Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEAy0by7_bhR9mFQ0tR15knWm60.roa
File: iEAy0by7_bhR9mFQ0tR15knWm60.roa (raw, json)
Hash identifier: l5+UWJ/jUJbuASsR9eVgQMhaP7wk/OmLWkV8vrB9U0I=
Subject key identifier: 88:40:32:D1:BC:BB:FD:B8:51:F6:61:50:D2:D4:75:E6:49:D6:9B:AD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A028BF1BBCF471BDE842DBD86F7C64C059
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEAy0by7_bhR9mFQ0tR15knWm60.roa
Signing time: Sat 22 Aug 2026 09:13:28 +0000
ROA not before: Sat 22 Aug 2026 09:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 78.17.218.0/23 maxlen: 23
78.17.238.0/23 maxlen: 23
78.17.248.0/23 maxlen: 23
78.17.250.0/23 maxlen: 23
89.125.190.0/23 maxlen: 23
89.125.230.0/23 maxlen: 23
104.143.196.0/23 maxlen: 23
104.143.198.0/23 maxlen: 23
104.143.220.0/23 maxlen: 23
162.35.232.0/23 maxlen: 23
162.35.234.0/23 maxlen: 23
162.35.236.0/23 maxlen: 23
162.35.238.0/23 maxlen: 23
162.35.240.0/23 maxlen: 23
162.35.250.0/23 maxlen: 23
162.35.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:bf:1b:bc:f4:71:bd:e8:42:db:d8:6f:7c:64:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 22 09:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884032d1bcbbfdb851f66150d2d475e649d69bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:7f:8a:b9:65:10:6a:a1:bf:ca:d2:db:63:
ed:1b:cc:79:8c:64:6a:6e:28:c4:5f:73:21:2b:d2:
04:f4:99:22:e8:c6:25:7a:d1:42:42:13:50:66:95:
70:d6:ae:07:f7:c0:85:0b:0e:c9:5d:49:d6:2f:98:
9a:80:42:60:db:86:97:7d:d7:c4:61:7f:94:cd:91:
f9:53:97:1e:ca:1a:ee:52:9c:3f:f8:91:e1:44:c4:
46:8f:79:c9:f4:38:34:ae:08:fd:c3:4b:a7:0c:94:
a3:81:01:87:5a:c5:89:25:40:22:7a:af:d0:44:cd:
9b:0e:a4:32:90:ca:1c:70:51:e9:2e:d5:82:3c:0f:
1c:1c:6a:94:ac:6a:42:b6:56:99:0f:9c:76:fb:d7:
e5:f9:b5:25:ed:23:52:e5:be:43:24:8c:5a:50:36:
4f:a1:86:f6:1b:1b:ca:f8:31:59:53:99:b1:92:83:
29:3a:80:7d:9b:4a:e3:9d:47:9b:45:29:11:0a:14:
6d:17:25:45:83:c6:05:75:4c:6c:da:eb:60:37:aa:
c0:3e:2a:9e:a2:33:53:6e:39:5c:a4:29:a7:75:84:
50:38:62:6e:d1:96:42:be:e6:b9:9d:72:09:78:7d:
83:7e:33:a8:e2:76:c9:3a:dc:b1:ed:6f:04:b3:51:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:32:D1:BC:BB:FD:B8:51:F6:61:50:D2:D4:75:E6:49:D6:9B:AD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEAy0by7_bhR9mFQ0tR15knWm60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.218.0/23
78.17.238.0/23
78.17.248.0/22
89.125.190.0/23
89.125.230.0/23
104.143.196.0/22
104.143.220.0/23
162.35.232.0-162.35.241.255
162.35.250.0/23
162.35.254.0/23
Signature Algorithm: sha256WithRSAEncryption
37:3f:cd:8e:2d:00:b8:57:37:1d:c3:b6:cc:c9:1f:12:f3:dc:
b8:6a:76:d2:45:24:16:d8:e8:f1:00:a0:07:15:83:c7:e6:12:
72:e8:50:e6:55:d6:9b:9e:d3:2c:6c:ec:62:9d:c7:72:26:72:
d4:33:98:ba:61:df:fe:2d:84:0a:d1:a8:9b:f9:f2:c0:79:b3:
0d:22:d0:f1:0f:fa:da:77:0a:91:44:72:70:b8:2d:9a:76:fe:
71:68:75:5c:3b:fa:dc:73:cd:30:44:ce:e3:ed:10:4b:e0:7b:
cd:bd:f4:f9:f3:74:f3:fa:2d:af:3b:78:99:1c:bf:ad:15:8b:
14:87:a1:0b:d5:db:92:5f:3d:ae:45:75:be:4c:84:e8:80:f9:
9b:d7:7c:fa:cd:9f:84:54:cf:85:87:7c:de:f3:a6:9e:de:5e:
ea:72:56:4b:db:c3:86:86:08:97:81:00:d8:62:4b:cd:95:5a:
bd:ea:e3:50:9b:9c:42:0a:eb:5f:95:c1:75:f4:68:47:c5:e7:
f1:5c:f5:1c:96:84:5f:dc:23:19:a3:55:b9:c3:c8:20:2b:da:
63:a4:45:a3:a3:77:1b:08:70:b4:0d:50:2c:f1:06:ca:8c:94:
04:2a:1a:63:2b:2b:2e:8b:ee:15:68:33:2c:62:2b:71:8f:59:
11:2c:5e:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:10 2026 by rpki-client