Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kSnw8uQcm5C_nzuJPG_34ZJVO9E.roa
File: kSnw8uQcm5C_nzuJPG_34ZJVO9E.roa (raw, json)
Hash identifier: NF5M/Jz61dseu1y9alrgoewYmK/CpTkioWOj7I8Lc74=
Subject key identifier: 91:29:F0:F2:E4:1C:9B:90:BF:9F:3B:89:3C:6F:F7:E1:92:55:3B:D1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CD3D63A2173EAF61CEA86DAB7421D63C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kSnw8uQcm5C_nzuJPG_34ZJVO9E.roa
Signing time: Wed 23 Sep 2026 07:49:07 +0000
ROA not before: Wed 23 Sep 2026 07:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198037
IP address blocks: 78.17.132.0/23 maxlen: 23
78.17.147.0/24 maxlen: 24
89.125.8.0/24 maxlen: 24
89.125.33.0/24 maxlen: 24
162.35.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:3d:63:a2:17:3e:af:61:ce:a8:6d:ab:74:21:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 07:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9129f0f2e41c9b90bf9f3b893c6ff7e192553bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:0b:2d:1f:90:4d:24:8d:86:68:4a:ff:25:
ed:8e:7b:c2:da:23:a9:e9:58:4a:1b:b4:8b:e3:5b:
30:20:36:eb:c3:09:eb:ec:62:36:01:e6:f1:c5:74:
13:b3:15:9b:36:c6:c9:9a:18:b0:eb:a7:14:7e:da:
11:f0:79:57:4a:3a:d6:e6:cf:34:07:e1:8e:84:5c:
b3:69:1c:7e:48:59:20:2e:bb:c5:34:f2:f8:7e:04:
50:67:62:61:0d:8d:1c:af:b3:34:c7:fc:f5:f0:17:
49:d5:09:9a:ed:0b:9b:87:88:c0:d4:29:84:06:0e:
65:e5:0f:a2:4a:b5:7f:97:bf:43:32:88:40:30:a7:
29:3a:8c:a9:51:fd:de:92:59:33:e9:b4:2f:a7:9a:
a7:80:c6:3f:b2:cc:ed:cc:4e:8f:66:6a:45:84:57:
95:ef:cb:47:54:63:05:c8:34:d1:1f:af:2e:69:14:
57:5c:82:33:e7:7a:30:46:78:c7:27:33:81:cc:85:
17:4f:fc:3e:19:d7:f1:3b:86:50:ab:f5:a0:fd:5d:
f9:c7:42:14:7f:21:09:c0:2e:a5:41:c6:45:15:ef:
09:a1:55:49:30:bb:6d:1a:0e:12:2c:f6:41:ff:2e:
d7:c6:f2:30:2f:70:2e:a2:fa:75:8d:f2:76:a3:44:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:F0:F2:E4:1C:9B:90:BF:9F:3B:89:3C:6F:F7:E1:92:55:3B:D1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kSnw8uQcm5C_nzuJPG_34ZJVO9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.132.0/23
78.17.147.0/24
89.125.8.0/24
89.125.33.0/24
162.35.224.0/24
Signature Algorithm: sha256WithRSAEncryption
10:65:80:f0:dc:e6:01:55:41:f4:5d:30:e2:d7:2e:7f:8f:d7:
b4:0a:e3:4c:81:c6:b7:30:07:97:e8:84:7f:e5:7a:ec:64:43:
fd:1f:a2:b0:f6:74:b9:af:bb:8f:03:96:a6:b9:5c:19:d6:7d:
0c:8d:db:bc:de:5b:94:9c:48:d4:cc:63:12:e4:28:4e:87:9a:
fe:95:1c:75:67:8b:b1:79:fb:60:3a:b3:44:51:42:83:26:85:
c6:ad:84:8c:b5:fc:9a:2a:51:a6:70:83:b0:00:d7:60:99:f9:
60:45:80:c3:5a:69:f7:d6:9b:03:ec:22:c3:b5:90:58:f7:03:
fa:94:00:1c:4b:b9:25:68:a2:c1:6f:38:a5:87:c7:f1:b0:52:
4e:a9:f6:fe:99:e7:1f:cf:16:84:55:6c:4e:15:8b:11:af:1e:
64:e4:cb:d4:83:a9:89:8c:97:b6:6a:f8:92:76:7d:2e:02:c0:
8a:3f:26:cf:c6:f4:6f:c8:4d:55:af:ae:fd:f4:79:7a:19:b5:
20:04:45:01:67:ff:f5:22:97:4c:72:44:8d:11:a0:f9:ea:4b:
d3:ea:73:96:86:eb:a0:d1:f1:a6:64:8c:3e:90:48:d0:9e:03:
ea:2d:cc:98:76:92:3a:75:66:dc:ed:43:e6:92:7b:d0:a4:0a:
e9:0c:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:18 2026 by rpki-client