Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbF3aoZ3YGUtp_sOZ55tLkZa-Uk.roa
File: wbF3aoZ3YGUtp_sOZ55tLkZa-Uk.roa (raw, json)
Hash identifier: YVYZKC3EHEykbsCnwNep83/fFcGQRIThp+9heNsNTWE=
Subject key identifier: C1:B1:77:6A:86:77:60:65:2D:A7:FB:0E:67:9E:6D:2E:46:5A:F9:49
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0448BD695B68AE8B2FB9B25F3B7A5011D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbF3aoZ3YGUtp_sOZ55tLkZa-Uk.roa
Signing time: Thu 27 Aug 2026 18:46:50 +0000
ROA not before: Thu 27 Aug 2026 18:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 78.17.177.0/24 maxlen: 24
89.125.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:8b:d6:95:b6:8a:e8:b2:fb:9b:25:f3:b7:a5:01:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 27 18:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1b1776a867760652da7fb0e679e6d2e465af949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:58:2d:9e:47:ca:90:30:ca:d7:80:0c:ee:
24:4d:95:9c:c2:a5:84:5a:8d:4a:f6:96:5e:5c:8d:
0d:5a:a6:b9:63:1d:c5:52:b9:dc:02:a1:d9:b1:b3:
32:ec:ec:14:88:14:e8:fb:fa:13:7b:8a:45:e3:6b:
84:c3:a6:48:f9:b4:17:fb:a3:8e:f9:c3:0d:e7:95:
2d:30:ec:1c:d4:9c:09:7c:c9:bc:f0:85:82:f4:10:
73:31:b4:ab:b3:d0:be:40:ca:ca:c8:b1:bd:14:74:
96:c2:09:d1:92:89:32:b7:83:65:9d:01:b2:78:8e:
74:16:b6:a6:c4:48:0c:99:e6:ab:6d:0e:17:5f:e3:
7e:1e:fc:ec:60:7b:40:b2:bd:6d:d2:e4:98:2d:0d:
98:17:a9:63:ac:4e:08:49:df:c1:64:83:a5:02:8c:
51:71:cc:63:36:50:ed:71:f3:16:6c:17:d8:4a:f9:
c3:41:06:a2:2a:fe:c4:86:c4:a1:47:23:02:3d:bd:
3d:c4:b4:96:c0:1d:dd:fe:74:7a:19:cf:6a:22:31:
8d:4e:76:6a:a1:01:4d:1f:24:06:f2:53:69:b1:b6:
f1:24:5c:7c:9a:5a:06:49:68:41:55:08:03:c6:1e:
4c:89:68:bc:c3:c2:fa:ae:10:de:65:0a:6c:ba:a5:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B1:77:6A:86:77:60:65:2D:A7:FB:0E:67:9E:6D:2E:46:5A:F9:49
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbF3aoZ3YGUtp_sOZ55tLkZa-Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.177.0/24
89.125.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:54:bb:23:27:10:80:b9:48:08:8f:5f:b1:f4:7a:7a:25:a0:
2c:e1:a7:cd:1d:6b:1a:93:a2:18:eb:18:eb:f8:91:e1:fc:75:
fe:fd:25:c4:71:2a:ed:b3:9e:d4:f4:8a:f1:5b:70:d0:82:d3:
e1:31:4d:b1:97:27:f6:37:fb:d5:6e:4d:14:0b:f7:2a:53:91:
70:a8:c4:9c:a1:5a:74:27:cd:de:10:0c:00:a2:c4:89:35:03:
5c:67:f4:a1:ec:ff:97:7d:e3:46:08:7e:2c:e9:8b:4e:f7:8f:
5c:23:60:a3:22:2d:85:c3:b0:ec:62:51:ab:31:40:bb:f8:f8:
94:28:b0:57:27:72:40:9f:65:63:5a:17:4c:28:50:a6:dd:c2:
cc:1a:47:8d:2c:d4:bc:bf:09:ed:a2:c2:f4:83:ce:fb:aa:f7:
a6:d4:31:0b:da:c8:ef:6b:aa:9e:ce:d4:68:f9:a6:20:65:37:
68:ef:0d:18:d9:d1:20:5c:48:1b:45:da:bb:f0:7c:bd:a6:2d:
44:b1:e1:d3:0a:0d:83:f5:72:78:51:f2:30:f9:81:8c:54:70:
70:be:85:58:05:4c:4f:37:7b:dc:f0:99:1f:f5:2c:ad:d2:90:
cc:3a:c9:da:c2:fb:dd:11:1a:f3:79:5a:84:21:43:a1:5c:4c:
44:5f:32:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBEi9aVtorosvubJfO3pQEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODI3MTg0NjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWIxNzc2YTg2Nzc2MDY1MmRhN2ZiMGU2NzllNmQyZTQ2NWFmOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkdYLZ5HypAwyteADO4kTZWcwqWE
Wo1K9pZeXI0NWqa5Yx3FUrncAqHZsbMy7OwUiBTo+/oTe4pF42uEw6ZI+bQX+6OO
+cMN55UtMOwc1JwJfMm88IWC9BBzMbSrs9C+QMrKyLG9FHSWwgnRkokyt4NlnQGy
eI50FramxEgMmearbQ4XX+N+HvzsYHtAsr1t0uSYLQ2YF6ljrE4ISd/BZIOlAoxR
ccxjNlDtcfMWbBfYSvnDQQaiKv7EhsShRyMCPb09xLSWwB3d/nR6Gc9qIjGNTnZq
oQFNHyQG8lNpsbbxJFx8mloGSWhBVQgDxh5MiWi8w8L6rhDeZQpsuqXPawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMGxd2qGd2BlLaf7DmeebS5GWvlJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd2JGM2FvWjNZR1V0cF9zT1o1NXRMa1phLVVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAThGxAwQA
WX1kMA0GCSqGSIb3DQEBCwUAA4IBAQAaVLsjJxCAuUgIj1+x9Hp6JaAs4afNHWsa
k6IY6xjr+JHh/HX+/SXEcSrts57U9IrxW3DQgtPhMU2xlyf2N/vVbk0UC/cqU5Fw
qMScoVp0J83eEAwAosSJNQNcZ/Sh7P+XfeNGCH4s6YtO949cI2CjIi2Fw7DsYlGr
MUC7+PiUKLBXJ3JAn2VjWhdMKFCm3cLMGkeNLNS8vwntosL0g877qvem1DEL2sjv
a6qeztRo+aYgZTdo7w0Y2dEgXEgbRdq78Hy9pi1EseHTCg2D9XJ4UfIw+YGMVHBw
voVYBUxPN3vc8Jkf9Syt0pDMOsnawvvdERrzeVqEIUOhXExEXzK6
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:42 2026 by rpki-client