Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_JMHULmvArooTDzogG5kkz_1pAg.roa
File: _JMHULmvArooTDzogG5kkz_1pAg.roa (raw, json)
Hash identifier: djlcwyRlTaHFFq0q1/B2yKGSxt5XmKpjPD4FqA/keSs=
Subject key identifier: FC:93:07:50:B9:AF:02:BA:28:4C:3C:E8:80:6E:64:93:3F:F5:A4:08
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A121EE6BA0589E42A5AD906C2672024AC1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_JMHULmvArooTDzogG5kkz_1pAg.roa
Signing time: Fri 09 Oct 2026 18:30:35 +0000
ROA not before: Fri 09 Oct 2026 18:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 9.247.48.0/24 maxlen: 24
9.247.179.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.170.0/24 maxlen: 24
206.245.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:ee:6b:a0:58:9e:42:a5:ad:90:6c:26:72:02:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 18:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc930750b9af02ba284c3ce8806e64933ff5a408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:69:4d:1f:46:a2:24:59:55:68:40:27:0b:
d3:37:a1:47:7d:ea:8d:9d:f4:b9:1c:30:b8:46:60:
ae:a5:d2:91:5b:c5:12:f2:55:c0:4b:c5:c7:56:19:
a0:2e:37:21:f4:8f:ba:f4:f5:6c:17:20:ef:c5:15:
9e:94:01:54:8d:1a:10:b4:6a:32:19:39:5c:4b:fe:
c0:9e:41:79:29:50:88:34:cc:52:cb:d6:5e:5f:df:
bd:9d:c4:73:07:c5:fe:3b:c3:e3:7f:09:ea:cb:5b:
ef:06:88:34:86:ca:d5:6e:f7:e8:3a:92:03:73:c3:
42:0f:42:f4:25:15:38:ec:3e:e6:ae:d6:2d:c6:49:
a8:98:b2:2e:16:98:83:63:ef:ec:f1:fc:71:c6:90:
6c:85:c0:26:49:5c:17:65:6e:e0:f7:b9:f0:3b:9e:
ef:0b:01:1b:90:c4:f5:dc:ca:0c:b0:3e:89:60:c4:
c9:5b:12:38:55:8f:22:61:5a:2d:06:54:01:de:4d:
48:2e:dd:3d:9b:99:c2:d5:84:32:65:d4:97:dc:b3:
7a:f2:fa:36:9e:2d:73:cc:1a:20:83:87:82:b6:93:
7c:06:bf:59:cc:84:e7:17:97:7d:c8:16:9e:6a:05:
84:82:4e:1e:06:4e:32:9b:dc:a8:6d:1f:87:d9:56:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:07:50:B9:AF:02:BA:28:4C:3C:E8:80:6E:64:93:3F:F5:A4:08
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_JMHULmvArooTDzogG5kkz_1pAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.48.0/24
9.247.179.0/24
78.17.26.0/24
78.17.69.0/24
78.17.108.0/24
89.125.170.0/24
206.245.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fa:f4:20:9f:ef:8d:7a:4d:8a:b7:f0:4a:ea:d6:91:67:25:
7f:b0:bb:92:3b:e2:a9:3b:c8:d6:38:6e:82:cc:99:09:26:34:
67:63:be:db:a3:1f:e4:5c:f5:ea:da:34:ad:81:54:d9:31:0e:
97:83:ed:c8:d0:1a:fe:b6:f0:12:75:c3:d6:c2:1d:29:c4:d8:
95:e4:b3:c6:d6:6a:6f:13:12:d6:aa:7d:c2:3d:3b:20:d8:e9:
43:e5:c3:59:e0:fc:34:77:9d:31:34:24:14:d2:91:76:9f:3a:
a8:71:49:16:76:ee:c7:9c:56:20:49:3c:c2:1e:27:49:a2:cd:
99:9f:89:9b:55:50:95:df:7c:37:8a:cb:e1:9c:91:a0:a2:13:
81:40:d0:26:cd:4a:3f:04:92:9f:68:c6:fa:0b:39:b6:e3:d6:
15:6f:91:18:c2:ec:04:7e:21:7c:cf:12:bd:c4:a0:77:12:5b:
e6:aa:8c:8a:ed:7e:c5:83:8e:63:23:39:6d:b0:78:a9:af:ae:
3a:6d:5c:a5:65:77:41:9a:61:c1:a3:ea:8e:8f:52:be:03:41:
bd:af:32:ef:df:93:38:4e:24:c5:29:ea:1e:6f:bb:a6:c7:08:
87:60:f2:2b:c1:92:a5:fe:70:ef:e2:21:f5:21:f3:f7:95:8d:
84:5a:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:46 2026 by rpki-client