Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bnfugmqBPyqn6JkfJdf3A0-FowQ.roa
File: bnfugmqBPyqn6JkfJdf3A0-FowQ.roa (raw, json)
Hash identifier: a7wiDGmkynVl5vq7u64kT6q3nDqSPat/4M6iaHDqcyc=
Subject key identifier: 6E:77:EE:82:6A:81:3F:2A:A7:E8:99:1F:25:D7:F7:03:4F:85:A3:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1306972467A1EC0FC3D8365F9268ED3DE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bnfugmqBPyqn6JkfJdf3A0-FowQ.roa
Signing time: Mon 12 Oct 2026 13:59:39 +0000
ROA not before: Mon 12 Oct 2026 13:59:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 78.17.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:69:72:46:7a:1e:c0:fc:3d:83:65:f9:26:8e:d3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 12 13:59:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e77ee826a813f2aa7e8991f25d7f7034f85a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:67:77:0b:d1:c0:e0:c3:06:b0:33:50:b1:
f5:94:b7:c9:af:3b:ae:b2:92:8d:dc:54:cd:b0:2d:
61:41:8b:d1:56:34:1b:a6:4c:b7:e4:fa:85:7f:40:
c7:a5:93:7c:9d:c9:24:e3:84:c0:8a:0b:5e:75:cf:
19:a9:c5:5e:e1:4f:6b:0d:e8:ea:75:4a:ae:90:da:
82:15:f1:bc:0d:c4:5d:c3:de:86:00:c6:bb:56:17:
b5:77:b3:4b:1c:7b:e8:b1:fc:6d:1c:11:df:85:50:
d7:6d:15:5b:9a:22:6e:a0:54:83:82:0d:81:ae:e4:
fa:77:de:b1:e4:26:8b:3d:55:0b:0c:ba:b6:5b:e0:
66:4a:35:e2:9c:fa:af:63:1b:ef:e4:b4:8e:71:e3:
27:fe:44:fc:43:71:9b:97:f0:42:0f:b9:91:9a:88:
01:35:0a:31:b0:b7:30:ce:6f:ca:db:78:a2:d5:7f:
99:84:83:fa:7e:f8:23:a2:4d:13:e8:1e:f2:14:77:
97:6d:35:bc:b2:dd:92:62:c9:b7:d3:b6:e3:45:89:
47:d3:04:27:6b:59:11:b4:55:54:6e:61:e6:bc:ad:
8c:f8:c0:a8:32:5f:9a:33:50:bd:5f:d3:0e:03:a0:
13:19:07:8d:68:4b:fa:e6:51:0d:a6:4f:05:7c:51:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:EE:82:6A:81:3F:2A:A7:E8:99:1F:25:D7:F7:03:4F:85:A3:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bnfugmqBPyqn6JkfJdf3A0-FowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d0:bf:83:bb:70:d6:20:c1:88:53:4b:e1:2e:ad:a4:3e:ac:
14:c5:58:bf:70:de:fe:4a:c2:b5:6a:65:9c:4c:00:a9:f7:f2:
e9:1a:6e:6e:23:b3:23:28:6e:d2:28:f4:b5:6d:6c:8a:68:1d:
6f:61:91:23:95:55:6d:31:d7:cf:ef:bd:70:59:4f:df:9f:41:
a8:75:30:f2:0f:4a:77:81:d7:8f:96:c3:c8:78:c8:52:30:43:
fc:55:c1:6b:0c:bd:cc:aa:3f:58:b0:64:e0:2b:77:a5:da:39:
cd:c3:70:97:ed:be:74:36:75:eb:ca:ba:d4:f3:77:91:27:93:
50:91:1c:09:ee:03:ab:38:75:f1:47:a6:7b:9c:a6:0c:2a:38:
25:98:c9:1c:27:34:ab:a5:a2:a4:1a:58:49:b5:51:17:81:0a:
d9:c2:74:1b:20:23:2e:cf:57:0f:5d:a1:ab:58:44:f0:f1:55:
60:a1:f9:bd:0c:ab:89:f8:9c:33:84:9d:29:da:6e:90:a6:ed:
47:e3:fa:24:9c:04:d5:0f:ad:3b:83:52:29:15:97:22:56:7e:
49:3c:21:26:ff:59:c9:b1:9c:27:db:7f:a6:84:11:33:b5:77:
d7:1e:5e:75:4c:c1:01:64:df:a0:50:d1:94:9b:1f:d3:54:16:
3e:a7:01:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEwaXJGeh7A/D2DZfkmjtPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDEyMTM1OTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc3ZWU4MjZhODEzZjJhYTdlODk5MWYyNWQ3ZjcwMzRmODVhMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRndwvRwODDBrAzULH1lLfJrzuu
spKN3FTNsC1hQYvRVjQbpky35PqFf0DHpZN8nckk44TAigtedc8ZqcVe4U9rDejq
dUqukNqCFfG8DcRdw96GAMa7Vhe1d7NLHHvosfxtHBHfhVDXbRVbmiJuoFSDgg2B
ruT6d96x5CaLPVULDLq2W+BmSjXinPqvYxvv5LSOceMn/kT8Q3Gbl/BCD7mRmogB
NQoxsLcwzm/K23ii1X+ZhIP6fvgjok0T6B7yFHeXbTW8st2SYsm307bjRYlH0wQn
a1kRtFVUbmHmvK2M+MCoMl+aM1C9X9MOA6ATGQeNaEv65lENpk8FfFGojwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG537oJqgT8qp+iZHyXX9wNPhaMEMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYm5mdWdtcUJQeXFuNkprZkpkZjNBMC1Gb3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThFcMA0G
CSqGSIb3DQEBCwUAA4IBAQBc0L+Du3DWIMGIU0vhLq2kPqwUxVi/cN7+SsK1amWc
TACp9/LpGm5uI7MjKG7SKPS1bWyKaB1vYZEjlVVtMdfP771wWU/fn0GodTDyD0p3
gdePlsPIeMhSMEP8VcFrDL3Mqj9YsGTgK3el2jnNw3CX7b50NnXryrrU83eRJ5NQ
kRwJ7gOrOHXxR6Z7nKYMKjglmMkcJzSrpaKkGlhJtVEXgQrZwnQbICMuz1cPXaGr
WETw8VVgofm9DKuJ+JwzhJ0p2m6Qpu1H4/oknATVD607g1IpFZciVn5JPCEm/1nJ
sZwn23+mhBEztXfXHl51TMEBZN+gUNGUmx/TVBY+pwGM
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:09 2026 by rpki-client