Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4aLQw-74InGHBpoKWlSEPOnUvQ.roa
File: s4aLQw-74InGHBpoKWlSEPOnUvQ.roa (raw, json)
Hash identifier: KKB/dHR4tuECvbSrc+KBcr1e3P3mn14j3PsPhc5HiCI=
Subject key identifier: B3:86:8B:43:0F:BB:E0:89:C6:1C:1A:68:29:69:52:10:F3:A7:52:F4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A05706B712FA679F8A2E648749978692FB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4aLQw-74InGHBpoKWlSEPOnUvQ.roa
Signing time: Mon 31 Aug 2026 08:54:12 +0000
ROA not before: Mon 31 Aug 2026 08:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 78.17.70.0/23 maxlen: 23
78.17.212.0/23 maxlen: 23
78.17.221.0/24 maxlen: 24
78.17.225.0/24 maxlen: 24
89.125.50.0/24 maxlen: 24
89.125.66.0/24 maxlen: 24
89.125.69.0/24 maxlen: 24
89.125.187.0/24 maxlen: 24
89.125.209.0/24 maxlen: 24
89.125.255.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
153.76.199.0/24 maxlen: 24
162.35.242.0/23 maxlen: 23
185.198.234.0/24 maxlen: 24
206.245.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:06:b7:12:fa:67:9f:8a:2e:64:87:49:97:86:92:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 31 08:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3868b430fbbe089c61c1a6829695210f3a752f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:4e:5d:9e:a8:a2:2d:5f:02:e1:48:0b:36:
7e:88:27:c1:2e:ed:41:21:6e:4b:e2:86:b8:2d:70:
0b:3a:0a:e5:75:80:21:c5:11:70:a5:c6:a9:4a:ae:
42:96:83:2d:25:b7:f7:b7:d8:dc:ee:f7:3d:d3:fd:
c6:66:d4:98:a3:32:91:32:af:74:6d:3a:b8:31:df:
21:ab:ea:f8:a0:a9:f5:e6:3e:06:61:77:b4:3f:d4:
c1:cf:be:c1:b9:6f:2a:dd:5a:2f:ea:f9:23:b5:89:
18:ef:da:82:64:1c:3a:9d:b3:ea:35:8c:ac:9e:f5:
8d:e4:2a:99:ee:b9:87:be:50:54:d0:99:4c:de:6c:
5d:6e:34:db:11:1e:2a:2e:70:11:f7:de:0b:6f:6b:
02:01:15:29:7f:75:c7:f5:be:1d:a7:20:a2:d4:31:
6f:d8:73:78:26:41:68:24:bf:e2:e6:f5:f2:0e:f3:
9e:fc:d3:36:e1:d6:74:88:6f:8d:7f:27:85:11:4d:
67:75:2b:5d:af:6d:f4:95:99:b2:4d:d0:a1:19:63:
2b:a8:5b:f4:45:db:7c:03:b5:95:7b:d0:7e:03:a1:
7e:ac:94:de:26:d1:17:95:72:49:4e:03:2f:6d:d9:
76:4e:c9:9f:7a:58:1b:5a:5c:6e:0e:2e:40:36:30:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:8B:43:0F:BB:E0:89:C6:1C:1A:68:29:69:52:10:F3:A7:52:F4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4aLQw-74InGHBpoKWlSEPOnUvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.70.0/23
78.17.212.0/23
78.17.221.0/24
78.17.225.0/24
89.125.50.0/24
89.125.66.0/24
89.125.69.0/24
89.125.187.0/24
89.125.209.0/24
89.125.255.0/24
103.245.231.0/24
153.76.199.0/24
162.35.242.0/23
185.198.234.0/24
206.245.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:97:75:31:c7:71:cd:a4:3c:f6:fc:d3:3d:cd:0d:c3:0d:61:
ca:47:d0:97:73:8e:0e:37:aa:1c:15:38:a6:3a:d7:e9:f8:49:
d0:53:65:a5:f0:4b:01:40:e4:64:98:45:66:78:b4:29:f4:cf:
8c:7e:55:5b:48:a0:25:1b:a3:ac:bd:2a:a1:3a:1c:32:6b:4a:
8d:7e:d8:14:8e:bf:c7:07:69:1a:e3:80:8c:0d:43:1f:d9:a7:
9b:63:fd:17:94:c5:44:21:e9:53:4d:f0:5a:32:67:47:62:5a:
54:aa:98:63:40:71:64:4c:ff:58:20:f6:f9:15:69:b1:81:3f:
9c:b2:45:54:19:8d:fe:d4:4b:c5:33:31:0f:87:be:2f:6e:fb:
49:b8:b3:54:6b:0a:1f:11:17:21:90:96:be:91:68:73:3f:81:
aa:29:1a:07:cb:c0:4e:55:97:8a:ff:b0:50:df:a7:c8:a0:ea:
ce:92:41:cd:c7:cf:76:73:3c:56:d7:16:f3:ed:92:fb:d8:f3:
ae:b7:88:1c:a3:9f:0d:a0:7e:64:6c:36:12:77:b7:90:15:09:
b1:a3:65:50:de:a1:0b:9b:64:1a:54:10:3b:9e:0d:1c:e0:88:
f5:80:b7:46:90:b2:38:0b:8d:d0:36:ec:dc:63:39:16:73:70:
de:2c:24:ef
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAaBXBrcS+mefii5kh0mXhpL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODMxMDg1NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzg2OGI0MzBmYmJlMDg5YzYxYzFhNjgyOTY5NTIxMGYzYTc1MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNROXZ6ooi1fAuFICzZ+iCfBLu1B
IW5L4oa4LXALOgrldYAhxRFwpcapSq5CloMtJbf3t9jc7vc90/3GZtSYozKRMq90
bTq4Md8hq+r4oKn15j4GYXe0P9TBz77BuW8q3Vov6vkjtYkY79qCZBw6nbPqNYys
nvWN5CqZ7rmHvlBU0JlM3mxdbjTbER4qLnAR994Lb2sCARUpf3XH9b4dpyCi1DFv
2HN4JkFoJL/i5vXyDvOe/NM24dZ0iG+NfyeFEU1ndStdr230lZmyTdChGWMrqFv0
Rdt8A7WVe9B+A6F+rJTeJtEXlXJJTgMvbdl2TsmfelgbWlxuDi5ANjCeSwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFLOGi0MPu+CJxhwaaClpUhDzp1L0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvczRhTFF3LTc0SW5HSEJwb0tXbFNFUE9uVXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBThFGAwQB
ThHUAwQAThHdAwQAThHhAwQAWX0yAwQAWX1CAwQAWX1FAwQAWX27AwQAWX3RAwQA
WX3/AwQAZ/XnAwQAmUzHAwQBoiPyAwQAucbqAwQAzvWTMA0GCSqGSIb3DQEBCwUA
A4IBAQAal3Uxx3HNpDz2/NM9zQ3DDWHKR9CXc44ON6ocFTimOtfp+EnQU2Wl8EsB
QORkmEVmeLQp9M+MflVbSKAlG6OsvSqhOhwya0qNftgUjr/HB2ka44CMDUMf2aeb
Y/0XlMVEIelTTfBaMmdHYlpUqphjQHFkTP9YIPb5FWmxgT+cskVUGY3+1EvFMzEP
h74vbvtJuLNUawofERchkJa+kWhzP4GqKRoHy8BOVZeK/7BQ36fIoOrOkkHNx892
czxW1xbz7ZL72POut4gco58NoH5kbDYSd7eQFQmxo2VQ3qELm2QaVBA7ng0c4Ij1
gLdGkLI4C43QNuzcYzkWc3DeLCTv
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:44 2026 by rpki-client