34:
0d:7f:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:36 2026 by rpki-client