Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rdLSI_GtXQCDDnHZTMNhylRYD5I.roa
File: rdLSI_GtXQCDDnHZTMNhylRYD5I.roa (raw, json)
Hash identifier: oBdZwZBjIDcAJrH4WmoMCQKRdIBFgZA5i0ScNQ3RT8Q=
Subject key identifier: AD:D2:D2:23:F1:AD:5D:00:83:0E:71:D9:4C:C3:61:CA:54:58:0F:92
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A033C86D37DE15DB2BDB1F8B1D21D7FDCA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rdLSI_GtXQCDDnHZTMNhylRYD5I.roa
Signing time: Mon 24 Aug 2026 12:39:28 +0000
ROA not before: Mon 24 Aug 2026 12:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 78.17.94.0/23 maxlen: 23
78.17.174.0/23 maxlen: 23
78.17.210.0/23 maxlen: 23
78.17.222.0/23 maxlen: 23
78.17.226.0/23 maxlen: 23
78.17.230.0/23 maxlen: 23
78.17.232.0/23 maxlen: 23
78.17.236.0/23 maxlen: 23
89.125.46.0/23 maxlen: 23
89.125.132.0/23 maxlen: 23
89.125.134.0/23 maxlen: 23
89.125.182.0/23 maxlen: 23
89.125.194.0/23 maxlen: 23
89.125.224.0/23 maxlen: 23
89.125.228.0/23 maxlen: 23
89.125.232.0/23 maxlen: 23
162.35.246.0/23 maxlen: 23
162.35.248.0/23 maxlen: 23
162.35.252.0/23 maxlen: 23
167.17.36.0/23 maxlen: 23
167.17.42.0/23 maxlen: 23
206.245.140.0/23 maxlen: 23
206.245.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:c8:6d:37:de:15:db:2b:db:1f:8b:1d:21:d7:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 24 12:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=add2d223f1ad5d00830e71d94cc361ca54580f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:f2:7f:06:17:3c:aa:42:ca:83:3c:c8:a8:
4d:85:38:28:97:88:b8:e7:73:6f:cf:fd:40:17:b2:
26:00:9f:45:69:68:7a:54:c3:62:ca:1f:91:fe:53:
b5:d8:36:c5:27:bb:c1:0c:1a:62:44:f0:a7:04:12:
e3:5d:ec:47:c8:99:92:9f:c3:17:18:5e:39:b3:20:
0d:f7:4f:0f:07:14:68:a2:6e:1d:a7:1f:a6:0d:6a:
b4:6d:e5:da:03:3e:a1:35:26:6f:0f:9b:d2:19:fe:
6f:84:59:12:08:6d:7c:6c:9c:2f:07:2d:81:d1:b5:
5d:3f:0f:eb:37:47:c3:cc:ed:be:c6:35:9a:00:61:
86:82:13:62:04:5d:36:38:e2:bc:53:85:bc:3e:a2:
0a:d5:cb:94:fd:61:96:0d:5d:fe:d7:28:cc:f2:14:
c9:2c:a1:b5:e9:2b:82:28:bc:78:a8:27:42:b0:f3:
a0:0f:b8:2a:e1:e9:53:29:fd:09:a1:97:de:08:45:
11:b1:8e:6e:c8:f5:03:dd:46:50:69:d3:c8:d7:d3:
f6:ce:6f:c3:08:8b:6c:dd:c1:e5:58:34:5a:08:2e:
e9:34:18:f4:d3:74:15:a1:32:39:2c:99:de:36:81:
ee:7c:70:21:69:ad:90:ca:ff:47:95:4f:5f:7c:48:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:D2:23:F1:AD:5D:00:83:0E:71:D9:4C:C3:61:CA:54:58:0F:92
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rdLSI_GtXQCDDnHZTMNhylRYD5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/23
78.17.174.0/23
78.17.210.0/23
78.17.222.0/23
78.17.226.0/23
78.17.230.0-78.17.233.255
78.17.236.0/23
89.125.46.0/23
89.125.132.0/22
89.125.182.0/23
89.125.194.0/23
89.125.224.0/23
89.125.228.0/23
89.125.232.0/23
162.35.246.0-162.35.249.255
162.35.252.0/23
167.17.36.0/23
167.17.42.0/23
206.245.140.0/23
206.245.148.0/23
Signature Algorithm: sha256WithRSAEncryption
39:f4:a8:04:1c:41:bc:05:9f:fd:7d:40:4b:b3:7d:42:01:52:
14:31:47:35:5a:dd:70:89:09:08:f9:74:7e:59:77:0f:0b:b3:
41:c1:c3:f2:f5:97:60:1e:0d:9b:2d:22:91:67:31:51:5f:36:
d7:39:1e:1c:7e:3f:b6:a6:02:d9:af:3d:3f:66:48:04:59:cf:
e7:4a:50:e0:67:ad:4d:93:67:f3:b1:5e:ba:6c:c5:bb:62:24:
2e:19:98:5b:bf:8e:47:6e:36:4f:8f:b6:e7:70:73:69:4c:1f:
23:97:4a:1a:7e:a4:97:7b:03:12:5b:25:86:a9:2a:75:b5:47:
b1:83:b0:70:80:3d:dc:a6:46:3a:b6:ac:8f:79:6f:ee:32:21:
04:46:cf:21:90:57:c0:14:3b:b9:d7:a8:53:a9:52:0b:db:f8:
f7:48:91:f0:fc:f8:f8:2d:cf:7c:4b:4f:cb:7e:e4:4e:f2:46:
a3:02:cf:e9:f3:fe:68:eb:4d:7e:a3:b7:d9:6b:e6:cf:58:32:
11:59:a9:79:fb:2e:33:16:b0:bf:92:7c:85:92:3a:56:c9:3a:
4e:76:0e:7f:a7:41:58:39:ea:84:3e:eb:1a:86:7a:bc:db:b0:
64:1d:77:9f:16:dc:34:f4:c4:a2:cb:83:02:3b:08:ec:85:5d:
22:9e:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:36 2026 by rpki-client