Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CiCc3tjjM7EapYgSlZQqq4tDRg.roa
File: _CiCc3tjjM7EapYgSlZQqq4tDRg.roa (raw, json)
Hash identifier: H4NacxKu+t0EUl4VbabkY3rYXrwp0Qwh72W1Kub9otY=
Subject key identifier: FC:28:82:73:7B:63:8C:CE:C4:6A:96:20:4A:56:50:AA:AE:2D:0D:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F7F1ADE224D410DD3D40050F4D68E0AB2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CiCc3tjjM7EapYgSlZQqq4tDRg.roa
Signing time: Mon 20 Jul 2026 10:38:14 +0000
ROA not before: Mon 20 Jul 2026 10:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 78.17.94.0/24 maxlen: 24
78.17.170.0/23 maxlen: 23
78.17.178.0/23 maxlen: 23
89.125.31.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.166.0/23 maxlen: 23
89.125.174.0/23 maxlen: 23
104.143.202.0/24 maxlen: 24
140.225.192.0/24 maxlen: 24
140.225.198.0/23 maxlen: 23
140.225.206.0/23 maxlen: 23
140.225.212.0/23 maxlen: 23
140.225.214.0/24 maxlen: 24
153.76.198.0/23 maxlen: 23
153.76.202.0/23 maxlen: 23
153.76.212.0/23 maxlen: 23
153.76.221.0/24 maxlen: 24
162.35.224.0/23 maxlen: 23
162.35.242.0/23 maxlen: 23
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:1a:de:22:4d:41:0d:d3:d4:00:50:f4:d6:8e:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 20 10:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc2882737b638ccec46a96204a5650aaae2d0d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:0d:44:d7:a1:5f:58:06:ae:bd:34:0a:f7:
95:9b:e4:3b:4c:2b:da:bf:9c:57:94:41:e8:19:62:
a0:de:78:2b:27:d8:95:22:be:04:4a:9a:07:82:99:
e6:9c:7e:05:29:25:6d:97:de:61:85:4d:bc:e1:09:
57:4b:30:64:3d:e6:34:19:9b:cb:81:17:d0:19:ab:
ae:87:fc:3f:cb:f4:f6:9f:69:00:38:35:86:1d:a2:
b2:7a:35:a0:d7:95:ab:53:f8:4c:4d:0f:e7:d0:45:
8d:71:67:05:6b:27:75:25:c2:f8:96:b3:25:e7:95:
3a:6c:70:ba:04:e8:c5:03:75:29:4c:12:b7:a3:38:
54:84:ad:56:a8:9f:62:81:a3:95:e2:4c:17:f3:5e:
5b:44:4b:91:2c:ab:ab:34:bc:cc:76:83:e1:e3:fc:
5e:8f:d9:0c:bb:f5:cc:0d:ef:96:ba:57:77:d6:58:
9e:8c:7b:62:03:df:8a:1f:ec:97:3d:cb:b0:b1:dd:
e4:07:ef:ce:b4:10:2a:55:b2:7c:30:4e:46:7a:83:
83:68:a1:03:44:41:de:80:14:9a:ed:1f:f6:2e:7d:
7b:11:8c:4b:a5:4d:dc:10:db:a4:a2:14:d5:b6:21:
f8:27:ba:a7:63:79:eb:09:74:c5:98:5c:eb:5d:40:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:82:73:7B:63:8C:CE:C4:6A:96:20:4A:56:50:AA:AE:2D:0D:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_CiCc3tjjM7EapYgSlZQqq4tDRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/24
78.17.170.0/23
78.17.178.0/23
89.125.31.0/24
89.125.143.0/24
89.125.166.0/23
89.125.174.0/23
104.143.202.0/24
140.225.192.0/24
140.225.198.0/23
140.225.206.0/23
140.225.212.0-140.225.214.255
153.76.198.0/23
153.76.202.0/23
153.76.212.0/23
153.76.221.0/24
162.35.224.0/23
162.35.242.0-162.35.245.255
167.17.32.0/23
167.17.38.0/23
Signature Algorithm: sha256WithRSAEncryption
72:9d:86:9a:01:9b:43:78:ef:68:86:5c:5b:ed:bd:f0:94:56:
35:32:97:76:1f:fd:35:01:46:4e:28:fd:4c:cf:11:ea:ec:8d:
4e:c2:53:62:36:5c:7c:45:fa:d4:ef:38:a4:08:98:8c:70:e3:
2f:ae:91:c7:af:08:1b:e9:d6:35:c7:63:eb:c1:94:98:37:66:
bb:45:ba:1f:65:9e:bd:6e:fc:24:85:1f:fa:5d:29:97:fc:d5:
08:63:db:f3:84:42:12:09:51:80:3c:ae:a9:83:2d:1d:72:7f:
f4:41:a7:01:01:da:a8:b4:07:80:5d:4b:d0:e8:af:91:50:e8:
67:3b:bd:b0:ec:de:be:2d:c3:94:d4:5f:e6:c5:1b:b3:f5:1e:
9e:a4:ca:46:8b:0c:c2:6c:60:cd:07:12:5c:3b:f3:09:af:33:
ac:9f:08:fe:41:7a:18:45:ab:cf:cd:7b:55:04:14:a3:66:16:
71:45:1b:2b:fb:90:98:93:3f:50:5a:35:b1:47:87:c8:bb:f5:
7f:a4:02:67:f4:58:f7:42:7f:90:b7:a9:d1:03:77:59:84:63:
85:4b:45:9f:6a:75:f5:51:d3:55:f6:8e:9c:29:b1:88:0c:89:
63:c7:bc:90:1b:c4:4e:66:6e:c0:87:a6:03:d1:6a:5f:d2:db:
68:2a:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client