Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcHT6VVcOwHh8KTx_oyIW6Uq2us.roa
File: JcHT6VVcOwHh8KTx_oyIW6Uq2us.roa (raw, json)
Hash identifier: vkQ09pwZuHhZX/htl3sNgR0/ecAFVfuwAp/jYm2+xcQ=
Subject key identifier: 25:C1:D3:E9:55:5C:3B:01:E1:F0:A4:F1:FE:8C:88:5B:A5:2A:DA:EB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A14300AA752C0B95590217FF613B5F24D9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcHT6VVcOwHh8KTx_oyIW6Uq2us.roa
Signing time: Fri 16 Oct 2026 04:37:59 +0000
ROA not before: Fri 16 Oct 2026 04:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 77.81.182.0/24 maxlen: 24
78.17.22.0/24 maxlen: 24
78.17.178.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
140.225.214.0/24 maxlen: 24
167.17.34.0/24 maxlen: 24
167.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:00:aa:75:2c:0b:95:59:02:17:ff:61:3b:5f:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 16 04:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25c1d3e9555c3b01e1f0a4f1fe8c885ba52adaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:85:f2:06:a4:86:51:6e:e3:b0:fd:34:53:
48:c8:55:24:d4:e5:3a:f3:6c:b8:f5:e7:81:33:69:
d2:10:90:33:a0:0d:60:ff:0d:ba:b3:7b:1b:58:13:
71:22:1a:9d:e0:ca:81:7f:57:71:90:69:7d:0b:fe:
f2:b8:a0:38:4c:b6:cf:cb:de:dd:27:0b:64:0a:d9:
9d:35:a7:28:f4:f7:0c:f3:4e:d5:8d:d6:c9:8c:2b:
a5:d3:4e:ee:df:05:56:5b:15:df:19:9e:65:50:a6:
c5:25:27:34:89:28:58:f4:49:82:bc:c7:34:68:9b:
3b:8b:ed:9a:f0:03:74:46:a5:72:0a:d9:dd:64:14:
70:b6:b8:2e:f5:f8:d3:08:48:16:a2:68:cc:59:02:
2e:42:8b:8f:f0:1b:05:b0:c3:7c:ea:27:83:27:89:
09:89:4f:a6:d6:84:94:46:b9:52:20:6f:fe:ff:5a:
b1:bc:68:02:2c:4e:23:9d:50:be:6f:df:9a:07:91:
a1:ae:19:76:c4:c0:c2:f6:c0:1c:fc:e8:14:01:e6:
6c:5c:4b:a3:b3:49:d8:8c:e2:ad:b2:f9:5d:1a:c0:
1b:ca:93:b2:d0:28:0b:49:bf:35:53:32:51:f7:9f:
03:7f:0d:13:b3:61:c0:7b:f7:49:99:41:4c:76:ca:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:D3:E9:55:5C:3B:01:E1:F0:A4:F1:FE:8C:88:5B:A5:2A:DA:EB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcHT6VVcOwHh8KTx_oyIW6Uq2us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
78.17.22.0/24
78.17.178.0/24
93.118.36.0/24
94.198.171.0/24
140.225.214.0/24
167.17.34.0/24
167.17.58.0/24
Signature Algorithm: sha256WithRSAEncryption
08:19:88:6b:9f:9d:03:5e:47:74:38:d1:0e:08:b5:0f:55:97:
a9:67:51:e4:3d:aa:27:e1:46:63:d5:a6:46:3a:0d:56:1a:16:
3b:d1:a1:47:c6:53:b0:f8:69:40:dd:32:84:e8:25:a1:ff:93:
08:66:c3:1e:96:3c:b4:67:8e:3b:e2:c6:66:79:92:84:83:89:
a5:a3:af:d8:b1:70:17:71:19:3b:76:2e:fb:dc:8e:2f:19:ff:
c3:35:65:37:b5:60:bc:6b:7b:bf:39:c6:f1:dc:ab:cc:d2:10:
65:8f:04:b6:5e:b5:56:b6:5a:4a:7e:94:2e:bb:77:bd:11:b2:
a4:44:fe:cc:f6:29:28:84:c0:a2:10:6d:72:0c:35:48:0c:80:
68:35:fd:3a:86:6d:99:2d:89:02:7b:c4:6a:dc:c9:8c:87:cf:
fc:5f:39:c1:cd:d6:80:33:ca:9e:70:da:ce:56:79:66:25:aa:
de:d5:be:5b:9c:50:6d:3c:95:ec:db:a9:91:79:8f:b4:ba:bf:
98:ef:06:9c:02:09:07:92:5c:9f:57:63:5c:47:b6:41:6b:d3:
38:17:ac:36:e1:8e:b6:40:ef:81:85:91:d5:16:e2:f9:e4:e1:
75:c9:20:39:03:24:28:7c:fd:fb:b1:f9:8b:4b:d2:93:2a:f9:
e4:31:db:f9
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaFDAKp1LAuVWQIX/2E7XyTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDE2MDQzNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWMxZDNlOTU1NWMzYjAxZTFmMGE0ZjFmZThjODg1YmE1MmFkYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4uF8gakhlFu47D9NFNIyFUk1OU6
82y49eeBM2nSEJAzoA1g/w26s3sbWBNxIhqd4MqBf1dxkGl9C/7yuKA4TLbPy97d
JwtkCtmdNaco9PcM807VjdbJjCul007u3wVWWxXfGZ5lUKbFJSc0iShY9EmCvMc0
aJs7i+2a8AN0RqVyCtndZBRwtrgu9fjTCEgWomjMWQIuQouP8BsFsMN86ieDJ4kJ
iU+m1oSURrlSIG/+/1qxvGgCLE4jnVC+b9+aB5Ghrhl2xMDC9sAc/OgUAeZsXEuj
s0nYjOKtsvldGsAbypOy0CgLSb81UzJR958Dfw0Ts2HAe/dJmUFMdsqprQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCXB0+lVXDsB4fCk8f6MiFulKtrrMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSmNIVDZWVmNPd0hoOEtUeF9veUlXNlVxMnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATVG2AwQA
ThEWAwQAThGyAwQAXXYkAwQAXsarAwQAjOHWAwQApxEiAwQApxE6MA0GCSqGSIb3
DQEBCwUAA4IBAQAIGYhrn50DXkd0ONEOCLUPVZepZ1HkPaon4UZj1aZGOg1WGhY7
0aFHxlOw+GlA3TKE6CWh/5MIZsMeljy0Z4474sZmeZKEg4mlo6/YsXAXcRk7di77
3I4vGf/DNWU3tWC8a3u/Ocbx3KvM0hBljwS2XrVWtlpKfpQuu3e9EbKkRP7M9iko
hMCiEG1yDDVIDIBoNf06hm2ZLYkCe8Rq3MmMh8/8XznBzdaAM8qecNrOVnlmJare
1b5bnFBtPJXs26mReY+0ur+Y7wacAgkHklyfV2NcR7ZBa9M4F6w24Y62QO+BhZHV
FuL55OF1ySA5AyQofP37sfmLS9KTKvnkMdv5
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:50:07 2026 by rpki-client