Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mh6cpopS_wdzp3nc6nFxh5lK-48.roa
File: Mh6cpopS_wdzp3nc6nFxh5lK-48.roa (raw, json)
Hash identifier: xFgVJyIRwhvwf0myzNxs5t+CF2NhnDi1Bg280/CayHY=
Subject key identifier: 32:1E:9C:A6:8A:52:FF:07:73:A7:79:DC:EA:71:71:87:99:4A:FB:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A06CAF923C63F8A926EDC68A3FF04558E6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mh6cpopS_wdzp3nc6nFxh5lK-48.roa
Signing time: Fri 04 Sep 2026 13:50:40 +0000
ROA not before: Fri 04 Sep 2026 13:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.22.0/24 maxlen: 24
78.17.25.0/24 maxlen: 24
78.17.92.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:af:92:3c:63:f8:a9:26:ed:c6:8a:3f:f0:45:58:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 13:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=321e9ca68a52ff0773a779dcea717187994afb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:42:ad:4b:de:ae:b3:cd:f2:64:cb:8e:c0:
4b:8d:e8:c9:1b:fa:40:4e:8e:05:cb:39:12:ce:3e:
ba:fc:e8:a6:01:5a:c2:b1:a4:72:db:2d:33:89:7d:
65:4c:e0:9a:de:93:e9:8e:16:e3:b7:09:1c:bc:1f:
13:5a:ce:5f:42:0c:80:da:35:af:00:82:61:b6:7d:
fd:92:f7:1b:67:58:bf:97:31:8c:68:b1:e5:ec:45:
7f:b3:2a:72:9e:b9:15:66:27:66:56:ba:61:d6:8f:
37:3b:d6:58:66:3c:18:78:01:83:e8:8f:e9:8f:26:
71:78:2e:2d:bc:7c:dd:70:38:48:16:92:82:5e:35:
7e:22:4e:2b:87:f0:a1:4f:f2:2a:12:39:b5:81:f9:
b6:84:c4:99:84:76:55:9b:1e:b0:cb:c6:62:4c:44:
67:70:81:7b:9f:00:85:36:c9:de:93:20:33:65:54:
00:31:ce:38:aa:d0:ac:12:4e:7a:be:f9:eb:58:55:
fa:65:26:61:38:93:8f:1c:69:d9:f3:71:59:ba:49:
91:10:ac:29:5a:84:7d:6e:4e:ec:2d:a1:07:37:b4:
ee:e2:cc:00:e3:19:d8:6a:30:67:dd:dc:f0:58:30:
8e:1f:68:ea:02:d3:82:b9:5a:89:a6:78:31:05:ca:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:9C:A6:8A:52:FF:07:73:A7:79:DC:EA:71:71:87:99:4A:FB:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mh6cpopS_wdzp3nc6nFxh5lK-48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.22.0/24
78.17.25.0/24
78.17.92.0/24
89.34.106.0/24
93.114.183.0/24
140.225.194.0/23
140.225.199.0/24
162.35.244.0/23
167.17.32.0/23
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
05:76:55:7d:da:c1:4b:25:11:8d:ca:77:7e:73:44:47:19:ca:
44:b5:e2:f3:fc:56:43:5b:8c:21:09:9b:c9:80:80:62:5f:7e:
15:24:54:b4:f4:ff:cb:dd:17:35:2a:ad:1d:22:9b:da:db:f1:
32:b4:6b:f3:06:40:2e:e4:bb:fa:49:76:6e:75:10:ef:c2:d9:
8a:9c:e2:c7:8b:56:53:f0:16:49:ed:7c:3a:38:f9:64:cf:39:
5a:7f:73:3a:2f:4b:82:25:71:65:17:1c:ee:3e:ee:31:03:12:
7b:ca:e4:29:57:f4:c4:00:ab:79:b7:8d:e8:78:ec:ef:39:2e:
4e:4b:ac:4f:3b:5c:5b:c6:77:ac:1a:ed:ce:61:f2:a4:62:26:
ee:fa:3b:5d:c3:70:d8:11:ef:89:1d:75:d8:ef:ad:6c:b6:84:
90:08:f5:4a:a6:9e:4c:dc:f8:4d:bb:4a:9b:1e:8c:59:17:5b:
59:67:62:23:8c:82:9a:0a:12:c3:38:f1:7c:c9:72:28:12:15:
1f:a8:36:af:88:72:c7:6b:28:a4:b9:90:9d:ee:83:e8:9e:cc:
b5:37:ca:de:42:b9:0d:ef:2b:bd:b9:e0:4f:e8:4e:67:d5:0e:
de:61:8d:f3:e5:41:cc:34:1a:ec:fc:bf:70:3b:d4:a8:4b:91:
ef:f7:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:55 2026 by rpki-client