Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tCKx7y85d-FhBElnv11phNfb48o.roa
File: tCKx7y85d-FhBElnv11phNfb48o.roa (raw, json)
Hash identifier: XyhunJk7s8+eKaoiYBTgx0UirX/5Ej3ol1yUAbO1tdo=
Subject key identifier: B4:22:B1:EF:2F:39:77:E1:61:04:49:67:BF:5D:69:84:D7:DB:E3:CA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A19B394D6D87CCF8EAAB6147AB4D0922AA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tCKx7y85d-FhBElnv11phNfb48o.roa
Signing time: Mon 02 Nov 2026 07:46:26 +0000
ROA not before: Mon 02 Nov 2026 07:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:39:4d:6d:87:cc:f8:ea:ab:61:47:ab:4d:09:22:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 2 07:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b422b1ef2f3977e161044967bf5d6984d7dbe3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:b5:f7:21:8a:39:6e:28:46:f9:6c:2a:c8:
a1:6e:23:dc:62:2b:50:d7:54:b7:5e:70:15:47:53:
6b:ff:32:ba:66:27:0d:c3:d4:cf:9a:d8:d6:48:8a:
95:ee:5f:b5:60:84:b1:6a:32:cb:d9:c7:b9:4c:b5:
48:71:e5:52:6e:c2:fb:8b:f8:53:aa:2f:ee:b9:3e:
62:9f:74:68:1b:f8:cc:5a:b4:56:85:19:51:15:44:
7b:81:0e:0f:62:7d:b5:c3:ea:e5:c4:8a:10:cb:99:
de:ba:60:f7:60:fb:dd:bc:14:d9:b4:cf:d9:42:4a:
ac:c0:08:ee:e0:63:2d:d5:4b:2b:05:f3:67:1c:1d:
5b:f0:d0:aa:a2:3e:0e:28:2f:98:db:66:35:56:c0:
bc:c4:aa:d2:7a:08:4e:73:13:f8:fe:ee:38:8b:2b:
ac:80:4a:5e:76:9b:ef:03:8f:c1:ce:64:be:d2:88:
0d:2c:01:31:f2:10:e8:99:f9:cb:f9:21:91:84:df:
71:4c:a5:da:f4:ab:02:09:56:7c:9e:1f:05:08:31:
c3:cb:80:6c:6f:97:f4:d8:24:f9:75:c8:80:af:ce:
7d:b4:bc:8f:f1:45:fc:d1:1e:99:e2:31:1a:5c:98:
9e:4d:97:42:e6:9e:1d:cc:b0:c6:4b:c3:ee:71:b2:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:B1:EF:2F:39:77:E1:61:04:49:67:BF:5D:69:84:D7:DB:E3:CA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tCKx7y85d-FhBElnv11phNfb48o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.182.0/24
78.17.255.0/24
86.105.4.0/24
89.125.20.0/24
89.125.252.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8e:4b:4a:7a:69:69:ee:6b:ef:21:38:d3:14:2e:6b:09:3d:
1e:46:11:3a:57:9e:55:b1:38:0d:e7:42:3a:85:41:38:6b:d2:
41:40:65:73:53:cf:90:24:00:ee:ba:64:3f:d1:cc:f5:78:cf:
d3:44:1f:37:78:2c:b4:76:cf:93:07:11:55:c1:c0:a8:78:79:
df:9f:95:88:3f:ec:36:69:78:4e:bd:b7:15:c6:a5:22:e9:06:
6b:1e:62:e8:d1:f7:16:3c:ef:31:5b:75:ae:2c:ad:00:aa:26:
cd:24:98:d5:83:c8:d6:9c:dc:80:bd:9f:75:0e:53:17:2a:81:
60:07:99:a3:8d:97:64:36:76:96:a7:d5:92:41:05:78:23:73:
4f:c8:e5:83:85:0c:94:a8:b2:e6:c3:19:72:74:88:69:e3:da:
23:81:aa:72:49:c2:b8:88:59:2c:4b:b5:72:15:92:93:56:f1:
d9:09:17:8b:35:50:fd:ab:66:97:79:da:76:7f:c5:5d:78:aa:
b2:1e:c7:f7:32:9a:fd:db:8b:f5:87:da:27:81:28:50:69:a1:
91:d0:b4:0a:63:ed:31:8c:ce:fc:16:b7:23:26:c5:92:6c:39:
d4:93:5a:32:97:89:3a:11:69:13:90:bf:40:82:49:f9:5c:09:
eb:0c:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:06 2026 by rpki-client