Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jD6SvnDDoycujhafwTaoMYuSQiM.roa
File: jD6SvnDDoycujhafwTaoMYuSQiM.roa (raw, json)
Hash identifier: 4KT44DJGYDWqebhbx/xImIMD+SyOJpdOt7Tv3SYMflw=
Subject key identifier: 8C:3E:92:BE:70:C3:A3:27:2E:8E:16:9F:C1:36:A8:31:8B:92:42:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A13AC1AD692A1A810D3A449936A03BF290
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jD6SvnDDoycujhafwTaoMYuSQiM.roa
Signing time: Wed 14 Oct 2026 14:12:13 +0000
ROA not before: Wed 14 Oct 2026 14:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c1:ad:69:2a:1a:81:0d:3a:44:99:36:a0:3b:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 14:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c3e92be70c3a3272e8e169fc136a8318b924223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:04:78:4e:98:ae:1b:bb:13:75:b9:78:62:
d6:96:73:18:7b:82:80:7e:03:e5:d0:c6:40:07:99:
3b:7d:e6:21:97:17:29:af:dd:c7:1f:b6:27:a8:6a:
3d:b3:b7:3a:bc:c2:b1:8d:14:7a:f1:f1:9d:2d:d1:
e7:f4:6b:90:ac:02:23:af:dd:29:96:8a:d5:a2:b0:
87:50:9f:b4:41:c8:bb:8b:d5:8b:f1:97:2a:79:b3:
3b:38:6c:e7:af:66:48:9d:21:8d:55:f0:28:bc:2a:
6a:19:78:a2:c0:4a:05:d4:da:f4:74:85:16:77:8f:
38:e8:5e:d6:da:f9:ac:ad:e7:36:26:ac:f4:10:85:
60:78:ff:91:4b:63:dd:f0:a4:f2:f6:1f:38:6a:84:
c8:1a:ed:f0:5e:7a:72:e6:b5:ec:c3:84:58:d1:73:
c5:6f:c9:a4:03:85:a9:4a:d8:04:bc:f6:c7:05:ce:
25:2c:d1:3c:7c:e8:82:14:1c:39:b7:1a:18:cd:56:
90:bd:40:d3:ba:cf:b2:b6:2e:31:fd:dd:78:61:ae:
45:84:99:c5:fc:b4:dc:61:63:67:a6:33:42:26:9c:
3d:fb:94:00:46:18:50:0d:d3:c7:61:12:86:49:05:
fe:90:47:de:b6:7c:1a:83:6f:52:74:99:8b:4b:52:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:92:BE:70:C3:A3:27:2E:8E:16:9F:C1:36:A8:31:8B:92:42:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jD6SvnDDoycujhafwTaoMYuSQiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
78.17.19.0/24
78.17.115.0/24
89.34.106.0/24
89.40.36.0/24
89.40.215.0/24
89.47.36.0/24
89.125.120.0/24
89.125.129.0/24
89.125.168.0/24
93.115.107.0/24
104.143.218.0/24
185.198.233.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:53:a5:6e:76:de:ba:2a:1a:8f:bb:1b:8e:36:a4:e0:ca:3a:
95:6d:91:72:2a:10:c3:82:a6:f6:9a:c7:ca:35:9c:00:cd:fb:
04:18:d1:70:67:c3:5e:55:e3:57:bd:47:a6:d3:d1:18:c8:02:
96:56:cb:64:a3:e4:6d:72:51:3a:91:48:92:8a:ac:0d:a7:21:
08:c4:0a:a8:af:86:2e:3a:c6:2e:a3:d4:fc:9c:db:40:03:e2:
40:fd:46:6b:0b:5b:d1:11:ef:ca:66:cd:7e:c7:68:26:da:1a:
e7:a9:10:a9:e3:9b:fa:8d:0a:d8:5d:9e:c1:11:ad:f0:e1:56:
5e:66:e2:a7:15:3b:ed:64:ee:6d:71:b2:d6:ad:32:88:a2:68:
d6:86:ed:da:7c:38:a2:f7:78:39:7f:a1:f5:13:70:82:02:f9:
8d:8a:50:42:24:1b:7e:ea:93:d1:e4:9d:98:d8:b6:7c:5e:0e:
dc:b8:56:37:6c:65:1a:d4:b7:7b:58:72:c9:70:8c:17:fb:b4:
02:ce:e0:88:c2:5b:fb:8b:a4:43:83:2f:a3:2c:37:44:13:9b:
10:8a:f6:44:58:3b:a5:c5:06:8d:4d:dd:20:e2:10:7b:9d:0d:
fb:86:28:c4:8b:f8:38:8d:d2:b9:2d:cd:57:46:a8:ef:9f:31:
59:c0:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:50:14 2026 by rpki-client