Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZO7Xemx_yGWCMu2FadkSimNVnZw.roa
File: ZO7Xemx_yGWCMu2FadkSimNVnZw.roa (raw, json)
Hash identifier: btOv8WeszT5kZYOP79rtNW0lCrTIW+R3qCQllrBkUg0=
Subject key identifier: 64:EE:D7:7A:6C:7F:C8:65:82:32:ED:85:69:D9:12:8A:63:55:9D:9C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A13A903CC9CC7A49AAE383C675D1D08351
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZO7Xemx_yGWCMu2FadkSimNVnZw.roa
Signing time: Wed 14 Oct 2026 13:18:13 +0000
ROA not before: Wed 14 Oct 2026 13:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211019
IP address blocks: 78.17.72.0/23 maxlen: 23
206.245.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:90:3c:c9:cc:7a:49:aa:e3:83:c6:75:d1:d0:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 13:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64eed77a6c7fc8658232ed8569d9128a63559d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:8b:01:8a:45:cd:ba:f1:80:1a:1c:cb:b4:
96:4c:2c:65:cb:19:0b:cb:b1:37:33:05:19:ed:ea:
15:15:58:82:78:3e:e7:1f:61:85:1a:a3:a2:29:9e:
99:10:19:eb:df:78:d5:7f:d7:a7:59:bc:09:9d:de:
65:9d:f0:fc:fd:66:28:e6:58:fa:2f:fb:5b:54:26:
9e:94:ea:ee:20:e0:9d:ea:97:bc:3c:b2:9c:6c:ac:
7b:c4:32:c8:a8:b7:99:65:a6:b7:65:6f:9e:d8:fb:
4b:08:bb:15:1f:55:9f:fc:f3:b3:9c:a0:a2:c7:50:
1a:0f:f5:4d:fd:84:98:bb:0c:4c:7f:73:66:ce:3e:
a5:e5:47:6e:77:8b:a2:22:b9:1f:92:44:29:2d:0f:
e4:2c:4d:98:55:88:10:ec:fc:3c:72:aa:75:15:77:
90:d0:36:12:7a:3b:98:cb:c9:0e:ef:d4:d1:73:13:
b2:59:79:6f:65:15:40:69:e3:75:67:52:bd:6d:66:
83:33:4c:19:33:26:89:b0:27:bc:d6:9f:16:bc:14:
90:73:d3:32:6a:a7:1d:ce:07:e7:f5:8b:fa:6a:99:
92:38:50:ea:6e:06:19:eb:8f:ec:1d:2a:c3:b5:db:
16:60:6f:93:23:8b:ac:a9:f9:c2:45:99:49:cb:02:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:D7:7A:6C:7F:C8:65:82:32:ED:85:69:D9:12:8A:63:55:9D:9C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZO7Xemx_yGWCMu2FadkSimNVnZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.72.0/23
206.245.152.0/23
Signature Algorithm: sha256WithRSAEncryption
15:bd:bc:bf:6c:7e:d1:41:ea:db:b5:89:f8:3e:38:5e:b3:49:
20:ec:28:69:73:8f:a8:42:85:85:65:d7:d0:cd:3a:f5:e9:59:
8f:19:97:27:ab:0f:04:a5:69:11:75:ab:4e:be:e8:d9:06:d2:
fd:d3:cd:64:9d:e1:2d:0f:48:1f:46:c7:1f:52:34:87:44:87:
9f:3c:1b:9e:df:af:22:fb:56:30:e4:47:26:33:48:80:dd:08:
a2:bf:10:9b:1e:3c:6b:d7:19:85:d5:44:12:3c:bc:9c:d3:eb:
fb:0c:55:e0:9b:06:d8:78:c7:75:74:31:4d:70:70:4f:8e:fe:
63:6d:49:76:ec:eb:88:08:f7:a9:69:f6:29:81:a7:0b:4e:fd:
7c:7d:0a:41:23:97:d4:db:02:83:9f:64:7d:3f:db:33:74:c0:
40:90:bc:c6:52:d9:90:2d:e6:0e:bf:f9:78:22:09:39:97:cb:
13:50:b1:47:45:64:a3:ba:b9:f6:cf:36:60:f0:5a:3e:89:dd:
70:a2:ab:27:69:7d:b3:b5:81:37:81:3e:73:91:ac:64:0a:91:
a1:d9:d7:5f:d3:28:7f:11:82:33:0b:eb:84:8b:4d:a4:a0:39:
1d:31:62:9e:57:49:ca:18:dc:47:f5:b8:bd:b1:4d:7e:70:db:
10:d6:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:34:19 2026 by rpki-client