Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPnBS_pABxLi30ROJeWWVqFXopk.roa
File: XPnBS_pABxLi30ROJeWWVqFXopk.roa (raw, json)
Hash identifier: 0FRJZSx2HD7Rq5WubrYma+DY26C/aKQoHBV3a/eJUm0=
Subject key identifier: 5C:F9:C1:4B:FA:40:07:12:E2:DF:44:4E:25:E5:96:56:A1:57:A2:99
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A043E18D3AFDAC66A9968B2BF75D21E903
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPnBS_pABxLi30ROJeWWVqFXopk.roa
Signing time: Thu 27 Aug 2026 15:40:50 +0000
ROA not before: Thu 27 Aug 2026 15:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 78.17.6.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.44.0/24 maxlen: 24
78.17.87.0/24 maxlen: 24
78.17.97.0/24 maxlen: 24
78.17.107.0/24 maxlen: 24
78.17.109.0/24 maxlen: 24
78.17.118.0/24 maxlen: 24
78.17.128.0/24 maxlen: 24
78.17.145.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
78.17.152.0/24 maxlen: 24
78.17.154.0/24 maxlen: 24
78.17.155.0/24 maxlen: 24
78.17.156.0/24 maxlen: 24
78.17.159.0/24 maxlen: 24
78.17.161.0/24 maxlen: 24
78.17.173.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:e1:8d:3a:fd:ac:66:a9:96:8b:2b:f7:5d:21:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 27 15:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf9c14bfa400712e2df444e25e59656a157a299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:95:20:5d:53:07:ae:4b:2a:7e:97:42:66:
5b:ab:ca:64:d0:33:ff:12:46:c4:db:a8:aa:67:5b:
b8:e4:db:9f:45:3f:a6:1a:6e:d6:22:ce:fd:31:f2:
c8:11:d4:28:fa:6b:f6:22:54:d9:d7:d6:e6:37:32:
b8:5b:7a:80:03:5e:1d:82:6e:31:f0:4e:41:ac:e4:
6a:58:8e:12:6f:94:84:43:08:b8:5a:69:25:b4:82:
ac:6f:1f:88:39:89:63:8f:52:c4:a6:57:5b:fa:50:
c3:6e:25:35:66:41:75:66:02:6f:27:d0:43:f4:bb:
37:c5:66:6f:a5:d2:ef:b4:aa:0d:34:d3:d0:b3:ff:
12:8c:e2:22:29:26:98:f6:68:8a:71:88:d0:93:37:
8b:77:d5:13:7f:6e:00:a6:44:f7:c1:76:76:ef:cb:
62:b4:8a:27:d7:b1:b0:c9:ff:98:22:1c:5d:16:cf:
ed:bb:46:46:f1:c6:b3:01:7d:96:dd:80:4b:35:b0:
e6:9a:30:82:40:75:2f:7f:28:1f:9d:11:e7:2c:e6:
71:b5:aa:7f:a0:80:72:6e:35:22:ef:9c:9d:65:5d:
91:09:d3:b6:bc:e1:08:bd:84:4b:5c:f8:92:11:ff:
40:7a:65:fa:a9:90:23:a0:d4:10:47:ad:2d:58:e5:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:C1:4B:FA:40:07:12:E2:DF:44:4E:25:E5:96:56:A1:57:A2:99
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPnBS_pABxLi30ROJeWWVqFXopk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.6.0/24
78.17.36.0/24
78.17.43.0-78.17.44.255
78.17.87.0/24
78.17.97.0/24
78.17.107.0/24
78.17.109.0/24
78.17.118.0/24
78.17.128.0/24
78.17.145.0/24
78.17.151.0-78.17.152.255
78.17.154.0-78.17.156.255
78.17.159.0/24
78.17.161.0/24
78.17.173.0/24
89.125.27.0/24
89.125.38.0/24
89.125.62.0/24
89.125.84.0/24
89.125.93.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:25:f7:0c:0b:a7:43:50:0d:1b:98:62:44:66:c9:3f:68:c3:
38:80:d2:f7:19:1d:36:1d:7d:ae:09:ed:8f:fb:3b:19:91:96:
ad:4f:24:77:61:b7:71:ee:42:c3:4c:1a:62:ee:d4:ad:f2:6c:
1b:98:f4:7d:7c:a2:42:7f:f0:93:d5:67:8a:0d:b4:55:c5:8e:
2d:26:b3:98:15:07:72:c4:63:ab:cf:71:fb:78:de:4d:88:36:
fe:8e:aa:58:c1:0a:d4:7f:9b:cd:4f:5a:c2:9c:9d:be:95:c7:
2c:71:9b:ec:2e:7e:80:d5:6b:a7:75:7e:72:e8:55:04:60:ec:
5f:97:49:98:d3:94:ca:ba:46:2a:c4:81:1b:15:65:75:51:41:
e1:82:99:63:47:2f:9f:7e:06:07:eb:1b:86:a1:6a:04:08:7c:
61:32:cb:68:23:e5:5f:05:bc:c8:40:a5:05:be:21:41:71:11:
fc:7f:b8:b6:96:85:6f:c6:8a:a8:75:5a:8b:e7:be:55:65:9c:
3e:27:39:b2:e9:41:81:ba:1d:1c:03:5d:61:4c:bd:77:a4:55:
67:ec:e1:3c:c6:97:1d:04:2c:63:1f:6e:86:9e:d7:21:f0:4f:
7e:90:e5:b3:71:87:e3:75:bb:28:8a:66:63:5a:93:2b:a4:33:
f3:e1:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:37 2026 by rpki-client