Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1--hiUTrEckgrpBP2C9AhPZaLCuU.roa
File: 1--hiUTrEckgrpBP2C9AhPZaLCuU.roa (raw, json)
Hash identifier: hZosXMGFTMCsg0ali2MoomLaNUOKXPKxuZkEtuBYPHI=
Subject key identifier: FB:E8:62:51:3A:C4:72:48:2B:A4:13:F6:0B:D0:21:3D:96:8B:0A:E5
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 01A16459F370A95D9EAC70DAFAFD70AA6458
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1--hiUTrEckgrpBP2C9AhPZaLCuU.roa
Signing time: Thu 22 Oct 2026 16:02:58 +0000
ROA not before: Thu 22 Oct 2026 16:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200220
IP address blocks: 78.138.9.0/24 maxlen: 24
79.132.133.0/24 maxlen: 24
79.132.135.0/24 maxlen: 24
185.178.231.0/24 maxlen: 24
2a0b:7140:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:59:f3:70:a9:5d:9e:ac:70:da:fa:fd:70:aa:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Oct 22 16:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbe862513ac472482ba413f60bd0213d968b0ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:51:ea:89:06:c7:63:0d:25:20:07:d1:a8:
a6:e7:12:dc:58:73:29:1d:5e:0e:03:66:1c:71:d8:
c2:6f:a0:00:04:7e:c2:ba:ad:6f:c9:a6:e8:2f:90:
f9:59:be:e8:9f:a5:76:5f:98:2a:e0:43:d4:2b:3c:
0e:63:9e:5b:77:0c:be:d6:4a:f3:a6:c6:ad:07:ff:
9a:9a:32:d7:c2:66:64:1c:41:3b:2f:84:c9:9e:67:
f9:38:a1:f5:94:74:a3:bc:8e:f1:ba:6c:0f:3f:52:
be:43:e0:78:ae:ab:46:8d:2f:4c:2d:c7:e3:d7:da:
30:55:70:3b:a2:ad:0a:63:8c:87:37:f8:ed:d3:79:
54:95:47:90:b4:e1:d9:52:9a:cb:44:bf:fb:5e:e6:
89:ba:1f:8d:83:62:e8:58:ae:aa:19:f7:23:5f:a3:
e4:52:3f:db:44:99:7f:f6:e6:73:c0:26:74:a1:13:
51:7d:98:1b:d1:51:b2:1a:2f:e2:e9:72:ec:3c:1f:
30:1b:bf:a1:cc:65:db:97:2d:4e:ab:1a:c1:21:54:
a6:8a:fa:4d:78:f5:c7:4f:cd:a5:77:09:54:41:8d:
9b:79:16:1e:35:38:18:e8:fe:5d:43:f4:5e:a6:93:
50:89:7f:c9:8e:d2:1a:3a:72:4d:0f:f3:04:dc:16:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:62:51:3A:C4:72:48:2B:A4:13:F6:0B:D0:21:3D:96:8B:0A:E5
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1--hiUTrEckgrpBP2C9AhPZaLCuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.9.0/24
79.132.133.0/24
79.132.135.0/24
185.178.231.0/24
IPv6:
2a0b:7140:9::/48
Signature Algorithm: sha256WithRSAEncryption
77:a7:09:7b:71:7d:d7:45:5a:99:b6:1b:a6:9b:87:f1:7c:18:
bb:bb:e3:bd:60:e8:87:11:3c:f1:e7:fa:a1:5b:50:fa:59:4f:
91:22:c6:04:17:a3:23:51:02:af:52:38:72:d3:1d:b1:aa:64:
2e:d4:46:b6:c8:26:31:46:62:31:14:66:c5:b1:74:30:ca:6a:
21:43:c9:ea:53:9a:db:86:aa:06:8b:92:a0:29:59:e6:ec:29:
02:60:09:c0:1f:54:7e:ad:13:54:98:44:53:4d:16:40:de:7a:
81:e9:a1:a5:f8:e2:27:3d:13:60:da:c1:bb:18:b9:1e:05:f0:
6b:e9:5d:e4:d0:c9:dc:c8:39:0e:eb:f1:cf:45:84:18:df:84:
9a:c8:b1:83:9f:46:f4:dd:f6:e7:ae:7e:9a:03:64:ec:51:a8:
e3:eb:f1:3c:1f:8a:09:28:0f:e0:5b:e0:97:24:f5:5c:c1:c2:
78:b1:4a:d5:42:6b:cf:1d:ec:26:a0:5b:f2:f7:9e:f7:fc:fc:
15:48:7c:3f:32:33:7f:de:7a:ea:d0:a5:77:76:55:69:dc:40:
fb:cc:80:90:bc:c2:74:09:65:d4:aa:6a:67:e7:ea:b6:86:d7:
f4:a4:f5:c1:59:77:12:1e:33:a0:2d:e3:b6:cf:18:66:d7:72:
1a:12:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:45 2026 by rpki-client