Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eUxNHhC3DuMi7EjA-mPw09vPu84.roa
File: eUxNHhC3DuMi7EjA-mPw09vPu84.roa (raw, json)
Hash identifier: AXOG/uPcNsIHKk7/DRCApAtAIWa9PI1UxZHJFLYkXnU=
Subject key identifier: 79:4C:4D:1E:10:B7:0E:E3:22:EC:48:C0:FA:63:F0:D3:DB:CF:BB:CE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CC7D20F00E1FB5E70F8169E09C224BFB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eUxNHhC3DuMi7EjA-mPw09vPu84.roa
Signing time: Wed 23 Sep 2026 04:19:07 +0000
ROA not before: Wed 23 Sep 2026 04:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 78.17.178.0/24 maxlen: 24
89.125.96.0/24 maxlen: 24
167.17.34.0/24 maxlen: 24
167.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:7d:20:f0:0e:1f:b5:e7:0f:81:69:e0:9c:22:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 04:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=794c4d1e10b70ee322ec48c0fa63f0d3dbcfbbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:ec:a7:3d:33:c3:c5:e0:2d:1f:8c:13:08:
78:11:d4:e5:93:f0:6b:07:69:b1:98:3c:2f:dc:e1:
21:05:5c:e5:34:87:ef:bf:27:38:39:f7:b0:ec:38:
fc:0e:0e:50:2e:61:e2:0b:41:e3:d4:88:36:2e:be:
8a:60:b3:0b:ea:23:7a:b9:bd:f1:a2:bb:b1:a0:c4:
4e:ea:24:51:60:73:f0:12:f2:a8:1b:d0:98:65:5c:
0b:53:11:9e:e5:ab:99:1f:e6:b6:b6:ac:aa:bf:de:
99:e2:52:70:e3:7b:75:7f:b6:f6:d7:a3:cf:e3:c9:
da:b7:17:21:e0:25:86:8b:42:4f:1e:f4:b9:6d:cd:
97:20:f5:40:68:c7:56:1c:32:3e:80:62:36:85:f9:
6b:e7:e2:10:ee:ec:51:f0:43:00:e9:a7:26:18:84:
fb:eb:d7:96:86:68:fa:35:c6:1e:4f:1c:6d:b6:95:
72:20:cb:32:3f:44:e3:b0:a6:18:13:aa:89:07:d3:
c3:ad:c0:e7:28:06:99:29:63:39:11:6a:5c:c2:8f:
e4:46:a3:07:a8:9a:e2:14:1d:f5:4e:98:bf:45:b5:
9a:45:20:08:a0:a1:98:da:1e:48:1c:48:8f:c2:bb:
b1:6f:1c:aa:5f:bf:71:e0:90:10:99:80:af:94:5f:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:4D:1E:10:B7:0E:E3:22:EC:48:C0:FA:63:F0:D3:DB:CF:BB:CE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eUxNHhC3DuMi7EjA-mPw09vPu84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.178.0/24
89.125.96.0/24
167.17.34.0/24
167.17.58.0/24
Signature Algorithm: sha256WithRSAEncryption
41:91:ef:f0:44:97:da:40:77:25:88:d1:01:61:f7:a4:93:a6:
38:2d:2b:0f:86:cc:ee:c4:de:c8:d9:bb:dc:55:9d:ac:56:72:
fa:e7:78:71:1d:19:a7:a8:17:d5:3c:df:4e:f8:14:cc:08:27:
f3:3f:72:8e:37:91:3f:94:99:3e:2d:49:cc:88:1d:4f:b2:5b:
34:40:c8:b9:17:a7:01:56:03:8b:7b:3c:04:a5:45:c7:a6:db:
92:46:0f:10:7e:a9:68:a8:36:11:f8:e2:83:21:b3:49:99:3c:
45:ab:50:f5:23:c8:be:37:8a:41:e8:33:f6:4e:83:bc:95:f1:
d3:40:ed:f9:a9:ed:7f:0e:b7:6d:72:48:20:76:d9:a2:db:48:
6f:b2:9f:32:1b:ef:01:88:84:b2:2f:ee:e8:5e:8f:1f:3c:77:
2d:99:a4:65:4a:c0:fb:ee:03:42:4f:6c:ad:82:9f:99:72:77:
89:42:0e:7f:b2:34:3b:68:55:ae:fb:29:c6:53:68:b8:4a:2c:
5a:85:d2:18:ce:1f:5c:a3:59:45:03:ff:d1:42:b4:60:da:4a:
18:51:db:58:20:ef:68:c0:ec:1d:3b:a9:6a:0e:23:f1:a4:99:
ad:a1:d6:ec:6b:ed:ef:21:9c:d6:3d:52:8d:3a:f3:d4:4a:e9:
a3:bb:d5:4b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDMfSDwDh+15w+BaeCcIkv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTIzMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTRjNGQxZTEwYjcwZWUzMjJlYzQ4YzBmYTYzZjBkM2RiY2ZiYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHPspz0zw8XgLR+MEwh4EdTlk/Br
B2mxmDwv3OEhBVzlNIfvvyc4Ofew7Dj8Dg5QLmHiC0Hj1Ig2Lr6KYLML6iN6ub3x
oruxoMRO6iRRYHPwEvKoG9CYZVwLUxGe5auZH+a2tqyqv96Z4lJw43t1f7b216PP
48natxch4CWGi0JPHvS5bc2XIPVAaMdWHDI+gGI2hflr5+IQ7uxR8EMA6acmGIT7
69eWhmj6NcYeTxxttpVyIMsyP0TjsKYYE6qJB9PDrcDnKAaZKWM5EWpcwo/kRqMH
qJriFB31Tpi/RbWaRSAIoKGY2h5IHEiPwruxbxyqX79x4JAQmYCvlF/gtQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHlMTR4Qtw7jIuxIwPpj8NPbz7vOMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZVV4TkhoQzNEdU1pN0VqQS1tUHcwOXZQdTg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAThGyAwQA
WX1gAwQApxEiAwQApxE6MA0GCSqGSIb3DQEBCwUAA4IBAQBBke/wRJfaQHcliNEB
Yfekk6Y4LSsPhszuxN7I2bvcVZ2sVnL653hxHRmnqBfVPN9O+BTMCCfzP3KON5E/
lJk+LUnMiB1Psls0QMi5F6cBVgOLezwEpUXHptuSRg8QfqloqDYR+OKDIbNJmTxF
q1D1I8i+N4pB6DP2ToO8lfHTQO35qe1/Drdtckggdtmi20hvsp8yG+8BiISyL+7o
Xo8fPHctmaRlSsD77gNCT2ytgp+ZcneJQg5/sjQ7aFWu+ynGU2i4SixahdIYzh9c
o1lFA//RQrRg2koYUdtYIO9owOwdO6lqDiPxpJmtodbsa+3vIZzWPVKNOvPUSumj
u9VL
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:18:01 2026 by rpki-client