Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hFLE73pnkvfU7ig6Jw1H4bJ_Tq4.roa
File: hFLE73pnkvfU7ig6Jw1H4bJ_Tq4.roa (raw, json)
Hash identifier: fHWITV6qjvw+gVRi4BftH5UAWFYQMVWieV4m/nUl+88=
Subject key identifier: 84:52:C4:EF:7A:67:92:F7:D4:EE:28:3A:27:0D:47:E1:B2:7F:4E:AE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A12C7C256D188CAC71E0CD75CE677CB1BA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hFLE73pnkvfU7ig6Jw1H4bJ_Tq4.roa
Signing time: Sun 11 Oct 2026 19:41:35 +0000
ROA not before: Sun 11 Oct 2026 19:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 78.154.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:7c:25:6d:18:8c:ac:71:e0:cd:75:ce:67:7c:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 11 19:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8452c4ef7a6792f7d4ee283a270d47e1b27f4eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:75:40:85:4c:bb:fa:22:1f:c5:ae:b6:99:
a0:1f:a0:7f:06:da:59:12:da:a5:8e:53:7e:9a:bd:
b0:33:b4:89:f3:1c:34:f1:a9:e4:bc:3b:01:7b:3d:
71:5b:e2:97:c4:0d:a0:54:50:1d:19:82:2d:09:28:
24:61:b8:08:5f:ae:f2:07:af:df:95:1e:b4:e5:ab:
12:00:cd:29:8c:95:4d:8c:5c:6b:38:3f:c0:0c:2a:
ce:dc:b9:04:87:11:7c:f4:fd:5c:e6:fc:46:6b:67:
96:7d:4a:d6:b6:4f:19:68:be:9a:e3:06:1d:d9:c8:
1a:53:9b:0a:80:9e:da:e3:83:de:24:d1:3b:b3:48:
53:4f:a4:e4:22:4f:44:16:a7:fd:b3:14:e9:f6:32:
b6:91:f4:34:26:6d:2c:57:3d:33:86:bb:34:2a:12:
a1:e5:b7:5b:4e:9f:67:f6:2a:eb:2a:e1:6e:4b:55:
6d:fa:fb:da:e7:cb:d8:84:86:75:4f:a7:bf:73:ac:
e0:d9:73:f0:05:54:53:33:8a:1a:65:c0:65:e1:e6:
f9:b6:89:5c:91:cb:f9:4d:a6:5f:a7:e3:52:02:15:
91:86:f2:5d:c2:37:2d:21:04:76:30:b7:65:45:15:
29:a8:e5:fa:48:8e:a0:ad:97:91:2b:d9:82:e4:eb:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:C4:EF:7A:67:92:F7:D4:EE:28:3A:27:0D:47:E1:B2:7F:4E:AE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hFLE73pnkvfU7ig6Jw1H4bJ_Tq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.122.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fc:87:0c:ef:38:1b:87:e4:78:91:7f:2a:3a:5c:93:61:0c:
c4:17:4c:a8:7f:be:df:60:d7:d9:c8:73:53:b3:25:91:0f:b8:
3b:eb:e3:71:5b:e9:b7:0d:7c:bb:7f:a1:bf:fa:12:09:86:4d:
43:1c:05:bc:ab:1c:1c:9d:1f:67:48:f0:32:09:1b:2c:21:5f:
f8:72:aa:bc:e7:67:dd:ce:fa:04:07:77:b8:a1:ea:42:a8:b1:
43:83:13:e9:e2:c7:6a:82:83:8e:0f:b8:fd:d7:bd:e8:1f:65:
68:f3:3d:db:c9:b8:2b:10:df:b9:79:47:ff:b5:52:9c:53:9f:
c6:15:9c:a4:60:ef:c7:d2:a9:3f:fe:27:42:85:69:ed:25:a8:
ee:c3:95:f2:41:49:9a:e0:1b:33:0d:65:38:0c:21:65:46:30:
2a:68:3a:59:d0:63:da:8f:4c:20:d7:16:e7:ff:7a:0e:5d:e2:
3e:7d:2b:bb:ba:a2:c3:d9:0a:3c:c4:ed:ad:2f:33:e8:09:73:
50:eb:d1:14:40:87:98:96:99:29:9f:b2:5c:25:b0:2f:54:b5:
aa:85:70:5d:63:2d:3b:19:99:41:88:20:f2:84:c1:09:46:ad:
10:d4:24:45:47:f7:63:2e:cd:98:a8:73:88:a1:d2:1d:ca:e4:
0c:c5:6b:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEsfCVtGIysceDNdc5nfLG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDExMTk0MTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDUyYzRlZjdhNjc5MmY3ZDRlZTI4M2EyNzBkNDdlMWIyN2Y0ZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y51QIVMu/oiH8WutpmgH6B/BtpZ
EtqljlN+mr2wM7SJ8xw08ankvDsBez1xW+KXxA2gVFAdGYItCSgkYbgIX67yB6/f
lR605asSAM0pjJVNjFxrOD/ADCrO3LkEhxF89P1c5vxGa2eWfUrWtk8ZaL6a4wYd
2cgaU5sKgJ7a44PeJNE7s0hTT6TkIk9EFqf9sxTp9jK2kfQ0Jm0sVz0zhrs0KhKh
5bdbTp9n9irrKuFuS1Vt+vva58vYhIZ1T6e/c6zg2XPwBVRTM4oaZcBl4eb5tolc
kcv5TaZfp+NSAhWRhvJdwjctIQR2MLdlRRUpqOX6SI6grZeRK9mC5OvA+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRSxO96Z5L31O4oOicNR+Gyf06uMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvaEZMRTczcG5rdmZVN2lnNkp3MUg0YkpfVHE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATpp6MA0G
CSqGSIb3DQEBCwUAA4IBAQCS/IcM7zgbh+R4kX8qOlyTYQzEF0yof77fYNfZyHNT
syWRD7g76+NxW+m3DXy7f6G/+hIJhk1DHAW8qxwcnR9nSPAyCRssIV/4cqq852fd
zvoEB3e4oepCqLFDgxPp4sdqgoOOD7j9173oH2Vo8z3bybgrEN+5eUf/tVKcU5/G
FZykYO/H0qk//idChWntJajuw5XyQUma4BszDWU4DCFlRjAqaDpZ0GPaj0wg1xbn
/3oOXeI+fSu7uqLD2Qo8xO2tLzPoCXNQ69EUQIeYlpkpn7JcJbAvVLWqhXBdYy07
GZlBiCDyhMEJRq0Q1CRFR/djLs2YqHOIodIdyuQMxWv/
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:50 2026 by rpki-client