Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3eun7TuAaMAY2Cfmfy2qejMgzSQ.roa
File: 3eun7TuAaMAY2Cfmfy2qejMgzSQ.roa (raw, json)
Hash identifier: lrVnVeBjXxDFVHeB638jYYVzY2wq5+tdrvm4vymdRjo=
Subject key identifier: DD:EB:A7:ED:3B:80:68:C0:18:D8:27:E6:7F:2D:AA:7A:33:20:CD:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A13987A5B60FBF1B476D2DF321313BCADA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3eun7TuAaMAY2Cfmfy2qejMgzSQ.roa
Signing time: Wed 14 Oct 2026 08:29:13 +0000
ROA not before: Wed 14 Oct 2026 08:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 78.17.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:87:a5:b6:0f:bf:1b:47:6d:2d:f3:21:31:3b:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 08:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddeba7ed3b8068c018d827e67f2daa7a3320cd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:9c:66:f1:8d:fa:92:f8:71:5f:1c:7a:f6:
cd:e6:c1:94:97:73:ee:cb:29:97:44:7a:0b:44:fe:
4f:19:bf:5b:c5:94:0e:c9:92:76:ee:95:26:4e:8f:
db:85:7d:ef:80:3b:1c:2f:48:c7:06:fd:89:be:ed:
8e:56:f1:cc:ec:7d:b9:01:41:1d:f0:29:56:68:66:
3e:20:0f:3e:c7:ff:30:bf:f6:0d:c1:28:bc:7a:b0:
7b:cd:f3:10:d3:c5:6c:72:9d:35:47:e4:87:fe:ce:
0f:ea:38:b0:80:00:9e:0b:40:3c:54:8e:fd:16:f9:
1d:b4:17:47:be:24:b4:ec:0c:bd:4d:af:69:24:86:
28:ad:5e:fc:83:98:51:18:17:52:f8:13:f2:97:22:
11:65:94:5f:8c:46:9f:c4:f4:04:86:eb:5d:ea:26:
2b:54:df:09:ba:6c:0b:cc:eb:18:2b:70:55:c5:cc:
17:d9:f6:e5:69:01:ab:c9:18:85:fc:c3:94:39:75:
6a:ef:95:7e:52:dd:af:0f:77:fa:34:9c:54:5e:18:
41:33:87:14:c2:21:a8:34:5f:55:d8:8d:d9:9b:a7:
c4:f0:22:e8:ad:b8:0b:6e:04:0f:48:3d:86:1d:67:
6e:53:b2:b3:80:43:18:cb:3f:25:a2:91:a2:f8:48:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:A7:ED:3B:80:68:C0:18:D8:27:E6:7F:2D:AA:7A:33:20:CD:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3eun7TuAaMAY2Cfmfy2qejMgzSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:0b:09:7a:00:ff:24:bd:0e:a2:1e:05:af:c6:49:03:f2:
07:f2:b2:b6:f6:be:e0:69:0a:91:b4:bd:ea:e6:5d:bd:62:be:
93:74:d5:c5:dd:db:95:0b:cc:30:87:a6:36:15:8a:4e:ea:66:
84:13:d1:80:c3:7d:71:48:15:cc:1b:a1:98:89:c1:70:92:15:
c2:a4:cd:46:d4:ce:1c:12:a3:f6:6d:9f:92:d8:85:11:9e:0d:
04:9e:2b:4f:38:22:ec:7b:cb:e3:13:07:1a:45:06:f2:f2:1b:
1f:97:89:85:eb:ea:8b:e6:10:7c:56:05:43:49:65:18:ed:31:
20:ca:f0:a0:ad:b3:4a:f2:37:ae:7e:e1:06:bd:7a:eb:8e:b4:
6e:a4:9f:00:3b:ef:8b:d2:ca:09:2f:e5:65:6e:07:b2:b9:15:
f7:00:c3:fa:12:7e:bb:00:9f:67:ce:dd:a0:23:58:ae:fc:4d:
ac:45:4d:e5:10:58:d3:fc:95:dd:64:9d:90:7d:5a:86:64:2e:
71:7a:98:0b:1b:68:f7:19:7e:3f:5d:5b:db:5a:bf:12:63:4c:
8b:88:c4:32:8e:69:94:e6:b0:44:62:8c:d2:d6:0b:06:e1:98:
5b:e5:94:85:83:84:42:c0:e1:dd:4a:0f:b1:a2:04:52:db:a5:
56:39:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:33:58 2026 by rpki-client