Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3YlXGb27gFF0L7UHr6QYPENvMs.roa
File: m3YlXGb27gFF0L7UHr6QYPENvMs.roa (raw, json)
Hash identifier: 7I3dMCFcc80UKu9lvyYGZO2/eiaZ6nGcQJT4DVgRHHA=
Subject key identifier: 9B:76:25:5C:66:F6:EE:01:45:D0:BE:D4:1E:BE:90:60:F1:0D:BC:CB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E1BB12E3FC8A8ED0B81A6168312BCB4BB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3YlXGb27gFF0L7UHr6QYPENvMs.roa
Signing time: Tue 12 May 2026 10:17:37 +0000
ROA not before: Tue 12 May 2026 10:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 78.17.200.0/22 maxlen: 22
140.225.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:b1:2e:3f:c8:a8:ed:0b:81:a6:16:83:12:bc:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 12 10:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b76255c66f6ee0145d0bed41ebe9060f10dbccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:29:73:3f:f1:07:c8:c4:f5:26:c1:58:31:11:
66:32:7b:fe:43:3c:b9:ed:fb:34:09:26:2d:84:f3:
a7:0d:5b:58:d3:99:54:01:c0:0e:dd:3c:24:72:85:
8d:f9:ed:21:d7:f5:34:96:b9:ef:01:52:f2:8d:a5:
ac:17:48:59:fc:90:7b:a8:de:0c:bf:08:f8:a7:a8:
c0:ed:0a:fe:e9:5d:5c:48:c8:2d:05:f0:70:b0:e2:
22:4b:b7:5e:c8:dd:bc:bb:6d:63:cb:b7:d9:89:24:
f0:56:35:16:a9:2e:06:75:92:6b:01:70:c3:ce:85:
73:81:55:d6:f6:c3:e2:a0:97:c3:39:f9:a6:8f:1f:
85:ba:cc:51:e1:97:7e:75:04:0e:c3:85:d6:fe:f5:
15:63:79:3f:c9:93:9e:f0:ef:8a:8d:d8:f1:50:39:
75:b9:91:f4:01:d7:2f:1c:4f:24:f9:fd:97:b8:d0:
f9:fc:e6:35:2d:fb:76:f6:45:67:89:f5:5d:01:44:
93:96:61:0b:40:b3:24:3e:30:24:84:6c:2e:e1:f6:
04:3c:68:e4:45:90:f7:36:d8:99:d3:1c:48:22:4f:
73:5c:e7:c6:55:74:74:bd:b8:f8:93:49:c3:06:10:
98:da:96:3a:54:0b:41:ee:5b:20:55:e4:42:0e:f7:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:25:5C:66:F6:EE:01:45:D0:BE:D4:1E:BE:90:60:F1:0D:BC:CB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m3YlXGb27gFF0L7UHr6QYPENvMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.200.0/22
140.225.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:9c:51:17:05:55:25:91:12:fb:1d:27:cb:07:71:9d:a1:d0:
47:60:5f:1f:fb:d6:9f:d3:ce:28:37:84:af:29:20:18:a6:60:
ac:75:98:44:c4:4a:2b:37:2e:02:4b:17:09:e8:6a:6d:fa:c1:
9f:17:ad:df:1a:fe:2f:5c:ca:e2:6e:7c:f4:16:44:24:7b:d5:
52:d6:d3:62:df:bb:61:65:57:8e:d0:b3:91:5f:09:1c:f6:12:
0a:75:67:13:02:3f:eb:79:00:c2:11:30:81:af:d8:61:d7:57:
f6:60:53:e1:ba:9d:bf:d6:b1:d4:55:22:97:71:25:01:1a:5c:
ab:9f:d0:29:45:f1:d9:e8:3a:b6:cb:86:2a:fe:00:09:79:5c:
62:a6:93:f1:50:84:65:d4:ae:2e:ac:3e:ca:b1:cd:d5:b3:38:
d2:23:b2:c2:f8:39:82:5b:aa:9b:54:22:70:a1:95:e6:fa:93:
79:f1:3f:77:8b:17:08:6e:4c:69:09:92:d6:fd:4d:b9:ff:bd:
e4:1b:a5:6e:df:71:13:11:64:85:93:a6:51:8e:7a:d6:8e:60:
f1:1e:6d:97:0c:b4:d2:8c:5c:b7:5f:57:55:9b:37:e6:e3:ef:
42:db:f5:17:9f:22:05:0e:b9:dd:fc:a3:fe:57:05:40:0d:56:
16:bc:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:58 2026 by rpki-client