Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-QdNncUvqm57wS_yGu55kdy62KQ.roa
File: 1-QdNncUvqm57wS_yGu55kdy62KQ.roa (raw, json)
Hash identifier: RX8TMvxLy2BX1wYOTFURMTnpe57LqlDd+8puIyvEbRc=
Subject key identifier: F9:07:4D:9D:C5:2F:AA:6E:7B:C1:2F:F2:1A:EE:79:91:DC:BA:D8:A4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EF5CB841028CA975A0E550B50DECA815C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-QdNncUvqm57wS_yGu55kdy62KQ.roa
Signing time: Tue 23 Jun 2026 18:43:35 +0000
ROA not before: Tue 23 Jun 2026 18:43:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 78.17.6.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.44.0/24 maxlen: 24
78.17.87.0/24 maxlen: 24
78.17.97.0/24 maxlen: 24
78.17.107.0/24 maxlen: 24
78.17.109.0/24 maxlen: 24
78.17.118.0/24 maxlen: 24
78.17.128.0/24 maxlen: 24
78.17.145.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
78.17.152.0/24 maxlen: 24
78.17.154.0/24 maxlen: 24
78.17.155.0/24 maxlen: 24
78.17.156.0/24 maxlen: 24
78.17.159.0/24 maxlen: 24
78.17.173.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:cb:84:10:28:ca:97:5a:0e:55:0b:50:de:ca:81:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 23 18:43:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9074d9dc52faa6e7bc12ff21aee7991dcbad8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:a7:40:d5:a4:09:87:8f:01:25:e3:3c:21:
fe:d1:11:c9:cf:0d:67:c2:95:52:ba:8b:9e:c3:f8:
ca:64:db:b0:07:1f:20:64:a2:6c:c2:38:8f:e8:f6:
68:ca:ab:a7:5a:1a:2c:85:7c:82:74:2d:99:41:a1:
08:fd:24:2a:7e:c5:9a:bf:01:fc:3f:e8:39:af:be:
44:38:ee:af:85:fb:dd:6f:9e:76:4d:5a:fc:dd:f3:
c0:78:74:8c:ed:d9:dc:8e:1a:c3:c8:01:3f:59:ef:
87:3d:9d:e7:26:36:7b:29:68:c1:a1:a1:5c:07:87:
eb:20:14:75:71:4a:3b:bb:4a:31:65:fa:f4:95:7a:
49:87:83:6c:a9:8e:af:1e:da:ff:4f:0a:0a:5d:23:
47:37:c3:f7:f3:af:6a:0a:9f:0d:6d:c2:bf:1e:4e:
9b:ba:8b:78:10:5b:4f:88:a6:16:5d:2b:05:b5:59:
c7:29:6e:2e:c4:31:45:85:dc:a4:89:e2:e9:1f:32:
a0:9f:88:91:bf:13:6a:fd:be:48:c2:bf:0c:a0:9a:
4a:2d:5a:74:7d:fc:08:94:14:a9:f9:8c:8f:f3:16:
40:0d:1b:c0:0c:31:27:ff:77:5d:1d:49:d1:4e:2e:
8f:46:04:b9:6a:82:49:30:ad:d8:d6:e7:56:cb:e7:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:4D:9D:C5:2F:AA:6E:7B:C1:2F:F2:1A:EE:79:91:DC:BA:D8:A4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-QdNncUvqm57wS_yGu55kdy62KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.6.0/24
78.17.36.0/24
78.17.43.0-78.17.44.255
78.17.87.0/24
78.17.97.0/24
78.17.107.0/24
78.17.109.0/24
78.17.118.0/24
78.17.128.0/24
78.17.145.0/24
78.17.151.0-78.17.152.255
78.17.154.0-78.17.156.255
78.17.159.0/24
78.17.173.0/24
89.125.27.0/24
89.125.38.0/24
89.125.62.0/24
89.125.84.0/24
89.125.93.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b2:15:ae:b3:e8:4f:3f:be:4c:6b:f1:3d:6e:b7:75:9a:ff:
cb:b7:87:8a:b0:ef:64:f1:8a:42:16:f1:04:d5:ce:f6:4e:fc:
1d:03:7b:0a:2a:dc:e4:ff:c0:b3:47:07:ee:06:27:ac:47:68:
af:a7:0c:a2:07:be:13:d3:82:18:4c:8f:b3:97:b8:f9:b6:19:
61:87:b3:6e:a2:fc:1d:70:1b:ac:19:94:d2:c2:52:ba:e0:e7:
21:87:5d:01:b4:fe:f0:38:d3:6e:57:f7:b4:00:e0:34:bb:49:
5a:75:d1:2a:b8:9d:a0:a2:30:23:cc:cd:31:6c:fd:05:d2:f5:
95:d2:70:24:dc:1c:b9:5d:f5:88:c2:63:ec:39:15:4e:1c:da:
4e:14:8d:ce:41:46:85:cd:4f:f0:f5:e7:dc:51:ed:f7:ab:94:
00:35:61:32:6e:65:9d:9f:be:dc:69:e0:ce:65:77:a4:68:32:
c1:c8:3d:58:04:e0:4a:51:c9:be:5a:86:92:85:75:6d:81:2d:
47:d4:79:e2:0b:18:2c:bd:60:32:f4:e4:cd:1b:d9:e1:64:cf:
c1:ef:ac:cf:1d:1a:0b:e3:5c:f1:07:71:02:52:3d:96:f1:a0:
c2:3e:32:ed:7d:60:92:20:bb:e9:aa:07:cf:aa:1a:e7:7f:ac:
42:96:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:27:35 2026 by rpki-client