Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ux0Iw4ufebOl35VDB__m8znabR4.roa
File: Ux0Iw4ufebOl35VDB__m8znabR4.roa (raw, json)
Hash identifier: FrIyDW6Cb/o+pj03GcQEMeB+FqVlJ9JtPtaBeHqgw2M=
Subject key identifier: 53:1D:08:C3:8B:9F:79:B3:A5:DF:95:43:07:FF:E6:F3:39:DA:6D:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF5706721B97B9FFFE232F0AE162E78ED
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ux0Iw4ufebOl35VDB__m8znabR4.roa
Signing time: Wed 12 Aug 2026 10:06:52 +0000
ROA not before: Wed 12 Aug 2026 10:06:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 78.17.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:70:67:21:b9:7b:9f:ff:e2:32:f0:ae:16:2e:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 12 10:06:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=531d08c38b9f79b3a5df954307ffe6f339da6d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:f8:94:23:b0:29:99:21:2e:b5:bf:69:fc:
db:15:80:dd:14:a7:9b:9e:99:bb:b0:29:cf:47:11:
2b:31:8a:c6:7a:6f:ca:0d:73:b5:0f:2f:1c:75:85:
09:6c:ac:28:05:6a:57:fa:ba:d3:7c:ec:0b:7b:09:
bd:01:7a:04:d9:e3:36:2b:7e:a3:fe:a2:df:32:07:
d5:5a:44:0d:dc:c4:66:7d:59:78:2d:6a:43:fb:05:
8b:6b:9d:9e:0a:6b:07:82:49:25:5e:3d:d8:15:46:
78:e5:4d:4b:c2:bf:3c:c5:5b:9e:96:82:50:b0:37:
24:95:78:c7:b2:cb:78:56:ed:09:dd:00:76:06:3c:
45:9d:f3:62:8a:6b:4f:d1:ec:e9:48:8a:e0:b2:73:
48:9b:dc:55:b8:96:38:51:76:e7:fd:03:55:53:e6:
14:5b:51:47:1f:70:51:31:01:d0:eb:e5:70:03:3f:
dc:22:68:e5:62:33:09:48:87:54:e5:59:ec:e7:59:
70:8a:b9:40:b4:a0:d6:5a:6d:42:d5:9d:4d:39:f0:
a8:e7:02:db:6f:c0:4f:69:ec:a9:4c:b3:65:f3:d0:
3c:b0:55:9e:27:56:0a:10:83:17:f0:3b:9a:8e:f4:
d1:27:b0:64:87:a9:f4:97:b5:04:8f:e5:9c:3b:4c:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:08:C3:8B:9F:79:B3:A5:DF:95:43:07:FF:E6:F3:39:DA:6D:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ux0Iw4ufebOl35VDB__m8znabR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:f1:36:e8:c4:cd:f1:ad:92:c4:1f:a4:6a:f5:b2:f6:a0:38:
c0:70:8a:9e:ed:45:09:d3:fb:16:42:4e:8b:92:0c:21:77:f4:
51:07:f4:d0:c8:6b:f4:bf:29:49:7a:1a:01:25:09:fe:d5:bc:
d7:df:9a:cb:cc:9f:d6:7a:ff:f3:d9:62:fa:81:ae:e9:8e:54:
39:d9:e3:36:3c:1e:ba:9c:bc:74:c3:3d:21:41:7a:c4:56:fd:
1f:3b:14:b3:4b:1c:fb:2a:b5:4b:5a:99:5c:cc:fd:2f:a7:fa:
e0:71:0f:69:2e:85:02:d6:3c:15:ec:cb:53:90:9e:31:42:ad:
2b:97:99:f1:e5:05:b5:83:67:61:a8:a7:c8:a2:b3:48:e8:8f:
c7:cc:24:29:89:1a:54:70:94:92:e0:f0:df:32:cb:44:7a:5a:
d9:f5:8a:ee:eb:4f:9d:ae:05:a6:9a:5f:47:59:e5:9e:e6:7a:
07:8f:8d:d8:57:a0:9d:28:5f:fb:c8:d0:e7:bb:3f:64:ff:d5:
48:00:a4:b5:85:e1:23:c9:15:3f:c3:25:d1:97:d6:f9:72:4f:
59:ef:cf:c4:f4:4c:00:cb:2d:68:de:8e:ab:01:b8:eb:e5:de:
f4:b5:ed:ea:3c:06:a5:aa:30:2f:84:b0:98:d4:24:95:b4:61:
c6:cc:90:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:38 2026 by rpki-client