Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lB_uddPz3QeVolm1EwEhI-7l4Fg.roa
File: lB_uddPz3QeVolm1EwEhI-7l4Fg.roa (raw, json)
Hash identifier: CjKf/A5Apjel/imSPWwdIpeN2C0gp53NPMTKzMXyXRY=
Subject key identifier: 94:1F:EE:75:D3:F3:DD:07:95:A2:59:B5:13:01:21:23:EE:E5:E0:58
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D05EE7A943A330EE2EEF10FBEA3AE2A9B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lB_uddPz3QeVolm1EwEhI-7l4Fg.roa
Signing time: Thu 19 Mar 2026 11:50:08 +0000
ROA not before: Thu 19 Mar 2026 11:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 78.17.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:ee:7a:94:3a:33:0e:e2:ee:f1:0f:be:a3:ae:2a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 19 11:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=941fee75d3f3dd0795a259b513012123eee5e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:ab:df:ff:92:77:2b:e3:49:ac:84:af:b7:
36:5a:65:dc:97:08:93:f4:8e:9c:e0:31:a6:4d:92:
1e:30:ff:93:ad:6b:4d:33:fa:8d:9a:f0:0f:e5:60:
a7:1f:ea:c2:7d:5f:a4:33:31:98:77:66:36:b9:c4:
b2:d4:71:b0:c9:07:e5:b1:1c:47:ab:0c:46:10:2b:
98:f4:d9:31:9c:ea:3c:fa:d3:bf:4c:3e:5d:db:0d:
d2:89:3d:6f:c5:62:23:9e:7e:95:65:d9:26:83:07:
5d:da:b5:b8:71:08:7c:42:4b:37:ea:97:e1:55:4b:
02:72:52:99:ca:71:46:f9:37:c3:af:c3:a8:27:22:
59:a0:5b:74:43:64:34:75:eb:31:a4:3a:26:39:c3:
cf:30:e3:c9:8d:4f:95:21:05:34:6a:68:96:96:62:
1f:f5:89:fe:dc:73:c7:bb:eb:cb:e9:4f:5d:e9:09:
3e:40:aa:ba:73:11:3c:8e:4c:d2:02:f3:24:89:ef:
30:44:20:75:62:d3:81:22:f3:63:1a:3a:f8:b2:be:
bf:24:77:8c:ae:05:7c:4c:a6:47:17:4b:93:a6:c2:
1f:bd:e2:bd:75:cf:39:0c:77:c9:60:ef:46:bf:d2:
b4:59:ca:c3:b4:bd:a0:07:7a:aa:8b:7d:a0:cc:b8:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:EE:75:D3:F3:DD:07:95:A2:59:B5:13:01:21:23:EE:E5:E0:58
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lB_uddPz3QeVolm1EwEhI-7l4Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.244.0/22
Signature Algorithm: sha256WithRSAEncryption
21:6c:64:59:01:05:91:3a:e7:f6:48:2f:bf:a5:97:2a:12:96:
8d:2b:75:1a:47:4c:bb:1f:5b:05:33:0e:dc:11:6e:9e:95:e6:
ff:0a:90:19:e2:9d:8f:25:06:fd:57:b6:3f:80:40:4d:9e:0d:
2e:ac:d1:91:bf:fa:2c:ac:c6:de:76:c2:e1:9c:ae:1d:62:7e:
7a:c0:cf:e6:35:4a:0a:61:3e:b3:1f:25:c2:42:94:d7:8e:05:
4a:3f:0b:da:d0:09:bb:38:cd:90:e7:4b:d6:4a:c6:9e:78:58:
59:c7:11:09:83:27:91:2e:f5:d4:2d:10:d0:58:04:51:69:fa:
9f:1d:b0:36:75:89:d1:6d:98:ad:80:d8:fb:e6:ee:6e:a7:b0:
bf:f5:e0:0a:6e:29:93:c8:1f:39:f1:cd:35:ea:1e:1c:b0:53:
36:38:ea:a4:dd:ac:72:aa:f4:df:f0:64:f1:01:aa:f5:8c:f5:
c2:f0:61:af:70:8e:c2:1a:8a:42:64:3b:df:60:6a:83:df:b9:
66:1f:ec:ea:0e:be:44:e0:e7:45:34:7d:2e:f7:83:d0:c1:58:
02:0d:04:9e:0e:1b:34:3f:b7:74:01:42:96:c9:64:96:99:ac:
e4:1b:78:8b:5e:f6:23:8d:c5:e4:ef:69:5d:f1:8c:74:21:1c:
a4:f0:95:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0F7nqUOjMO4u7xD76jriqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMzE5MTE1MDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDFmZWU3NWQzZjNkZDA3OTVhMjU5YjUxMzAxMjEyM2VlZTVlMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Wr3/+SdyvjSayEr7c2WmXclwiT
9I6c4DGmTZIeMP+TrWtNM/qNmvAP5WCnH+rCfV+kMzGYd2Y2ucSy1HGwyQflsRxH
qwxGECuY9NkxnOo8+tO/TD5d2w3SiT1vxWIjnn6VZdkmgwdd2rW4cQh8Qks36pfh
VUsCclKZynFG+TfDr8OoJyJZoFt0Q2Q0desxpDomOcPPMOPJjU+VIQU0amiWlmIf
9Yn+3HPHu+vL6U9d6Qk+QKq6cxE8jkzSAvMkie8wRCB1YtOBIvNjGjr4sr6/JHeM
rgV8TKZHF0uTpsIfveK9dc85DHfJYO9Gv9K0WcrDtL2gB3qqi32gzLiZ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQf7nXT890HlaJZtRMBISPu5eBYMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvbEJfdWRkUHozUWVWb2xtMUV3RWhJLTdsNEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCThH0MA0G
CSqGSIb3DQEBCwUAA4IBAQAhbGRZAQWROuf2SC+/pZcqEpaNK3UaR0y7H1sFMw7c
EW6eleb/CpAZ4p2PJQb9V7Y/gEBNng0urNGRv/osrMbedsLhnK4dYn56wM/mNUoK
YT6zHyXCQpTXjgVKPwva0Am7OM2Q50vWSsaeeFhZxxEJgyeRLvXULRDQWARRafqf
HbA2dYnRbZitgNj75u5up7C/9eAKbimTyB858c016h4csFM2OOqk3axyqvTf8GTx
Aar1jPXC8GGvcI7CGopCZDvfYGqD37lmH+zqDr5E4OdFNH0u94PQwVgCDQSeDhs0
P7d0AUKWyWSWmazkG3iLXvYjjcXk72ld8Yx0IRyk8JXY
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:07 2026 by rpki-client