Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xXp1R1liMBhEr8V34cFztMaz3rA.roa
File: xXp1R1liMBhEr8V34cFztMaz3rA.roa (raw, json)
Hash identifier: SV7OP/BgoOjGXwirIoCDDBN6hhxCkSV+c4Zuj2I0eBc=
Subject key identifier: C5:7A:75:47:59:62:30:18:44:AF:C5:77:E1:C1:73:B4:C6:B3:DE:B0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCD3DF0038D66D3BE38A8C6D582F4F12F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xXp1R1liMBhEr8V34cFztMaz3rA.roa
Signing time: Tue 04 Aug 2026 14:46:56 +0000
ROA not before: Tue 04 Aug 2026 14:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3d:f0:03:8d:66:d3:be:38:a8:c6:d5:82:f4:f1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 14:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c57a75475962301844afc577e1c173b4c6b3deb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:d9:bd:4d:d2:e5:e8:f0:bd:2e:53:be:05:
85:9e:74:7e:46:bc:e1:ac:13:23:a9:93:d9:6c:b6:
3c:25:e2:91:fe:2f:1b:1c:cb:44:30:d3:fa:2f:be:
c8:b6:76:d9:5a:fa:d8:2f:45:b2:b4:b0:f3:8b:92:
3f:7a:48:36:3f:38:81:96:b4:be:7c:8d:8f:35:e6:
ae:77:b9:0d:77:97:44:72:ac:e7:f7:43:78:05:4d:
77:36:e5:cc:af:f6:22:80:37:64:42:7d:1b:bc:b8:
28:db:1c:d8:7b:9e:fc:59:28:74:02:f0:63:68:9d:
7d:bc:e3:77:27:f7:79:e4:ab:89:05:fb:e2:c6:c2:
34:5a:6b:f0:85:b3:cc:44:06:39:71:4d:c6:59:06:
1f:d8:e5:a9:72:13:3f:b4:dc:02:4a:14:4a:69:e5:
de:1f:f5:a6:c8:80:55:12:11:ce:b1:83:c2:67:d3:
21:06:24:96:9e:93:43:3f:12:4e:ed:18:bd:ee:1f:
ae:91:39:a3:8d:b3:23:26:1c:2d:4a:1e:3d:e4:35:
5d:8d:be:d2:71:0e:05:29:a3:6a:2e:e2:0b:48:69:
7b:24:7b:98:81:01:61:a6:db:d4:bf:db:f8:b2:20:
2c:c0:3a:f5:c8:f8:c4:2b:08:46:30:8d:61:a3:f8:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:75:47:59:62:30:18:44:AF:C5:77:E1:C1:73:B4:C6:B3:DE:B0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xXp1R1liMBhEr8V34cFztMaz3rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
78.17.182.0/24
78.17.255.0/24
86.105.4.0/24
86.107.51.0/24
89.37.194.0/24
89.43.62.0/24
89.45.162.0/24
89.125.20.0/24
89.125.252.0/24
93.90.75.0/24
93.115.105.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
188.241.137.0/24
194.135.18.0/24
212.192.5.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9a:de:4d:19:7b:b4:2c:96:28:21:71:68:bc:4b:e0:88:74:
cd:cc:b9:9b:ba:e6:0e:6f:cb:31:7b:10:57:48:f5:be:89:b3:
ea:9a:32:b8:88:63:2e:0a:46:86:23:94:7c:c9:ee:53:0f:c7:
94:ac:c0:ef:11:da:d5:2b:b0:28:5c:74:3a:ce:85:75:36:0c:
a2:9f:ad:4f:bf:c0:34:b7:77:52:dd:39:7c:cd:5e:67:3e:54:
1d:9a:49:e6:2f:d5:3f:eb:ee:33:43:39:d6:e1:4b:fe:aa:bc:
5a:74:3a:f6:81:bd:dc:39:e9:c8:56:5b:d8:22:4e:85:74:00:
1a:6d:42:9e:6b:89:ea:65:1e:16:29:83:6e:f7:3a:f9:d7:48:
4b:ce:02:98:ac:23:46:e8:88:8a:62:fe:0e:eb:e5:f6:33:f5:
6c:ae:11:37:b0:74:3b:71:c2:a4:e9:35:0a:0b:77:e6:ac:e3:
4d:7f:e9:0b:45:da:a7:a0:ff:7d:9b:0a:13:4c:04:e2:1e:f0:
e6:32:fa:88:c2:62:6e:bd:c9:13:89:56:8c:34:4c:2b:0c:7a:
cf:c0:b6:37:1a:03:ed:5f:88:78:88:11:a2:8f:44:15:2a:ae:
8a:a4:4d:81:93:22:8c:39:39:4c:b3:97:19:57:9e:90:06:2d:
2e:77:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:54 2026 by rpki-client