Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/78hDSNEpMNyFqla5IsunXowOK5s.roa
File: 78hDSNEpMNyFqla5IsunXowOK5s.roa (raw, json)
Hash identifier: 9AFNy1NWqTXLUmTeLpiBe+8dF7UypIVwRpWPemfnxWQ=
Subject key identifier: EF:C8:43:48:D1:29:30:DC:85:AA:56:B9:22:CB:A7:5E:8C:0E:2B:9B
Certificate issuer: /CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Certificate serial: 01A158BB06B2C9E302D47DB05FBDB6856818
Authority key identifier: 12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/78hDSNEpMNyFqla5IsunXowOK5s.roa
Signing time: Tue 20 Oct 2026 09:53:34 +0000
ROA not before: Tue 20 Oct 2026 09:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 217.16.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:bb:06:b2:c9:e3:02:d4:7d:b0:5f:bd:b6:85:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Validity
Not Before: Oct 20 09:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc84348d12930dc85aa56b922cba75e8c0e2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:45:89:b0:2c:c3:da:63:43:1d:54:d4:dc:
11:b5:1a:53:1a:6b:0f:a4:69:c2:a1:e2:96:37:40:
19:9a:32:66:92:e1:27:f9:d4:e8:81:f1:f9:38:bf:
7e:f9:4f:98:83:ea:b4:03:38:ed:a7:57:c7:0b:8d:
5b:9f:8d:02:62:7f:12:33:94:86:97:d2:4a:e3:65:
80:82:aa:16:ed:5c:d5:ea:f7:cd:cc:c9:f3:63:76:
10:f9:e3:3b:99:60:49:4f:63:9f:30:47:99:3f:9c:
ca:31:11:3e:0f:cd:3e:ce:c8:66:fd:d1:55:cf:27:
f4:01:fc:5b:7d:83:05:5d:85:24:d6:00:70:eb:3d:
4e:9d:cd:10:1c:76:99:8b:35:41:3b:16:bf:3d:5a:
7b:89:c0:f1:18:38:c8:78:06:19:10:4a:da:e0:00:
dd:6b:34:71:df:89:0c:02:d6:0b:58:b2:20:7d:d6:
b9:59:c9:b4:5e:a5:21:ed:81:2f:1a:7d:f3:c3:24:
63:01:a2:70:ae:74:c1:e9:bf:ea:be:9a:58:7d:66:
1f:58:a6:d4:25:52:c3:fb:79:0f:3e:c3:20:b1:1e:
f3:a1:93:81:dc:43:8c:bd:63:db:ca:c9:fb:05:dd:
5e:c3:5d:0f:2e:44:79:9f:ad:6b:f8:32:15:94:14:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C8:43:48:D1:29:30:DC:85:AA:56:B9:22:CB:A7:5E:8C:0E:2B:9B
X509v3 Authority Key Identifier:
keyid:12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/78hDSNEpMNyFqla5IsunXowOK5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.16.16.0/20
Signature Algorithm: sha256WithRSAEncryption
22:fa:a2:7b:e0:7d:a8:b6:09:ae:06:e8:0e:a9:18:f0:89:cc:
3c:1d:7b:92:bf:8e:2c:5f:23:b3:52:24:8d:63:12:fa:06:05:
0d:05:5a:f8:82:00:b7:a4:7e:37:b6:b8:13:7b:ca:7a:61:d2:
cc:b0:b5:f7:74:5d:89:38:21:ec:19:8b:1a:53:45:3c:7b:fc:
94:ad:e1:78:ab:ee:7e:6d:92:10:84:9d:42:d9:41:42:5f:f5:
50:0c:3a:68:12:2e:b3:d3:26:70:be:b7:23:24:21:cb:1c:cf:
2c:c2:0a:39:70:81:2b:04:c1:34:d3:e0:3f:dc:d7:a9:0b:e3:
be:ec:b3:e7:c7:f6:9c:0c:b7:c7:32:7e:56:a3:c3:3a:a8:e6:
00:fb:a7:bb:e7:88:f5:08:d0:d7:d4:c7:28:cd:50:f5:c1:db:
14:d5:b0:3b:a5:ca:a2:f5:7e:32:02:2e:26:bc:63:20:54:24:
7c:c5:4f:c4:8a:43:07:80:fd:10:ca:04:32:51:fe:43:0f:17:
98:03:56:77:b0:c2:9f:7b:1f:9b:c0:b1:0b:b0:17:8e:50:a2:
42:47:de:e8:e8:0d:fe:75:c8:51:ee:95:e8:0e:dd:14:50:e4:
84:53:98:4f:ff:33:e1:08:62:fc:ec:a7:3e:5a:5d:76:99:f7:
9f:32:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:16:08 2026 by rpki-client