Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3Ul68G38ldBad0_xIkzKCtfT_-A.roa
File: 3Ul68G38ldBad0_xIkzKCtfT_-A.roa (raw, json)
Hash identifier: 4GwyXrz0eCmmBlNQUQvjOLxntmXorrUMC1piG8ZI2xw=
Subject key identifier: DD:49:7A:F0:6D:FC:95:D0:5A:77:4F:F1:22:4C:CA:0A:D7:D3:FF:E0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E1BB12E8161D38F12726100710ABCD515
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3Ul68G38ldBad0_xIkzKCtfT_-A.roa
Signing time: Tue 12 May 2026 10:17:37 +0000
ROA not before: Tue 12 May 2026 10:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63018
IP address blocks: 78.17.88.0/22 maxlen: 22
78.17.164.0/22 maxlen: 22
89.125.4.0/22 maxlen: 22
140.225.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:b1:2e:81:61:d3:8f:12:72:61:00:71:0a:bc:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 12 10:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd497af06dfc95d05a774ff1224cca0ad7d3ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:d4:81:6c:3e:05:5d:b0:a3:53:aa:b1:02:
2e:2e:bb:7e:9a:ce:63:32:c0:bd:05:88:9d:77:00:
dc:b7:59:fc:c3:da:8f:c6:a5:26:a9:5b:cc:ea:42:
cd:b4:5a:5d:7e:4b:7d:1a:88:48:cb:f6:80:32:3c:
44:be:c2:99:b0:37:c8:25:6c:44:d5:87:c7:d5:1d:
ce:84:28:ae:11:40:c9:09:d6:0d:fc:a2:1c:c7:1f:
1f:b3:86:be:a9:d2:8c:49:86:09:96:7d:c5:1d:39:
a3:db:46:7e:31:2f:ed:f3:93:71:18:e7:5d:10:e0:
af:5e:c4:99:b9:a2:82:a7:71:45:36:10:c1:af:89:
5b:5b:ff:16:cd:01:84:bb:ea:b1:d4:98:41:17:c5:
a6:f4:84:98:11:fc:e1:6d:a4:fb:e7:f4:a5:33:02:
1e:60:c1:66:2e:6e:e2:e9:eb:b9:08:46:28:74:d5:
f3:dd:b8:3a:01:bb:9b:51:00:9b:86:44:4f:74:cf:
f8:a3:a1:44:f7:a1:88:9a:a7:a0:12:76:2d:2e:66:
1d:36:86:6e:ab:66:97:f9:5d:e4:f8:a7:8c:e4:dc:
a6:a2:bd:37:77:b2:22:21:7f:6b:56:85:1b:30:21:
4b:7d:ce:bd:1e:01:de:44:44:46:33:5d:92:ce:2a:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:7A:F0:6D:FC:95:D0:5A:77:4F:F1:22:4C:CA:0A:D7:D3:FF:E0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3Ul68G38ldBad0_xIkzKCtfT_-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.88.0/22
78.17.164.0/22
89.125.4.0/22
140.225.204.0/22
Signature Algorithm: sha256WithRSAEncryption
62:7b:eb:07:75:75:bc:c5:85:38:f8:27:4f:a1:5c:4e:a2:4d:
2e:06:04:d9:11:8a:e4:13:f0:c7:46:f9:9a:5c:24:19:7d:a4:
e0:ad:36:9a:25:b5:70:e8:93:94:88:0a:b9:a1:47:51:df:f8:
33:72:16:e0:ff:b7:bb:40:ef:ff:79:8d:ad:a1:f2:08:9b:37:
f6:8a:58:29:ad:d6:84:73:70:57:42:a8:ed:53:40:d1:77:98:
0e:69:5f:81:96:19:a4:2f:9d:7a:73:e0:3b:2b:09:0a:ae:dc:
cc:a0:85:33:4e:b7:00:5d:a3:ff:4c:97:11:e7:9c:bc:89:b8:
2c:45:63:dd:a6:8f:b0:3e:b1:fd:28:4e:ad:b7:d0:ac:de:23:
b3:f3:11:1f:62:a0:f8:2f:a4:d3:cd:46:75:cc:0e:b2:cd:ae:
fa:35:e6:d4:09:2c:0e:78:36:03:76:07:72:68:8d:a9:2a:40:
5c:f0:3d:2f:72:3a:4c:39:07:1b:c1:e4:05:6e:2e:f8:9d:4f:
c8:49:d2:a9:4f:fa:e3:6b:8f:4e:f4:7c:55:6d:50:15:c0:9e:
b1:40:c1:28:f6:ed:21:af:f4:4e:13:49:04:22:74:55:b2:0e:
4a:ca:89:34:0a:61:3e:3c:c1:24:0f:ed:ff:de:4b:a8:f8:c7:
8c:11:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:46 2026 by rpki-client