Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-t-hda_sVznVBsmD_lsCXf__os.roa
File: t-t-hda_sVznVBsmD_lsCXf__os.roa (raw, json)
Hash identifier: HcAxgZTPgOqm8T9ilK/zmorKTBTS2sOjKciR3oJW1Ic=
Subject key identifier: B7:EB:7E:85:D6:BF:B1:5C:E7:54:1B:26:0F:F9:6C:09:77:FF:FE:8B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCE3E47C804CA5D1223357C3350AE6528
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-t-hda_sVznVBsmD_lsCXf__os.roa
Signing time: Tue 04 Aug 2026 19:26:55 +0000
ROA not before: Tue 04 Aug 2026 19:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210654
IP address blocks: 78.17.148.0/23 maxlen: 23
89.125.44.0/23 maxlen: 23
91.132.50.0/23 maxlen: 23
167.17.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:3e:47:c8:04:ca:5d:12:23:35:7c:33:50:ae:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 19:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7eb7e85d6bfb15ce7541b260ff96c0977fffe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:16:6f:d9:bd:6c:7a:8a:a5:95:73:f9:b8:
0f:d2:bf:ed:49:72:6e:28:85:cf:87:33:c9:d8:3b:
92:ec:06:dd:c1:27:da:78:a4:7c:bd:8a:eb:0a:f4:
92:37:6e:0a:dd:d5:c6:33:0a:38:00:54:a2:c4:99:
8f:a7:5e:cb:51:70:9b:bf:f6:c7:fe:a3:b4:70:f8:
46:70:39:87:ca:6a:3d:0e:8a:1b:2f:7d:60:dd:e8:
b1:a1:3a:57:2e:4c:ee:41:fd:60:23:0d:1a:ac:e7:
bd:89:ca:07:6d:81:c0:af:e2:19:05:6c:a3:89:20:
46:1f:35:1c:b1:7e:ad:05:40:31:ef:b8:ff:4f:20:
e9:6d:8f:9e:37:ea:05:70:70:20:7a:9f:57:70:b9:
77:e5:ed:ec:fc:83:3c:0d:58:9c:20:9d:f5:02:21:
ca:3a:72:c1:49:90:a6:dd:64:00:e9:ca:b4:e7:ba:
42:83:1c:6f:b7:83:32:2b:83:70:bd:dc:bb:38:fc:
75:d3:b6:1b:ea:81:f8:6e:c0:81:11:0e:79:a2:19:
1c:a6:69:cc:78:26:d0:57:4e:69:75:81:77:38:54:
c0:a9:88:a5:71:ce:2a:43:62:47:9e:dc:db:59:35:
3d:7a:1f:f2:dc:75:77:4a:c3:c7:46:a1:c9:2e:ae:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:7E:85:D6:BF:B1:5C:E7:54:1B:26:0F:F9:6C:09:77:FF:FE:8B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t-t-hda_sVznVBsmD_lsCXf__os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.148.0/23
89.125.44.0/23
91.132.50.0/23
167.17.56.0/23
Signature Algorithm: sha256WithRSAEncryption
95:9e:f4:ce:7d:1d:2d:5a:1d:a8:4e:08:d0:d3:54:c1:b4:4b:
1b:b7:74:35:d4:34:31:66:1b:77:8d:ae:51:58:85:6b:4c:93:
17:0c:44:2b:1d:be:f2:3e:ab:74:9a:61:a5:ee:87:04:81:80:
07:ca:65:51:5f:a9:4d:05:0f:cd:dd:81:8e:a3:e4:fd:e9:89:
aa:7d:1b:a7:26:b5:8f:40:ba:16:0e:50:a7:01:0c:f9:13:2d:
b6:33:40:8e:10:91:56:33:f4:2c:e2:ef:3d:de:d2:07:ce:af:
92:e8:8a:ba:4f:19:50:3f:2c:24:82:a0:5d:d8:8a:95:76:4f:
e9:e6:59:43:a6:c0:0f:ff:f6:2b:22:fd:50:c2:32:4e:04:3c:
37:5a:2b:95:4a:7b:e4:b3:4b:5d:ad:80:bc:6b:97:71:4c:52:
b8:96:07:3d:ff:15:3c:54:48:2e:da:0a:3b:96:5c:0e:bc:13:
86:6a:65:88:8d:79:78:ea:f7:c6:db:f3:a1:55:93:c1:45:8d:
4f:a5:df:42:a4:d6:31:74:8c:5e:cd:c0:8c:b3:cc:64:e5:e5:
f9:ca:5a:24:c6:97:97:af:01:65:ea:27:19:a9:4b:a1:4d:7b:
6c:a0:03:61:25:8b:d6:39:5c:49:10:77:ab:73:28:0a:7f:c1:
ff:d6:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:03:56 2026 by rpki-client