Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-nJhUyLT6g7zcfmRFIY01D9_dRY.roa
File: 1-nJhUyLT6g7zcfmRFIY01D9_dRY.roa (raw, json)
Hash identifier: pd+GBwMsfFpCAmyUJ1wMk+nxex/BhIdoK9Ip5peA3G4=
Subject key identifier: FA:72:61:53:22:D3:EA:0E:F3:71:F9:91:14:86:34:D4:3F:7F:75:16
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCE44B0C8007F3FDDC8AE7C0256D878C0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-nJhUyLT6g7zcfmRFIY01D9_dRY.roa
Signing time: Tue 04 Aug 2026 19:33:55 +0000
ROA not before: Tue 04 Aug 2026 19:33:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 78.17.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:44:b0:c8:00:7f:3f:dd:c8:ae:7c:02:56:d8:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 19:33:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa72615322d3ea0ef371f991148634d43f7f7516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:b8:a0:03:38:12:79:7f:55:63:3b:e8:db:
5a:bb:c1:0d:99:9f:bf:ef:cb:e1:b2:2b:1d:e3:94:
2a:0b:21:24:e3:dc:cb:11:97:33:22:2f:fb:5a:f8:
10:81:d3:15:91:41:83:08:e5:ce:57:9c:3d:15:c5:
a3:b4:f7:26:4c:b6:5f:b4:47:55:5a:dc:69:83:98:
d2:50:b5:0c:2e:9c:03:7b:03:83:f7:f8:df:f2:b3:
40:a2:f5:b5:eb:a4:0a:cc:e7:30:3d:59:5d:d5:df:
9c:5f:8d:28:30:f4:91:9b:77:65:ab:6b:7f:aa:f8:
2e:04:3c:41:2a:ac:67:53:c0:6d:bf:bf:83:29:55:
ba:d6:9d:69:0f:67:a7:55:59:50:54:c3:e4:a8:53:
7f:34:b1:f8:10:88:f1:5f:a2:0e:92:04:0a:f2:f5:
b0:6e:ca:b0:0e:d5:c1:96:69:49:b5:f8:86:51:6f:
4a:ab:71:88:50:9e:04:11:63:d1:23:6d:5b:b5:00:
19:ae:47:1c:71:84:65:d6:7c:dd:63:38:6f:bb:99:
99:8a:9d:11:6a:d0:3f:10:66:e1:23:50:82:8e:cc:
77:d9:67:f4:86:19:7e:4e:b7:35:58:9d:ac:3f:c0:
b6:82:ab:d9:c0:78:18:95:33:c8:85:d1:6b:ce:01:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:61:53:22:D3:EA:0E:F3:71:F9:91:14:86:34:D4:3F:7F:75:16
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-nJhUyLT6g7zcfmRFIY01D9_dRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.177.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3b:c0:9a:17:5b:7f:f1:e8:61:61:09:42:58:40:e5:73:11:
49:4e:f2:ad:2d:94:a5:18:2d:ca:b2:d1:1d:c6:db:44:15:a8:
be:3f:d3:78:20:e1:c9:73:9f:12:a8:cb:71:29:61:5d:dc:99:
71:e5:b5:9c:3e:92:d7:95:4e:47:a9:99:06:bc:68:58:e9:03:
fb:d4:6f:dc:73:66:69:54:0b:b6:be:44:1f:d6:5a:68:5e:38:
90:df:61:3e:26:e8:a9:fc:f1:2c:1d:c2:20:89:31:da:a4:bf:
c9:3f:bc:88:37:97:cc:ec:e6:bc:95:37:ea:31:53:3b:e7:a5:
16:28:ee:5e:92:3a:ff:1d:3d:bb:b9:9a:8c:00:6a:9d:13:24:
f7:6b:49:94:87:d1:6b:bd:de:26:2a:9b:30:2c:68:b4:f0:6b:
70:44:b2:d4:93:f0:f3:69:8b:5b:cd:5f:33:37:e3:30:95:81:
43:a1:6f:d2:01:6c:73:c2:64:de:2c:51:95:2f:70:b0:6e:47:
74:e8:8a:4a:06:13:ef:d9:95:61:da:12:53:e2:6d:e0:5a:a0:
da:96:38:11:35:3e:9a:21:62:18:f5:26:24:3f:6e:8e:ff:b4:
18:62:b9:80:c6:dd:6b:dd:36:ac:ba:25:4a:cc:4e:86:e9:5a:
a6:14:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:49 2026 by rpki-client