Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cB2bCBdn7W0HhEJrdMAyiyhZ4Rg.roa
File: cB2bCBdn7W0HhEJrdMAyiyhZ4Rg.roa (raw, json)
Hash identifier: K1Qt81Esd1tX7CV/pkIiOv2PHaFUB8RPh18pj3vixUc=
Subject key identifier: 70:1D:9B:08:17:67:ED:6D:07:84:42:6B:74:C0:32:8B:28:59:E1:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0582BAFC92BAA240790DC19F7D81E3418
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cB2bCBdn7W0HhEJrdMAyiyhZ4Rg.roa
Signing time: Mon 31 Aug 2026 14:14:13 +0000
ROA not before: Mon 31 Aug 2026 14:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210926
IP address blocks: 78.17.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:2b:af:c9:2b:aa:24:07:90:dc:19:f7:d8:1e:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 31 14:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=701d9b081767ed6d0784426b74c0328b2859e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:3e:cd:d7:aa:6c:3f:79:53:40:c8:52:f9:
2c:67:04:36:e9:2c:e8:70:aa:86:31:d1:13:2e:e7:
17:8d:89:05:e5:d6:85:f1:df:56:05:a9:69:09:5d:
f8:33:85:66:f3:f2:80:8a:55:52:94:d9:85:b4:95:
9c:64:b3:11:a4:dd:46:c1:80:30:95:e8:3f:fd:1c:
5c:67:cb:0d:23:9d:e9:0c:7a:07:ab:bc:c3:d4:d3:
dc:68:37:eb:8f:ba:b8:b4:ab:f3:21:a3:a7:c3:61:
76:37:ff:23:48:63:4a:d6:4b:89:a0:fd:11:e2:ee:
d8:9d:f9:91:b2:04:a2:6d:9a:75:4e:34:81:45:24:
bb:cc:b4:80:fb:90:71:59:3d:cd:fa:14:6a:75:7b:
ff:ca:2b:38:90:a3:e8:5a:7d:64:ac:ce:ee:36:be:
be:76:31:ff:41:5e:47:f1:ee:e4:33:91:9b:35:d7:
9a:06:e4:20:1c:80:8b:9a:e8:f5:56:34:13:a9:39:
55:78:36:06:bd:1b:ab:27:77:d7:c8:d2:ba:4c:cb:
21:fd:2f:e7:27:24:e3:f4:8f:a9:2d:02:e6:4e:f1:
bf:9f:bb:b9:c1:77:f8:39:87:18:d0:78:12:2b:6a:
39:0f:93:39:e8:46:21:8a:d0:d1:d0:77:65:66:fd:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:9B:08:17:67:ED:6D:07:84:42:6B:74:C0:32:8B:28:59:E1:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cB2bCBdn7W0HhEJrdMAyiyhZ4Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.171.0/24
Signature Algorithm: sha256WithRSAEncryption
88:18:3c:cc:bd:b2:fe:7b:60:fc:de:0e:a2:cd:ad:64:b2:32:
5d:f5:7e:d4:4d:0a:d0:75:b2:6f:ef:1c:3c:f6:3d:7d:e7:8b:
13:0f:28:3c:eb:11:52:2b:ba:62:c3:de:fd:12:05:58:71:8b:
08:32:b2:77:9a:69:a5:68:56:01:bc:73:17:20:35:b5:74:e7:
af:b6:ac:d1:1c:03:09:99:8b:1f:80:7d:a4:11:16:7f:ea:66:
37:b6:7e:b2:9e:cc:c6:70:1b:a2:60:f6:54:23:c3:cb:18:49:
ab:42:1f:e6:b1:55:f3:34:d9:17:78:1f:d5:f2:b3:7c:a7:ba:
cb:16:a3:36:ba:ca:56:ac:62:7d:c6:7b:b4:fb:4c:05:6a:d8:
53:2f:f1:5f:53:49:20:cb:37:5d:27:e0:57:2f:43:c3:85:9d:
52:37:63:9c:fd:1a:a7:c3:56:64:29:6c:e4:22:e8:26:a0:56:
95:6f:11:e1:f8:d6:87:78:c0:67:c5:a9:e6:ca:93:8a:a3:e8:
b3:50:b8:0b:ab:d1:5f:75:01:c4:63:e4:4e:fa:64:12:d7:35:
9b:2a:bf:d3:18:b2:a6:56:12:d0:3c:c7:97:07:d8:95:bd:eb:
d5:e0:1b:8b:fa:85:a2:6a:bf:ef:b6:1e:94:0b:d8:31:bb:38:
f8:e2:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:41 2026 by rpki-client