Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hYkzHdcg2VtCzDdHdlwd69z6e9M.roa
File: hYkzHdcg2VtCzDdHdlwd69z6e9M.roa (raw, json)
Hash identifier: tryDExq3KNOQ6OHGnVRIetvlsbTUWUqDgxGNIQVbVXU=
Subject key identifier: 85:89:33:1D:D7:20:D9:5B:42:CC:37:47:76:5C:1D:EB:DC:FA:7B:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FC5E57096C6E3EA3D4793CEF32AAD38B4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hYkzHdcg2VtCzDdHdlwd69z6e9M.roa
Signing time: Mon 03 Aug 2026 04:32:55 +0000
ROA not before: Mon 03 Aug 2026 04:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 78.17.98.0/24 maxlen: 24
89.125.121.0/24 maxlen: 24
89.125.214.0/24 maxlen: 24
104.143.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:e5:70:96:c6:e3:ea:3d:47:93:ce:f3:2a:ad:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 3 04:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8589331dd720d95b42cc3747765c1debdcfa7bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:c5:c8:01:c8:9c:50:e3:d7:eb:e9:f1:67:
cf:a6:ea:47:ff:59:c7:88:8a:4b:58:ae:04:34:f7:
14:93:91:03:06:23:09:e5:9b:37:31:92:d9:b3:7e:
5d:a0:6c:81:86:3e:7c:ca:d1:86:58:28:65:f3:98:
33:90:e3:81:98:8e:65:2d:d4:63:36:51:55:fc:48:
5f:da:9f:5d:38:3b:80:93:88:35:69:cb:3f:7c:26:
eb:eb:83:bc:08:d0:1d:b7:55:e0:c0:0d:98:52:26:
9d:3a:0f:b2:b7:40:51:36:32:0b:1f:1c:98:b2:86:
bb:90:f4:02:6f:ab:8d:88:c9:62:92:8c:6e:48:c2:
f9:7b:68:9c:94:5a:33:0c:d1:7a:bc:a9:96:d9:b9:
de:9f:56:44:8f:d9:7b:d3:72:e7:0a:f6:1d:c1:21:
26:49:d4:f8:4b:cc:39:a4:43:44:63:24:39:24:ed:
20:4d:5b:44:3b:ae:fe:14:f7:0e:d5:35:78:4d:f0:
96:98:f3:f4:3f:fb:d0:42:45:63:a6:e8:cf:69:85:
99:24:32:03:c3:dd:7b:e4:14:9d:11:be:b5:a9:aa:
da:af:77:a8:e9:f4:98:b7:7c:55:b8:f0:eb:05:62:
e7:bd:98:b6:fe:ce:a9:00:11:af:ce:0d:4d:26:16:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:33:1D:D7:20:D9:5B:42:CC:37:47:76:5C:1D:EB:DC:FA:7B:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hYkzHdcg2VtCzDdHdlwd69z6e9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.98.0/24
89.125.121.0/24
89.125.214.0/24
104.143.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f2:b1:e7:c5:85:0f:fd:4b:b5:11:ca:ae:d9:30:1d:fb:ad:
17:cb:67:14:85:76:92:bd:b7:7b:5e:e5:de:2a:1f:bf:e1:fc:
7f:d7:a4:05:ef:0d:71:91:e9:14:9c:6d:65:64:e0:ea:a8:38:
06:4f:9b:b4:6e:de:fc:5e:f1:f2:e4:4f:2e:92:7d:49:2a:f0:
2e:03:9a:b5:55:51:3b:20:db:f7:4e:58:b5:16:db:f0:94:d5:
68:1d:e1:c5:39:34:6d:ce:17:0c:f7:1d:3a:95:7c:8c:dc:fa:
8d:6a:cb:93:04:81:c6:58:0f:80:1b:3c:cf:1d:f9:9a:60:82:
e2:f5:72:0b:04:5f:93:12:65:8e:c3:6f:b6:af:91:ae:27:93:
d2:c7:2c:72:0e:e2:51:96:7b:6e:a6:3c:a8:d7:56:27:01:ed:
69:9e:cb:28:9e:cd:4e:07:5c:a4:dc:1a:1f:8c:b6:ef:6b:8f:
04:04:1f:f3:a5:60:af:0e:42:e7:1f:14:3f:26:f9:f8:78:09:
9f:5e:85:76:8b:d7:87:15:73:21:3b:23:46:bc:44:b6:bb:56:
b3:68:3b:38:3e:45:b7:89:cc:c8:85:50:ba:42:f6:3e:3e:a7:
9d:b5:e4:ca:2b:a4:38:22:a8:94:95:42:3f:e5:a7:ac:61:a3:
ef:7e:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:02 2026 by rpki-client