Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYkQ_M_necbR4xqnfV8fnxEa2BE.roa
File: WYkQ_M_necbR4xqnfV8fnxEa2BE.roa (raw, json)
Hash identifier: Bbg2qxBH4QQ2+c3MJcTLAOowgvffA99qv12IWchkMeA=
Subject key identifier: 59:89:10:FC:CF:E7:79:C6:D1:E3:1A:A7:7D:5F:1F:9F:11:1A:D8:11
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E6E5160C3C2CE259A3DD32EFEC281852D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYkQ_M_necbR4xqnfV8fnxEa2BE.roa
Signing time: Thu 28 May 2026 11:21:27 +0000
ROA not before: Thu 28 May 2026 11:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 78.17.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:51:60:c3:c2:ce:25:9a:3d:d3:2e:fe:c2:81:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 28 11:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598910fccfe779c6d1e31aa77d5f1f9f111ad811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:f2:7f:f6:4e:dd:4b:5d:96:c1:0b:80:0c:
c0:b9:b1:40:be:7f:c9:b2:62:4a:fd:9e:ee:64:b5:
3f:45:8d:44:3c:14:61:be:c1:d5:4c:85:e4:cd:26:
c9:5d:c1:71:69:49:c7:43:d6:42:57:a6:f1:be:18:
68:ab:36:f6:1e:27:50:37:ad:80:8f:34:c5:6d:54:
78:2f:34:d6:e3:51:67:34:20:91:32:d5:70:8d:4d:
7e:52:b3:b0:95:d1:9b:4d:e7:4d:46:15:de:33:d2:
dc:f6:78:ab:e5:21:c6:9a:31:02:01:6f:5a:a9:64:
24:8c:94:70:cc:b2:0e:06:c2:46:5c:e6:3a:4f:26:
c3:20:0e:94:2d:5b:09:4c:d2:4b:ff:ee:cd:b2:86:
fd:34:b1:89:b6:6e:f1:48:59:58:42:00:6a:02:b8:
b6:f4:ad:92:86:9f:4d:ed:3d:4a:60:d9:b1:bc:5d:
27:38:98:a9:9d:a6:3e:09:e7:cd:e9:9e:1a:04:45:
78:cb:ce:69:62:cb:0d:84:2d:a4:2f:a8:cb:9c:9e:
f6:81:e2:d1:36:44:1d:c8:d0:78:7b:ac:ec:9c:c7:
f6:31:fd:22:d3:d6:e3:12:5f:f5:3d:0e:73:af:79:
fc:12:80:8a:89:ec:33:be:6c:56:d6:78:dc:3f:5e:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:10:FC:CF:E7:79:C6:D1:E3:1A:A7:7D:5F:1F:9F:11:1A:D8:11
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WYkQ_M_necbR4xqnfV8fnxEa2BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.98.0/24
Signature Algorithm: sha256WithRSAEncryption
43:81:24:55:92:b6:0b:f3:27:27:bd:73:30:08:79:f8:a7:85:
8e:37:14:07:f2:2d:80:7b:c8:e9:5d:5a:cf:02:f0:46:a6:29:
75:ef:c0:ae:69:72:ad:95:b2:1f:0a:f3:8c:81:38:75:6c:57:
89:14:78:a7:64:35:a1:24:7f:43:dd:c4:6b:5d:64:0f:e4:6c:
33:30:82:f7:24:8e:04:d5:ba:a3:e0:17:89:f8:2a:16:da:99:
b7:df:e9:05:4e:b3:d9:00:46:8d:4e:b3:d0:03:d5:50:1a:c3:
b1:1c:01:e0:09:cf:3c:4a:46:02:bd:cb:f5:59:14:e2:91:ae:
b7:6d:a6:c5:b7:17:c6:de:9d:ac:6d:92:7a:0e:62:54:d0:dc:
d6:be:dc:b4:10:f5:8e:5b:33:f6:67:dd:ea:bd:04:1e:8c:b0:
e2:57:20:bf:39:42:b7:8b:a7:85:cc:f5:37:db:b9:79:a3:22:
cd:8c:ef:ac:87:1c:53:02:ee:ec:13:58:8d:84:ad:2f:57:c7:
69:04:ff:57:49:a7:d4:a2:18:32:9a:31:08:ba:88:06:dd:05:
af:18:1b:8b:5f:20:78:30:57:c7:6d:42:e0:9d:ff:67:0b:6b:
69:e2:3c:ea:94:65:e6:9d:ea:43:77:32:90:a4:23:ff:39:c5:
db:d1:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:08 2026 by rpki-client