Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CWaLmiRpejlCOMbjqXr_cXTjpbY.roa
File: CWaLmiRpejlCOMbjqXr_cXTjpbY.roa (raw, json)
Hash identifier: xfBPYcemDL+nZTQepmHyHK/B9SdkCAOKZ6DTiioHi8A=
Subject key identifier: 09:66:8B:9A:24:69:7A:39:42:38:C6:E3:A9:7A:FF:71:74:E3:A5:B6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D18E89BDD83466A1D51A2906E67ABB234
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CWaLmiRpejlCOMbjqXr_cXTjpbY.roa
Signing time: Mon 23 Mar 2026 04:16:30 +0000
ROA not before: Mon 23 Mar 2026 04:16:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 78.17.8.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:e8:9b:dd:83:46:6a:1d:51:a2:90:6e:67:ab:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 23 04:16:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09668b9a24697a394238c6e3a97aff7174e3a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:d7:01:dc:08:a0:a1:eb:8d:57:b1:5f:d6:
62:6b:e3:0b:18:d1:6e:4a:3f:e2:e8:d9:cd:f5:e7:
9f:bd:c4:81:ca:7c:2f:e7:c1:f0:99:b7:60:da:a3:
a8:d5:b7:c0:c1:6a:ec:fb:95:1c:34:e6:13:80:8e:
3a:fe:e5:28:74:6d:91:49:ed:33:27:c1:b4:f6:f7:
4f:8c:e5:6b:76:2a:79:49:fe:67:17:b3:96:e4:f1:
06:63:35:85:e1:6e:90:0e:eb:67:1e:9a:20:37:0f:
f7:e1:e5:20:11:2e:26:76:a8:14:c8:5a:b2:21:7e:
b4:22:a0:84:04:f9:76:d1:24:41:1c:0c:71:06:68:
7a:0d:16:8c:92:d0:2c:86:1a:25:31:96:e5:a5:e3:
85:bf:ba:87:16:23:34:79:37:02:30:e3:6f:a2:a9:
64:de:bb:4b:bf:f1:55:f5:7a:f0:53:a8:86:03:e0:
83:b8:2f:ef:1b:9c:0b:e6:94:fa:de:31:04:76:69:
81:42:cb:dc:74:08:25:2e:de:4b:10:89:60:c8:55:
d8:86:b6:f6:ed:1c:49:64:63:93:43:33:0b:38:3d:
e0:e1:f3:68:90:94:ad:8b:76:2c:17:ec:c9:94:1c:
63:6b:91:2b:e9:06:e4:3b:1d:6a:fc:2b:0c:20:e0:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:8B:9A:24:69:7A:39:42:38:C6:E3:A9:7A:FF:71:74:E3:A5:B6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CWaLmiRpejlCOMbjqXr_cXTjpbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.8.0/24
193.124.80.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4c:5d:8e:6b:15:89:af:95:04:99:ea:d2:27:6e:34:a7:50:
fc:83:e4:9d:aa:df:23:e2:18:be:8a:a8:d0:43:f7:77:18:29:
3c:67:55:e2:cb:cc:e7:4b:03:72:24:69:0a:e7:09:dc:63:09:
01:bc:12:27:e5:82:b4:8f:ca:79:21:be:35:a6:ab:16:90:fe:
45:46:3e:66:65:11:15:fd:dc:8d:a4:06:5b:ba:d8:32:aa:11:
7b:54:1f:c5:11:86:c5:8b:50:db:32:38:49:d4:ec:b0:95:1e:
6e:83:a8:e5:fd:57:c6:b9:01:b6:e1:9b:e5:e5:ee:17:e6:5c:
64:64:f3:64:5f:d1:78:6b:99:1a:ab:ce:e5:ce:ed:1e:5f:4d:
7e:a3:d1:31:fa:dc:3e:fa:86:88:f8:08:a3:fb:79:43:16:98:
44:ff:d0:24:68:0e:13:c2:13:20:f3:36:bf:8d:a4:ec:df:f9:
9d:c4:c4:e6:d1:ce:42:2f:85:75:26:63:4b:7d:9e:1f:08:02:
18:8f:a7:74:a2:3b:9d:06:b9:af:66:d5:38:5b:c0:0d:bd:0e:
4d:e3:83:4f:70:be:26:be:9f:68:30:21:cb:e3:04:74:62:69:
80:a5:1c:79:d3:68:df:46:57:fc:7d:51:43:60:19:ec:40:d4:
50:fa:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:35 2026 by rpki-client