Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/id_pnxghItGNjI_TyU36MQcIBhQ.roa
File: id_pnxghItGNjI_TyU36MQcIBhQ.roa (raw, json)
Hash identifier: ZDdfsCTz65yjzOU8MCPwDg15gpJBJEDQ+zMjh8UdS+k=
Subject key identifier: 89:DF:E9:9F:18:21:22:D1:8D:8C:8F:D3:C9:4D:FA:31:07:08:06:14
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF0925C37C425EC273DB11AB8A01368B9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/id_pnxghItGNjI_TyU36MQcIBhQ.roa
Signing time: Tue 11 Aug 2026 11:25:51 +0000
ROA not before: Tue 11 Aug 2026 11:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 78.17.187.0/24 maxlen: 24
153.76.194.0/24 maxlen: 24
162.35.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:92:5c:37:c4:25:ec:27:3d:b1:1a:b8:a0:13:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 11:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89dfe99f182122d18d8c8fd3c94dfa3107080614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:03:69:e5:4b:0b:95:41:8d:d7:91:ee:1f:
10:e3:40:9f:35:0b:1e:b0:e8:73:14:d7:88:e5:0f:
e4:e1:6a:c6:b2:c3:0d:6d:64:6e:f0:fa:76:66:02:
51:23:8f:3e:7e:cf:ee:df:76:05:78:6a:b8:9f:a4:
d8:50:a2:36:12:9c:e9:62:db:13:92:c3:5c:0a:f5:
84:da:38:07:d4:cc:c2:ed:f3:35:41:8b:97:a2:e4:
cf:d0:32:28:67:49:7a:7f:ab:d7:6c:e9:05:ff:c5:
78:8d:c3:e1:d2:d8:b7:25:a2:a5:ad:45:23:98:67:
a5:5f:bb:9e:36:0b:7a:ff:22:30:0c:7f:4b:4a:b8:
91:4c:ed:c6:6e:4f:89:5e:ca:ef:89:a1:67:de:83:
8a:04:6f:e9:04:0d:f7:67:9a:a0:54:4c:11:2f:43:
a7:5a:a1:14:7d:2e:9a:2d:ef:a4:43:8c:2e:39:9e:
14:76:50:84:1b:0d:9b:9a:03:a3:83:96:b4:d7:25:
30:e0:37:57:fc:ca:17:be:63:0d:4b:24:4a:26:59:
e7:6c:27:b9:77:d7:e1:94:35:8b:cc:6c:1b:c2:64:
fb:85:a9:7b:27:cc:22:1d:c6:ba:c4:f0:91:a6:d9:
7e:d6:9d:22:10:33:ae:19:45:bf:f7:92:98:12:82:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:E9:9F:18:21:22:D1:8D:8C:8F:D3:C9:4D:FA:31:07:08:06:14
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/id_pnxghItGNjI_TyU36MQcIBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.187.0/24
153.76.194.0/24
162.35.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c8:03:9f:9a:6c:0e:fc:4d:ad:2d:1e:8a:3d:a9:e1:f8:3a:
9c:da:f0:6b:da:36:f5:9b:d8:aa:0d:9e:53:90:06:b7:4f:28:
a7:80:0a:45:1b:03:03:8c:5b:64:0e:67:9e:21:7f:dc:42:17:
05:aa:78:96:bd:29:62:59:8d:62:c3:44:2c:f8:78:58:e7:9e:
03:69:d4:c2:cc:07:1e:64:d8:57:ab:26:22:97:37:c0:b2:5f:
12:d1:7c:66:d0:b0:d9:7e:06:97:8b:5e:1e:29:e0:5e:e2:e8:
40:b1:1e:20:ce:4f:5a:d2:54:83:54:b7:f5:2c:3a:48:b8:9f:
12:e6:0a:fe:88:75:ed:88:9f:2a:3c:c7:b5:50:f3:5b:b9:c0:
22:15:eb:91:f8:c6:07:79:c2:6d:68:b2:c6:17:b3:c3:0b:ae:
a1:35:fa:62:f7:b6:82:04:c7:a4:74:87:b1:b0:3a:52:b9:53:
10:c6:1b:a0:88:d2:42:4e:56:53:96:23:fc:75:c9:af:57:f0:
4e:cb:7b:23:8b:3f:f6:a3:9b:ab:38:9d:36:d9:31:12:50:60:
ec:81:14:2b:3a:e3:ee:0e:de:bf:91:50:1d:77:9e:7a:19:f7:
e6:bf:c1:46:bd:16:e5:a3:a9:3c:b8:51:50:f9:39:68:02:e1:
48:69:1d:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/wklw3xCXsJz2xGrigE2i5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODExMTEyNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWRmZTk5ZjE4MjEyMmQxOGQ4YzhmZDNjOTRkZmEzMTA3MDgwNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBoDaeVLC5VBjdeR7h8Q40CfNQse
sOhzFNeI5Q/k4WrGssMNbWRu8Pp2ZgJRI48+fs/u33YFeGq4n6TYUKI2EpzpYtsT
ksNcCvWE2jgH1MzC7fM1QYuXouTP0DIoZ0l6f6vXbOkF/8V4jcPh0ti3JaKlrUUj
mGelX7ueNgt6/yIwDH9LSriRTO3Gbk+JXsrviaFn3oOKBG/pBA33Z5qgVEwRL0On
WqEUfS6aLe+kQ4wuOZ4UdlCEGw2bmgOjg5a01yUw4DdX/MoXvmMNSyRKJlnnbCe5
d9fhlDWLzGwbwmT7hal7J8wiHca6xPCRptl+1p0iEDOuGUW/95KYEoITBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFInf6Z8YISLRjYyP08lN+jEHCAYUMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaWRfcG54Z2hJdEdOaklfVHlVMzZNUWNJQmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAThG7AwQA
mUzCAwQAoiPlMA0GCSqGSIb3DQEBCwUAA4IBAQBMyAOfmmwO/E2tLR6KPanh+Dqc
2vBr2jb1m9iqDZ5TkAa3TyingApFGwMDjFtkDmeeIX/cQhcFqniWvSliWY1iw0Qs
+HhY554DadTCzAceZNhXqyYilzfAsl8S0Xxm0LDZfgaXi14eKeBe4uhAsR4gzk9a
0lSDVLf1LDpIuJ8S5gr+iHXtiJ8qPMe1UPNbucAiFeuR+MYHecJtaLLGF7PDC66h
Nfpi97aCBMekdIexsDpSuVMQxhugiNJCTlZTliP8dcmvV/BOy3sjiz/2o5urOJ02
2TESUGDsgRQrOuPuDt6/kVAdd556Gffmv8FGvRblo6k8uFFQ+TloAuFIaR2r
-----END CERTIFICATE-----
Generated at Wed Aug 26 11:13:17 2026 by rpki-client