Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8cK7uEn-Hsjt79kpSxL63fkPKbQ.roa
File: 8cK7uEn-Hsjt79kpSxL63fkPKbQ.roa (raw, json)
Hash identifier: y1A1jV0a5KshOznqJbXAghegYlNWRzMzlQxDWwJVUdk=
Subject key identifier: F1:C2:BB:B8:49:FE:1E:C8:ED:EF:D9:29:4B:12:FA:DD:F9:0F:29:B4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CE8258F7849B208EAC46FB1F06EE695B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8cK7uEn-Hsjt79kpSxL63fkPKbQ.roa
Signing time: Wed 23 Sep 2026 13:44:04 +0000
ROA not before: Wed 23 Sep 2026 13:44:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 78.17.127.0/24 maxlen: 24
89.125.97.0/24 maxlen: 24
104.143.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:82:58:f7:84:9b:20:8e:ac:46:fb:1f:06:ee:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 13:44:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1c2bbb849fe1ec8edefd9294b12faddf90f29b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:5f:bd:c4:7c:1f:c3:0c:4a:06:59:92:22:
66:ee:37:65:28:a2:80:be:88:f9:9a:9c:0a:10:9d:
55:49:30:d6:42:fc:3f:ff:fe:66:12:42:f7:25:45:
0d:42:dc:d9:a2:c4:d1:95:41:79:f6:e8:18:9b:14:
58:5f:36:fd:f7:a5:63:a8:a7:4c:56:70:2e:e8:36:
83:44:97:ce:c4:ec:74:57:60:08:29:8e:5c:5a:77:
a2:02:ff:9f:9b:15:27:26:7e:c0:6c:c9:c9:d8:c3:
90:62:fb:13:6e:13:d7:fe:6e:0f:28:ba:e9:5a:59:
17:e5:42:3e:5d:55:6f:48:db:27:e5:ac:b4:92:26:
aa:85:5e:9a:43:d8:a5:8a:2e:15:cb:76:3b:24:01:
b9:f5:4a:b6:21:dd:14:d6:41:d4:68:6c:aa:a6:fb:
df:77:97:3b:d0:8d:42:80:f6:a7:7e:42:ba:60:50:
96:b1:97:48:e1:95:82:47:64:7e:a1:fb:24:5c:95:
67:12:6f:f6:70:70:f7:c7:5c:a4:82:a7:68:66:85:
af:c2:ba:e8:b4:c9:fd:24:6a:36:3f:e9:a1:e9:24:
29:cd:c7:a2:b6:14:7b:f4:25:54:bf:7b:00:0b:b7:
65:20:8a:85:35:ee:67:c3:06:ef:e5:c6:32:b3:08:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:BB:B8:49:FE:1E:C8:ED:EF:D9:29:4B:12:FA:DD:F9:0F:29:B4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8cK7uEn-Hsjt79kpSxL63fkPKbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.127.0/24
89.125.97.0/24
104.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:62:1d:ca:33:f0:9f:5b:94:03:d9:cc:dd:6f:0d:56:0e:94:
29:f1:e0:35:3a:32:f3:d5:60:32:48:73:f1:ca:02:d3:66:ce:
68:9f:f6:a3:69:2a:b6:8d:15:67:1d:fb:8e:d2:d9:c9:5d:3c:
d8:e5:e6:7d:99:9a:0a:2d:32:9b:ab:a3:a3:2c:26:85:71:b9:
1a:14:af:3c:74:11:c1:b1:0a:db:a6:86:5b:0f:3f:03:69:93:
36:35:2c:91:8c:8e:86:bd:52:15:c7:61:0d:24:16:1b:d3:50:
ee:b6:26:8d:e7:df:64:4f:6f:fd:7b:41:98:ac:9f:dc:76:1f:
4a:b5:17:a5:f5:a4:eb:b7:b0:04:fa:8f:42:a0:46:ff:21:d3:
a3:a1:0b:d2:a4:b4:fa:e4:9b:80:2c:68:72:4f:01:22:83:2a:
d3:76:ef:a2:8f:1a:96:50:c4:f4:1b:39:6b:6e:d3:96:57:a4:
41:2d:b9:ad:b7:e6:e5:f3:5c:46:0d:a6:79:f9:66:c9:3e:83:
11:0b:64:29:73:61:2d:5d:cb:28:35:7a:22:b3:19:60:0d:d2:
c4:b8:8b:2c:3d:78:1c:cb:05:79:2f:72:45:b2:1c:b7:6a:61:
11:0b:b2:bf:bc:65:72:c2:1f:b1:70:67:46:45:a4:9c:3e:55:
5b:74:e8:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDOglj3hJsgjqxG+x8G7mlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTIzMTM0NDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWMyYmJiODQ5ZmUxZWM4ZWRlZmQ5Mjk0YjEyZmFkZGY5MGYyOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlNfvcR8H8MMSgZZkiJm7jdlKKKA
voj5mpwKEJ1VSTDWQvw///5mEkL3JUUNQtzZosTRlUF59ugYmxRYXzb996VjqKdM
VnAu6DaDRJfOxOx0V2AIKY5cWneiAv+fmxUnJn7AbMnJ2MOQYvsTbhPX/m4PKLrp
WlkX5UI+XVVvSNsn5ay0kiaqhV6aQ9ilii4Vy3Y7JAG59Uq2Id0U1kHUaGyqpvvf
d5c70I1CgPanfkK6YFCWsZdI4ZWCR2R+ofskXJVnEm/2cHD3x1ykgqdoZoWvwrro
tMn9JGo2P+mh6SQpzceithR79CVUv3sAC7dlIIqFNe5nwwbv5cYyswgQaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPHCu7hJ/h7I7e/ZKUsS+t35Dym0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvOGNLN3VFbi1Ic2p0NzlrcFN4TDYzZmtQS2JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAThF/AwQA
WX1hAwQAaI/fMA0GCSqGSIb3DQEBCwUAA4IBAQArYh3KM/CfW5QD2czdbw1WDpQp
8eA1OjLz1WAySHPxygLTZs5on/ajaSq2jRVnHfuO0tnJXTzY5eZ9mZoKLTKbq6Oj
LCaFcbkaFK88dBHBsQrbpoZbDz8DaZM2NSyRjI6GvVIVx2ENJBYb01DutiaN599k
T2/9e0GYrJ/cdh9KtRel9aTrt7AE+o9CoEb/IdOjoQvSpLT65JuALGhyTwEigyrT
du+ijxqWUMT0GzlrbtOWV6RBLbmtt+bl81xGDaZ5+WbJPoMRC2Qpc2EtXcsoNXoi
sxlgDdLEuIssPXgcywV5L3JFshy3amERC7K/vGVywh+xcGdGRaScPlVbdOik
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:02:59 2026 by rpki-client