Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8USvmXquKYN7-KoEsP6zKehFDY8.roa
File: 8USvmXquKYN7-KoEsP6zKehFDY8.roa (raw, json)
Hash identifier: t/5CVDJdv14odxLf/hsGdWXM1tnfFySCtZXVXcF91N0=
Subject key identifier: F1:44:AF:99:7A:AE:29:83:7B:F8:AA:04:B0:FE:B3:29:E8:45:0D:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1C07A50A11C2689D3301A496D38051E4D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8USvmXquKYN7-KoEsP6zKehFDY8.roa
Signing time: Mon 09 Nov 2026 13:23:23 +0000
ROA not before: Mon 09 Nov 2026 13:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 78.17.244.0/22 maxlen: 22
89.125.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:7a:50:a1:1c:26:89:d3:30:1a:49:6d:38:05:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 9 13:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f144af997aae29837bf8aa04b0feb329e8450d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:11:eb:44:2f:ff:0e:5b:b3:8a:ce:12:f3:
47:a5:43:f8:a8:3b:75:17:69:d0:29:09:8c:0c:ab:
af:1c:12:47:13:4e:5f:80:e6:02:97:d8:aa:53:9c:
c4:ae:77:2a:b6:93:4b:68:78:5a:df:9b:53:97:7b:
7b:4c:e1:1a:7f:83:ee:ba:40:25:66:78:ec:dd:7c:
82:60:0c:bd:77:9f:bb:4a:e0:99:ce:6f:61:78:ba:
b1:38:40:ff:1e:4f:54:8a:a8:71:84:dd:a6:9e:b5:
73:d1:78:c7:f2:d2:eb:51:63:0d:0f:ba:0f:c1:42:
b8:2e:39:96:da:30:cb:09:15:4e:f7:1c:b7:3e:ad:
5f:65:3e:25:40:22:f1:a8:3d:18:b4:eb:9d:b6:ac:
ea:6d:e3:70:96:fd:ae:e6:4a:40:cd:8f:f7:fc:ba:
40:84:03:cb:60:a5:b8:8e:40:f5:63:1c:10:e1:b9:
cc:75:48:0e:35:c6:2c:b7:c1:b4:f1:71:5c:10:64:
2e:9b:19:70:ba:aa:c8:36:72:30:86:c9:b2:27:3d:
e8:e9:ac:21:8c:38:f0:f0:87:c2:87:95:4b:40:71:
f3:ac:88:d9:82:9e:4f:d1:e8:0b:f5:ec:86:ed:e1:
b7:0f:ba:65:e0:88:ef:31:67:0f:94:91:ed:d1:5f:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:AF:99:7A:AE:29:83:7B:F8:AA:04:B0:FE:B3:29:E8:45:0D:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8USvmXquKYN7-KoEsP6zKehFDY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.244.0/22
89.125.176.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5e:e6:54:c0:fd:15:0d:6b:1a:f8:0e:44:f7:79:ad:be:25:
82:7e:6d:6a:c4:33:53:0f:7f:7e:11:d8:ec:18:2b:cb:ef:85:
50:5b:5f:45:df:b1:4c:54:33:17:ca:3a:2b:f5:65:59:dd:18:
d3:59:56:16:b8:9b:33:cf:0c:4c:12:35:fd:bb:af:28:a7:8e:
27:75:d9:91:25:cf:97:17:74:6d:d4:1f:7d:11:d7:2c:05:b6:
d1:b0:b2:1b:92:60:23:f7:20:e2:0f:7c:9b:d7:96:de:82:19:
40:3e:c5:09:00:1a:bd:cf:7b:c7:98:c7:02:a6:a0:ed:fe:50:
0c:c9:e6:89:c9:1d:4f:90:9a:d7:d1:53:26:96:47:42:d6:ba:
8a:16:68:e5:64:e9:16:41:39:a2:ee:68:60:c0:fe:a7:2b:1c:
dc:ea:08:78:32:ee:96:04:5e:79:d9:8f:0d:3c:f5:9f:26:2f:
9e:1c:e5:77:7a:b6:f8:4c:c3:9b:49:2d:b8:bb:ec:aa:55:ed:
ae:3c:72:48:a7:e6:44:ce:0d:8c:95:2d:d1:d8:35:f9:eb:09:
84:6c:e1:78:bb:70:d3:b5:16:70:1b:a3:62:a8:4f:09:23:e1:
2d:a4:44:2a:fd:74:01:d9:b3:f2:73:d2:18:53:c7:c7:0f:c4:
c3:f2:84:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHAelChHCaJ0zAaSW04BR5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMTA5MTMyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ0YWY5OTdhYWUyOTgzN2JmOGFhMDRiMGZlYjMyOWU4NDUwZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uUR60Qv/w5bs4rOEvNHpUP4qDt1
F2nQKQmMDKuvHBJHE05fgOYCl9iqU5zErncqtpNLaHha35tTl3t7TOEaf4PuukAl
Znjs3XyCYAy9d5+7SuCZzm9heLqxOED/Hk9UiqhxhN2mnrVz0XjH8tLrUWMND7oP
wUK4LjmW2jDLCRVO9xy3Pq1fZT4lQCLxqD0YtOudtqzqbeNwlv2u5kpAzY/3/LpA
hAPLYKW4jkD1YxwQ4bnMdUgONcYst8G08XFcEGQumxlwuqrINnIwhsmyJz3o6awh
jDjw8IfCh5VLQHHzrIjZgp5P0egL9eyG7eG3D7pl4IjvMWcPlJHt0V/cbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPFEr5l6rimDe/iqBLD+synoRQ2PMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvOFVTdm1YcXVLWU43LUtvRXNQNnpLZWhGRFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCThH0AwQC
WX2wMA0GCSqGSIb3DQEBCwUAA4IBAQCJXuZUwP0VDWsa+A5E93mtviWCfm1qxDNT
D39+EdjsGCvL74VQW19F37FMVDMXyjor9WVZ3RjTWVYWuJszzwxMEjX9u68op44n
ddmRJc+XF3Rt1B99EdcsBbbRsLIbkmAj9yDiD3yb15beghlAPsUJABq9z3vHmMcC
pqDt/lAMyeaJyR1PkJrX0VMmlkdC1rqKFmjlZOkWQTmi7mhgwP6nKxzc6gh4Mu6W
BF552Y8NPPWfJi+eHOV3erb4TMObSS24u+yqVe2uPHJIp+ZEzg2MlS3R2DX56wmE
bOF4u3DTtRZwG6NiqE8JI+EtpEQq/XQB2bPyc9IYU8fHD8TD8oQg
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:04 2026 by rpki-client