Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6XpeeFa0aNtrCsI-3-RXkfuPmk.roa
File: L6XpeeFa0aNtrCsI-3-RXkfuPmk.roa (raw, json)
Hash identifier: oJnU4rx0X/j/NbI2+jlyGNS5ElPaSLj+hh78/gSrGdc=
Subject key identifier: 2F:A5:E9:79:E1:5A:D1:A3:6D:AC:2B:08:FB:7F:91:5E:47:EE:3E:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0FC84689F9F51AC73727C58609B68BA29
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6XpeeFa0aNtrCsI-3-RXkfuPmk.roa
Signing time: Fri 02 Oct 2026 12:08:51 +0000
ROA not before: Fri 02 Oct 2026 12:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 78.17.171.0/24 maxlen: 24
78.17.177.0/24 maxlen: 24
89.125.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:84:68:9f:9f:51:ac:73:72:7c:58:60:9b:68:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 2 12:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa5e979e15ad1a36dac2b08fb7f915e47ee3e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:a1:d7:be:70:bf:e9:8d:25:2f:da:01:a8:
51:b1:b8:b8:5d:8b:fd:23:5a:58:3a:b8:50:c3:23:
d8:6b:dc:dd:08:cb:a0:28:07:e3:dc:ba:a9:db:bc:
ac:00:a9:f5:74:7a:0e:40:b0:36:58:6c:fa:fc:84:
af:24:1a:e1:d1:ce:a0:b7:8a:05:23:e8:f4:1d:d3:
83:07:26:aa:61:6d:48:cb:08:8d:f2:9e:0a:f1:7e:
86:77:62:8f:08:12:9c:ac:c5:7b:f0:64:c6:2a:17:
64:67:44:32:18:97:d7:a4:26:b6:8a:05:9f:70:f1:
c9:2e:84:e5:78:32:b0:ce:12:08:b5:10:41:59:9b:
d5:cd:23:29:06:67:d9:b1:60:f6:51:04:71:30:db:
01:fa:9d:ba:46:f3:a7:be:ca:f0:de:74:b7:7f:fb:
0e:f5:99:32:41:29:b5:69:f9:94:05:b9:e1:b6:e8:
48:c7:85:40:98:4c:09:ff:27:5d:a7:1f:5e:9c:03:
7f:51:bc:da:f2:6f:7e:7d:d0:54:53:ca:21:2d:f5:
dc:56:44:ce:b7:1c:dd:9f:8f:5a:32:85:72:e9:84:
eb:de:b9:a7:a1:ce:70:66:75:1b:81:47:46:7c:67:
10:8b:53:70:27:e1:d8:19:42:fc:2f:8c:95:4b:66:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:E9:79:E1:5A:D1:A3:6D:AC:2B:08:FB:7F:91:5E:47:EE:3E:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6XpeeFa0aNtrCsI-3-RXkfuPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.171.0/24
78.17.177.0/24
89.125.100.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bb:cf:b8:16:5d:2e:36:07:9c:82:57:f0:b5:82:d4:33:7a:
84:bd:66:cc:38:bb:5a:8e:5e:43:d7:53:f5:5f:90:3b:91:cb:
22:63:0c:67:c2:d7:dd:be:73:f4:f2:ce:e5:8b:66:47:c0:7a:
14:c2:bc:b6:3b:11:59:b8:c1:17:9e:11:58:4c:8f:d4:9c:ea:
35:0a:1c:32:07:82:cf:4d:2d:cc:20:a4:aa:13:c2:35:d3:0d:
1b:77:e1:39:e5:5c:8e:1a:f1:33:75:ba:f6:9f:1a:30:b7:06:
62:f0:a8:46:e5:3a:c9:09:b4:b9:96:d3:99:26:e1:1b:7e:a1:
bf:8f:24:a7:7f:58:02:56:ba:ae:d7:fe:88:48:c8:4c:90:6d:
a9:63:45:88:54:b1:b5:bd:f7:91:b4:74:09:06:54:4d:cd:df:
5c:82:8f:e4:0b:6b:19:a5:be:aa:75:21:2f:5f:67:45:9b:3f:
33:d7:8c:c9:5f:58:77:a3:18:ae:b7:58:2f:1e:2b:a7:aa:5d:
e9:ef:be:5c:5a:94:7c:4c:6c:d7:b0:1b:4b:bb:f9:cb:a8:22:
6f:05:f6:d1:f6:a4:59:87:8a:98:29:07:5c:bd:eb:aa:36:1d:
07:ca:ca:58:36:ef:36:4a:3d:cb:9e:17:9e:21:56:27:45:23:
98:41:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:45:16 2026 by rpki-client