Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6YijCOKymcrxUpRNfGdaCyZGCIQ.roa
File: 6YijCOKymcrxUpRNfGdaCyZGCIQ.roa (raw, json)
Hash identifier: A1Z3Ci848jhTSYxea2YrpKZVhaPF+2MowMPYYAihbsc=
Subject key identifier: E9:88:A3:08:E2:B2:99:CA:F1:52:94:4D:7C:67:5A:0B:26:46:08:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A06CB252EE7B42520073A3582BAD00B8A8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6YijCOKymcrxUpRNfGdaCyZGCIQ.roa
Signing time: Fri 04 Sep 2026 13:53:40 +0000
ROA not before: Fri 04 Sep 2026 13:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 78.17.26.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.12.0/24 maxlen: 24
89.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b2:52:ee:7b:42:52:00:73:a3:58:2b:ad:00:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 13:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e988a308e2b299caf152944d7c675a0b26460884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:19:dd:53:8b:b3:5e:66:95:fa:b8:6f:d7:
3a:bf:f8:cb:b0:c3:2a:02:eb:7e:11:02:8b:5d:bd:
11:ee:c4:52:32:cf:16:6c:61:c6:0e:77:3b:05:23:
fe:e9:61:4f:8e:ae:d4:e8:b9:0a:fd:5c:4a:9d:fe:
6b:55:59:cb:69:dc:ee:c0:e2:6d:ca:10:27:47:e3:
21:77:17:1c:a3:d3:d5:5d:7a:11:70:96:b8:72:c6:
73:31:46:1b:61:a3:4e:75:24:3c:b1:9c:9b:16:88:
80:f5:a3:be:5d:54:2c:1d:dd:1d:fb:86:02:c3:e3:
6f:cf:8a:84:f8:8e:c7:9b:81:98:2d:a3:62:81:b9:
1d:0e:c4:0d:86:e1:60:00:d0:3b:cc:32:ce:3b:fa:
63:e4:74:53:ea:b0:8e:c5:57:c5:23:42:1c:66:af:
dc:31:db:6b:6d:22:d6:bb:f5:a8:90:93:ac:e8:fd:
de:8b:a4:67:d5:1d:68:72:3b:7a:7b:2f:46:0c:ab:
63:f8:91:1c:3b:98:3f:fa:0d:1a:5e:9c:46:c0:cd:
1b:21:1b:75:bf:de:46:a9:e7:e3:f9:3c:00:ca:94:
4e:77:23:cf:42:70:ec:86:e8:41:07:91:cd:96:c4:
ee:55:0d:f7:d4:07:68:29:5f:ee:cf:db:e4:dd:8f:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:A3:08:E2:B2:99:CA:F1:52:94:4D:7C:67:5A:0B:26:46:08:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6YijCOKymcrxUpRNfGdaCyZGCIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.26.0/24
78.17.69.0/24
78.17.108.0/24
89.125.12.0/24
89.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:67:77:78:28:1d:56:31:7d:94:38:e1:bd:b9:9d:a6:45:d5:
ca:af:2e:7f:a0:c7:06:5f:70:ac:58:9f:f0:2b:13:b1:bd:77:
62:dd:e6:6f:f8:8b:08:5d:cc:3d:8a:d3:ea:93:65:b5:12:9b:
f2:55:bd:9a:64:3b:3b:1e:d7:51:f4:e1:31:8b:62:90:e1:b5:
d0:b9:36:74:62:b5:4f:07:69:fd:74:47:1b:9f:e8:20:14:8c:
66:a8:6c:96:a0:dd:f7:b1:ab:c0:04:7b:63:ee:2b:a0:35:88:
f0:e6:b1:ba:64:23:52:87:6f:e0:c5:f8:97:f4:1c:53:22:8a:
eb:c3:77:43:be:80:eb:fe:fa:01:0f:8a:4f:94:bd:09:68:7f:
3b:fd:76:f7:27:13:e7:e1:5e:d3:8d:20:9a:40:1e:1e:28:0e:
13:78:31:b0:4e:85:3b:12:a9:39:b7:f2:3f:21:2b:e4:d5:b3:
a2:d8:d8:a0:a0:94:fa:ec:f4:54:31:00:1b:58:33:2c:d6:e8:
c9:64:b4:6d:75:eb:e5:76:f5:ac:f8:c4:19:39:97:db:54:11:
7e:90:b4:3c:ae:6d:31:6a:3e:dd:43:2e:99:e7:0b:25:67:a9:
63:da:53:18:c1:3d:c1:16:bb:23:85:27:34:61:2e:99:be:81:
eb:c0:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:39 2026 by rpki-client