Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fJPG1yx4ielPVJwyznW8j2OHZWk.roa
File: fJPG1yx4ielPVJwyznW8j2OHZWk.roa (raw, json)
Hash identifier: 9RpSajVUR+kAfXXfGkVjxKaa/K9ZConrDB6qjILTmF0=
Subject key identifier: 7C:93:C6:D7:2C:78:89:E9:4F:54:9C:32:CE:75:BC:8F:63:87:65:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A10678510430BFA35B1610CACD2099D07E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fJPG1yx4ielPVJwyznW8j2OHZWk.roa
Signing time: Sun 04 Oct 2026 10:31:50 +0000
ROA not before: Sun 04 Oct 2026 10:31:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 78.17.214.0/24 maxlen: 24
78.17.220.0/24 maxlen: 24
78.17.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:78:51:04:30:bf:a3:5b:16:10:ca:cd:20:99:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 4 10:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c93c6d72c7889e94f549c32ce75bc8f63876569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:e7:5f:fe:ec:76:76:93:81:74:72:fd:53:
70:e3:5a:5a:f9:d2:17:2c:8a:57:9e:b1:24:10:4c:
4c:b3:1a:bd:25:4d:16:be:a4:1d:fb:cd:06:ba:3f:
c2:68:06:d3:7d:18:95:a9:bf:24:03:7f:34:95:2e:
35:a3:0f:a8:20:04:a3:9e:db:bb:64:75:17:00:45:
4a:ae:7c:57:91:b9:54:83:f1:bf:17:f1:4d:38:9c:
c5:2f:ac:c2:94:f0:25:36:2d:56:01:44:28:c0:0c:
24:b2:64:c6:21:06:2b:fa:73:f9:59:c8:6f:ba:d1:
92:54:e7:6a:55:bb:66:0b:91:5a:a7:b7:4f:f7:e9:
1a:4a:3d:38:2e:78:9a:73:38:23:25:23:79:9e:e1:
ac:16:c2:1b:34:57:e4:37:ee:24:52:72:9e:03:20:
99:09:c3:60:21:e0:39:ba:4c:4e:9b:4c:8a:4f:b9:
27:d2:56:05:8f:19:27:4a:34:cb:c5:2a:43:f2:84:
b0:7a:67:2b:c3:cb:c1:ee:69:a3:48:58:5c:3c:18:
f7:c2:f0:1d:64:1d:bc:05:94:ca:a0:3e:56:9e:be:
aa:00:84:cb:74:0f:d8:69:66:31:ed:23:28:29:f7:
61:6a:f0:5a:1f:df:32:dc:ea:8d:93:e6:ee:e2:fa:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:C6:D7:2C:78:89:E9:4F:54:9C:32:CE:75:BC:8F:63:87:65:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fJPG1yx4ielPVJwyznW8j2OHZWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.214.0/24
78.17.220.0/24
78.17.224.0/24
Signature Algorithm: sha256WithRSAEncryption
95:da:ce:79:5b:4d:94:a7:e5:45:99:70:85:40:69:f9:2f:98:
73:cb:b8:7d:38:df:90:62:74:d9:fa:83:e4:2c:f0:67:ce:ac:
9e:2c:43:3f:d0:33:a3:2f:82:95:a0:8c:7a:ad:30:31:81:5b:
18:0a:f9:4e:87:b7:ec:69:f5:1f:16:91:77:8a:46:9d:f0:b0:
7c:ed:5d:d1:24:32:a8:b7:ee:0e:a4:2f:80:2b:e8:84:08:ba:
6d:24:fc:12:20:79:5f:55:1f:0b:c1:68:25:58:bd:d8:83:3b:
82:a8:49:76:ac:cc:77:f7:b3:54:e5:42:28:8c:bf:ea:04:dc:
8f:0e:b8:01:5b:12:a8:44:0c:99:17:61:45:46:fd:36:07:52:
a3:39:8a:ca:a9:84:89:d9:94:b4:b9:6d:36:ae:3d:77:0b:aa:
b9:bd:75:92:d2:e9:8f:aa:2e:12:aa:59:6b:42:76:c4:f7:ca:
aa:95:b2:c2:4f:4a:37:db:87:fa:d6:4c:ac:53:89:1d:b4:e5:
44:b2:d0:18:b8:1a:df:9d:6d:cf:7e:eb:b6:d4:71:38:b6:22:
8c:1b:d2:79:b9:ba:6f:75:0d:3c:ad:8e:e1:88:81:52:47:ad:
72:bc:2e:48:04:ce:24:47:8b:58:0a:47:0b:25:d8:b3:47:13:
06:6e:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:30 2026 by rpki-client