Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aBUgrw5XQYdes8cB2ovBonTn06M.roa
File: aBUgrw5XQYdes8cB2ovBonTn06M.roa (raw, json)
Hash identifier: PMmD3LbTmjPRm27hCpyXQq4ovuB9Q/WDTXV1wVl6LFY=
Subject key identifier: 68:15:20:AF:0E:57:41:87:5E:B3:C7:01:DA:8B:C1:A2:74:E7:D3:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1148D97A3AA172C70B24E2389BCE827BC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aBUgrw5XQYdes8cB2ovBonTn06M.roa
Signing time: Wed 07 Oct 2026 04:09:46 +0000
ROA not before: Wed 07 Oct 2026 04:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211955
IP address blocks: 78.17.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:8d:97:a3:aa:17:2c:70:b2:4e:23:89:bc:e8:27:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 7 04:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=681520af0e5741875eb3c701da8bc1a274e7d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:53:16:9d:30:95:f1:52:5f:08:0e:52:ee:
ac:82:4f:75:15:bb:ab:34:b1:20:94:d1:5a:57:59:
19:94:0e:b4:27:60:72:8b:96:74:5a:31:21:c7:5b:
0b:67:6c:87:e0:3e:b6:5c:cc:63:3d:45:44:e8:4c:
da:9c:0e:4e:8e:43:14:0d:6c:c3:60:1b:61:56:9a:
9e:17:1c:b3:29:df:63:ac:70:c9:9d:6b:0f:e3:2e:
13:e8:0d:5a:b9:df:65:94:c7:d2:2e:18:ce:9e:2c:
70:68:cf:48:6d:1a:61:52:b9:44:b5:5a:e7:54:0d:
f6:f0:2d:4a:e3:11:2d:f9:28:63:cd:e0:94:a5:31:
d0:56:da:ae:54:eb:db:32:2d:94:ff:f4:e5:a6:bc:
36:f8:88:b9:68:a4:3f:30:63:a5:d8:15:d4:f6:82:
73:e6:bf:70:60:3e:ca:f8:53:fd:d1:2b:51:36:cc:
d8:28:71:97:b1:99:b0:12:a9:64:30:d4:c3:bc:ac:
1a:c9:8a:5e:e3:7f:31:15:9a:80:6d:68:67:ac:5a:
15:2b:93:da:dc:ea:f7:13:21:69:b3:2b:4b:f7:4a:
72:d7:fc:ca:1c:ad:f5:9f:0f:4e:14:01:18:e4:b3:
09:7e:ee:df:35:27:41:a2:97:58:87:92:5c:10:06:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:20:AF:0E:57:41:87:5E:B3:C7:01:DA:8B:C1:A2:74:E7:D3:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aBUgrw5XQYdes8cB2ovBonTn06M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.32.0/24
Signature Algorithm: sha256WithRSAEncryption
29:34:49:29:66:23:d1:81:d1:4f:bf:b6:34:66:ce:52:6d:27:
28:88:88:9a:96:85:a6:5b:c5:66:14:19:b5:50:95:88:48:c2:
7d:1b:4d:ca:0d:bc:0a:15:32:21:4a:b5:98:da:b8:bb:c5:ab:
3d:50:af:0a:16:e8:2a:d2:ab:df:20:fc:4d:a7:29:74:85:f4:
bc:a5:02:1a:84:d0:3b:a0:1e:6c:44:93:0c:a8:c7:11:0e:85:
38:07:69:bd:0e:4f:1d:73:5b:b1:4a:8b:a9:28:bd:76:62:45:
17:ef:38:89:f2:42:48:79:f0:76:77:5d:fb:c6:4c:1e:ad:ac:
f7:ce:f7:c9:97:e3:81:77:f3:63:dc:89:af:5f:7a:c9:ff:d3:
59:d8:9b:97:b5:b4:5d:0e:fd:44:c4:da:c5:88:39:9b:ad:7b:
35:09:63:38:d7:6f:83:61:e0:5e:75:a8:87:11:37:81:c3:b1:
37:6a:6e:82:0f:62:0a:c7:19:d2:08:c7:db:df:bc:0b:6f:26:
5c:89:c4:f3:1f:5d:b7:3d:28:05:4c:c3:61:ce:5e:d5:0b:3b:
45:f8:47:a1:86:0b:85:8d:0f:8d:28:8d:4f:7e:bc:38:7c:c9:
b7:6a:a1:4c:22:af:92:a0:05:3d:86:90:27:3a:4f:32:be:13:
09:e6:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:45:55 2026 by rpki-client