Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sefaa4fDjk9qB4QJWLHhgGXPRO8.roa
File: sefaa4fDjk9qB4QJWLHhgGXPRO8.roa (raw, json)
Hash identifier: LWgJ63ifdKxJrLnTLg6wCMRyCbOkF3loXD6p0bI4Mgw=
Subject key identifier: B1:E7:DA:6B:87:C3:8E:4F:6A:07:84:09:58:B1:E1:80:65:CF:44:EF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0EC9E18CE15874D0D473F46FF44C3856E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sefaa4fDjk9qB4QJWLHhgGXPRO8.roa
Signing time: Tue 29 Sep 2026 10:02:58 +0000
ROA not before: Tue 29 Sep 2026 10:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 78.17.48.0/22 maxlen: 22
78.17.204.0/22 maxlen: 22
89.125.224.0/23 maxlen: 23
92.114.93.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9e:18:ce:15:87:4d:0d:47:3f:46:ff:44:c3:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 29 10:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e7da6b87c38e4f6a07840958b1e18065cf44ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:c4:96:9d:5e:56:b7:80:78:57:4a:1c:46:
60:d7:38:df:83:d8:64:30:dd:ae:17:b5:d4:1d:7e:
73:b9:1e:64:a7:5f:bc:02:74:26:de:8c:77:e0:1a:
e5:5b:2d:3a:26:90:db:4f:85:8d:b0:23:6e:0c:29:
f8:d1:05:b4:fc:cc:f7:60:06:27:ec:19:d4:3a:bf:
2f:1d:33:31:a3:98:80:60:2e:56:3e:47:45:76:67:
10:cc:9e:7c:15:48:c0:96:f7:33:e2:85:f9:e2:f9:
15:7e:e0:9b:fe:a4:29:6e:16:15:59:36:32:ea:ed:
da:dc:c7:5e:f9:2f:03:7b:c2:df:97:30:39:4e:5d:
e8:f2:a0:55:f4:37:54:6f:57:1c:e7:f1:fb:1f:f1:
f1:76:3a:1c:cf:85:29:e8:14:d7:3d:2e:9d:e4:24:
7a:71:ec:00:c5:19:ab:88:e1:1c:cd:9d:dc:51:d0:
2a:83:16:a6:85:98:cd:c5:ac:a2:ce:6f:4a:44:0e:
ff:30:a7:8c:e1:96:ba:ea:79:cd:20:2d:d6:7c:48:
8e:d1:85:0d:91:91:0e:af:26:c1:65:db:a9:76:fe:
6c:c7:b7:ef:37:06:a6:4b:02:e0:12:55:72:be:dd:
55:be:4f:eb:a3:33:0f:38:4d:de:86:4d:ed:de:42:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:DA:6B:87:C3:8E:4F:6A:07:84:09:58:B1:E1:80:65:CF:44:EF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sefaa4fDjk9qB4QJWLHhgGXPRO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.48.0/22
78.17.204.0/22
89.125.224.0/23
92.114.93.0/24
93.114.244.0/24
194.135.30.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
14:40:56:8d:90:0d:9b:57:f5:76:38:c9:54:82:b0:b9:a6:07:
e6:5f:7d:d4:34:23:5a:be:f2:af:7f:29:37:d3:0f:59:95:e3:
a0:47:cf:f1:9d:49:ee:35:dd:79:6d:9a:46:fe:42:07:93:16:
02:e7:48:2f:34:1e:d2:84:7c:a7:1c:d0:f6:52:ad:3c:a7:af:
f3:39:64:2a:bb:77:98:b6:0c:b0:43:41:60:35:8c:f6:d0:06:
9c:50:00:b0:eb:67:c1:48:cb:88:48:db:b2:44:31:d2:9c:9a:
c2:bb:81:aa:9c:d6:22:a6:21:f9:4e:4e:16:b8:bf:07:a2:dc:
21:8f:de:7a:11:15:a5:a7:a4:b7:87:85:36:14:f7:f3:42:d6:
ca:ef:4b:d8:93:25:55:a4:da:fe:9f:57:13:29:41:be:e4:35:
98:fe:c6:19:c2:c0:63:22:23:4d:62:11:86:1b:04:ef:55:03:
dd:2c:8e:51:ee:27:b5:7e:bd:2d:0f:3f:54:e8:ec:b9:54:27:
40:98:2f:1f:16:14:f9:bc:32:bc:58:88:bc:ca:99:9c:fb:bd:
20:2c:73:8f:9c:23:4c:8a:cf:f2:77:73:98:ba:38:89:3a:6e:
36:03:2a:f7:53:b5:64:12:d1:13:d3:7d:8a:f8:07:d9:1f:2a:
d4:74:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:17 2026 by rpki-client