Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SmFyq-fRhWfVa6GS6KI0_Cnk6mY.roa
File: SmFyq-fRhWfVa6GS6KI0_Cnk6mY.roa (raw, json)
Hash identifier: j688G10lcZZqw33zmXkKnyRpPDVnvKywNbiHJeO0Tx4=
Subject key identifier: 4A:61:72:AB:E7:D1:85:67:D5:6B:A1:92:E8:A2:34:FC:29:E4:EA:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CF237B1F136A1B2C27CCFB5C4A850041
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SmFyq-fRhWfVa6GS6KI0_Cnk6mY.roa
Signing time: Wed 23 Sep 2026 16:40:04 +0000
ROA not before: Wed 23 Sep 2026 16:40:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.171.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.167.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
104.143.212.0/22 maxlen: 22
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
140.225.214.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:23:7b:1f:13:6a:1b:2c:27:cc:fb:5c:4a:85:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 16:40:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a6172abe7d18567d56ba192e8a234fc29e4ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4b:9e:55:a9:ce:3a:2a:bc:ac:f2:c6:e1:5f:
7b:e3:b1:69:77:5a:c5:a3:f2:68:96:a5:28:06:ee:
7f:58:ee:f3:47:7a:d6:a8:8c:4e:96:df:2d:e4:ac:
fe:08:f1:13:93:e0:af:79:fa:41:76:13:26:9b:49:
63:51:34:cc:bb:8f:f2:38:b8:3f:91:27:bd:d9:f9:
f1:48:5f:a0:53:12:65:f7:66:a8:02:08:32:1f:24:
17:e4:96:63:ca:16:62:3e:bf:a0:3e:f9:64:b9:df:
98:7e:1f:4b:13:df:28:82:fb:ab:a4:8c:d4:8f:13:
38:ce:14:b5:ed:e7:70:03:6d:91:61:8d:19:86:5c:
36:cc:2f:11:51:ef:3f:83:fd:90:fc:6d:22:8d:41:
f0:16:85:fa:af:2f:f4:31:07:61:c9:06:6d:df:c7:
2c:a4:2d:e2:94:80:a8:43:25:92:7a:8b:72:df:20:
7b:94:86:49:e9:5a:ab:4e:3f:25:c8:a7:b7:2a:1f:
b8:c8:0e:33:d8:94:71:d3:21:19:31:41:36:1b:67:
99:36:39:5d:0d:bf:0b:40:04:14:54:73:5c:93:6e:
0b:a1:71:29:b1:f7:8a:2c:15:c9:8d:47:e6:c3:97:
71:3d:70:21:b3:a6:a7:27:18:5c:3f:41:58:81:73:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:72:AB:E7:D1:85:67:D5:6B:A1:92:E8:A2:34:FC:29:E4:EA:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SmFyq-fRhWfVa6GS6KI0_Cnk6mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.171.0/24
89.34.106.0/24
89.125.143.0/24
89.125.167.0/24
93.114.183.0/24
104.143.212.0/22
140.225.194.0/23
140.225.199.0/24
140.225.214.0/24
153.76.198.0/24
162.35.244.0/23
167.17.32.0/23
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:03:c2:b9:8a:4a:3c:9c:c4:ca:68:db:2f:55:3f:7b:de:60:
f7:22:db:d5:81:9f:ea:0a:ac:3d:6f:f7:c1:8d:b6:71:cd:ba:
0b:26:0f:2e:08:55:3b:0a:e8:67:5e:fc:d2:db:63:4c:57:5e:
a0:9a:2d:26:bd:39:a8:e0:0b:39:9d:e2:c4:42:8d:68:57:6d:
d0:4e:26:74:43:58:71:8f:76:ee:40:67:f0:c9:94:f1:89:8e:
5f:47:68:27:df:f9:c8:9f:26:cd:7d:41:8b:c4:22:84:5d:f0:
50:92:0f:cd:fe:b7:29:9a:9e:77:13:e7:31:7c:4e:82:59:d9:
4b:3c:7f:66:8b:78:c5:6d:9f:aa:eb:ff:0b:7a:bb:7d:31:d4:
76:a2:aa:c9:ad:45:3a:f7:53:cb:d3:b3:67:84:a7:48:94:43:
32:d4:4c:87:0c:25:7c:9b:87:f6:a2:f6:2e:73:49:78:03:62:
78:5f:69:ca:d4:e6:54:a6:65:0e:53:4e:e1:a2:f4:1c:d3:60:
02:08:84:b0:22:e1:0d:31:40:8f:eb:e5:f2:6a:a2:2c:80:e0:
6d:30:a1:fb:37:33:ee:3f:e5:99:cc:53:54:b5:46:74:ae:00:
69:17:7a:2b:26:ac:25:64:aa:78:2b:00:91:83:c1:81:3a:6b:
01:67:53:d1
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAaDPI3sfE2obLCfM+1xKhQBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTIzMTY0MDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTYxNzJhYmU3ZDE4NTY3ZDU2YmExOTJlOGEyMzRmYzI5ZTRlYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kueVanOOiq8rPLG4V9747Fpd1rF
o/JolqUoBu5/WO7zR3rWqIxOlt8t5Kz+CPETk+CvefpBdhMmm0ljUTTMu4/yOLg/
kSe92fnxSF+gUxJl92aoAggyHyQX5JZjyhZiPr+gPvlkud+Yfh9LE98ogvurpIzU
jxM4zhS17edwA22RYY0Zhlw2zC8RUe8/g/2Q/G0ijUHwFoX6ry/0MQdhyQZt38cs
pC3ilICoQyWSeoty3yB7lIZJ6VqrTj8lyKe3Kh+4yA4z2JRx0yEZMUE2G2eZNjld
Db8LQAQUVHNck24LoXEpsfeKLBXJjUfmw5dxPXAhs6anJxhcP0FYgXMc9QIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFEphcqvn0YVn1WuhkuiiNPwp5OpmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvU21GeXEtZlJoV2ZWYTZHUzZLSTBfQ25rNm1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBABO
EasDBABZImoDBABZfY8DBABZfacDBABdcrcDBAJoj9QDBAGM4cIDBACM4ccDBACM
4dYDBACZTMYDBAGiI/QDBAGnESADBAGnESYDBACnESkDBACnES4DBACnETsDBADC
Oi8DBADO9ZwDBADO9Z4wDAMEANTABwMEANTACAMEANTAHgMEANTA0DANBgkqhkiG
9w0BAQsFAAOCAQEATAPCuYpKPJzEymjbL1U/e95g9yLb1YGf6gqsPW/3wY22cc26
CyYPLghVOwroZ1780ttjTFdeoJotJr05qOALOZ3ixEKNaFdt0E4mdENYcY927kBn
8MmU8YmOX0doJ9/5yJ8mzX1Bi8QihF3wUJIPzf63KZqedxPnMXxOglnZSzx/Zot4
xW2fquv/C3q7fTHUdqKqya1FOvdTy9OzZ4SnSJRDMtRMhwwlfJuH9qL2LnNJeANi
eF9pytTmVKZlDlNO4aL0HNNgAgiEsCLhDTFAj+vl8mqiLIDgbTCh+zcz7j/lmcxT
VLVGdK4AaRd6KyasJWSqeCsAkYPBgTprAWdT0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:07:57 2026 by rpki-client