Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvR2UVMdaHkITdoN6XnVXx7QEgw.roa
File: MvR2UVMdaHkITdoN6XnVXx7QEgw.roa (raw, json)
Hash identifier: 1rToGEPOLordYeWOUCM/Q5yqzhdLVaZErsg5DZTHEko=
Subject key identifier: 32:F4:76:51:53:1D:68:79:08:4D:DA:0D:E9:79:D5:5F:1E:D0:12:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF0951BB5CE8C4B9B7B527975FECD5E3A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvR2UVMdaHkITdoN6XnVXx7QEgw.roa
Signing time: Tue 11 Aug 2026 11:28:51 +0000
ROA not before: Tue 11 Aug 2026 11:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219177
IP address blocks: 78.17.194.0/23 maxlen: 23
78.17.242.0/23 maxlen: 23
206.245.138.0/23 maxlen: 23
206.245.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:95:1b:b5:ce:8c:4b:9b:7b:52:79:75:fe:cd:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 11:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32f47651531d6879084dda0de979d55f1ed0120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:81:c0:5e:f7:4d:aa:23:34:22:bc:c4:92:
36:9e:d4:1a:b7:b0:17:d7:c4:90:f0:46:be:f9:e9:
ed:f9:d1:d4:e5:cd:fe:9a:6d:af:20:15:20:f3:68:
ec:de:e6:d1:33:7c:04:7e:93:9a:12:90:3d:5f:49:
f0:82:fb:47:89:61:f3:85:23:2e:93:b7:f0:e0:a9:
60:27:8f:6d:e8:7b:d3:2e:d8:b9:6c:02:04:a2:4b:
32:35:45:aa:13:b0:00:11:1c:4f:d3:00:e6:5b:f2:
cf:4f:0c:e7:3c:c0:8e:08:cc:f1:18:0f:87:48:7d:
de:9b:4c:a3:f7:ed:62:41:74:a1:31:26:b3:9d:01:
65:83:d3:cb:8b:e2:e6:63:f1:c4:c6:9c:28:e1:74:
ed:e2:df:f3:90:b9:9e:fb:67:68:bd:98:b5:33:ca:
7e:93:6f:db:d6:fa:0b:4d:b3:b1:6e:75:aa:2b:97:
37:d2:9c:fc:84:bc:22:3b:ce:b4:b4:86:11:e6:7f:
dc:23:03:b4:30:46:4d:85:a9:63:1a:0d:3e:d5:4c:
e3:e9:91:91:fd:83:1e:25:be:40:5d:a9:59:d8:a3:
b3:26:9c:b2:b7:ce:cb:ed:65:64:f1:03:34:3a:8a:
f7:3c:79:44:ab:80:f5:d5:35:6d:93:dd:72:6e:13:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:76:51:53:1D:68:79:08:4D:DA:0D:E9:79:D5:5F:1E:D0:12:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MvR2UVMdaHkITdoN6XnVXx7QEgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.194.0/23
78.17.242.0/23
206.245.138.0/23
206.245.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:c0:c9:03:fa:24:8f:0f:f1:1b:b9:dd:41:e6:da:c2:8d:1d:
54:27:a7:af:80:d1:d1:a7:e8:2c:7c:39:76:2a:bf:43:74:6e:
b0:73:82:f9:4e:ec:5f:3b:38:d5:10:eb:24:61:76:02:fb:7d:
eb:28:39:dc:b4:af:87:a0:15:9c:e6:59:2f:8b:47:56:c1:b2:
2c:2f:1e:47:ab:27:b5:88:97:32:1b:f2:4f:8e:5c:fc:ed:c6:
65:4c:70:53:93:3c:d7:a5:de:3c:bc:68:93:23:86:d3:f6:43:
20:a8:e4:29:aa:f3:90:30:e0:ef:3a:c1:c3:90:8d:8f:08:af:
15:e4:7b:0f:09:e9:ba:8a:86:d0:ab:49:aa:64:32:a3:07:03:
bd:c2:84:b6:8d:f4:b5:9b:25:f3:ea:5f:f0:35:22:26:c7:6e:
85:09:9e:68:d4:10:42:06:8c:7e:5b:b6:af:bc:95:dd:28:6e:
37:96:4e:d7:37:ec:4b:3d:b1:67:e3:07:d7:a7:2d:c6:3a:70:
83:8a:ca:53:56:fa:47:5e:ea:e4:3f:f7:fb:30:e3:ac:ab:69:
cb:86:6e:14:fc:10:bb:74:21:fa:cb:55:f9:c4:c7:5f:46:b4:
d4:eb:8c:2c:68:eb:29:f3:32:69:11:be:09:a8:e6:fe:8f:be:
e2:c0:3a:a3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/wlRu1zoxLm3tSeXX+zV46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODExMTEyODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmY0NzY1MTUzMWQ2ODc5MDg0ZGRhMGRlOTc5ZDU1ZjFlZDAxMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5+BwF73TaojNCK8xJI2ntQat7AX
18SQ8Ea++ent+dHU5c3+mm2vIBUg82js3ubRM3wEfpOaEpA9X0nwgvtHiWHzhSMu
k7fw4KlgJ49t6HvTLti5bAIEoksyNUWqE7AAERxP0wDmW/LPTwznPMCOCMzxGA+H
SH3em0yj9+1iQXShMSaznQFlg9PLi+LmY/HExpwo4XTt4t/zkLme+2dovZi1M8p+
k2/b1voLTbOxbnWqK5c30pz8hLwiO860tIYR5n/cIwO0MEZNhaljGg0+1Uzj6ZGR
/YMeJb5AXalZ2KOzJpyyt87L7WVk8QM0Oor3PHlEq4D11TVtk91ybhN64wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDL0dlFTHWh5CE3aDel51V8e0BIMMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTXZSMlVWTWRhSGtJVGRvTjZYblZYeDdRRWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBThHCAwQB
ThHyAwQBzvWKAwQBzvWOMA0GCSqGSIb3DQEBCwUAA4IBAQAOwMkD+iSPD/Ebud1B
5trCjR1UJ6evgNHRp+gsfDl2Kr9DdG6wc4L5TuxfOzjVEOskYXYC+33rKDnctK+H
oBWc5lkvi0dWwbIsLx5Hqye1iJcyG/JPjlz87cZlTHBTkzzXpd48vGiTI4bT9kMg
qOQpqvOQMODvOsHDkI2PCK8V5HsPCem6iobQq0mqZDKjBwO9woS2jfS1myXz6l/w
NSImx26FCZ5o1BBCBox+W7avvJXdKG43lk7XN+xLPbFn4wfXpy3GOnCDispTVvpH
XurkP/f7MOOsq2nLhm4U/BC7dCH6y1X5xMdfRrTU64wsaOsp8zJpEb4JqOb+j77i
wDqj
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:30 2026 by rpki-client