Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aw-m75U_0JXLWNMZ9GR4exsPNnY.roa
File: aw-m75U_0JXLWNMZ9GR4exsPNnY.roa (raw, json)
Hash identifier: R6AjoaoqMxchq1UDvX2vYMUqFy536bzIZg5f4JCoV0g=
Subject key identifier: 6B:0F:A6:EF:95:3F:D0:95:CB:58:D3:19:F4:64:78:7B:1B:0F:36:76
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1443FCEE9922D7E8D374FEA58E38B0EEB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aw-m75U_0JXLWNMZ9GR4exsPNnY.roa
Signing time: Fri 16 Oct 2026 10:26:34 +0000
ROA not before: Fri 16 Oct 2026 10:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.166.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:3f:ce:e9:92:2d:7e:8d:37:4f:ea:58:e3:8b:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 16 10:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b0fa6ef953fd095cb58d319f464787b1b0f3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:c9:f4:44:1d:26:55:82:d9:56:44:13:3c:
07:00:fe:79:29:4f:62:46:fc:bb:f7:9b:a2:05:af:
9c:39:18:cd:b3:e8:9c:1c:d9:55:23:75:bd:72:5d:
4a:c5:4e:a4:56:99:16:5c:da:8d:93:83:ac:3a:06:
85:16:1d:92:87:36:5e:9a:61:5a:67:85:45:93:d6:
ac:16:cd:42:d1:a7:9e:59:51:29:47:c8:9c:d0:e5:
94:ac:07:8a:48:f1:aa:2e:8a:16:8a:b0:6a:aa:c0:
61:5f:7a:29:e8:00:11:8f:e5:5d:5c:7c:5d:6e:12:
98:54:cd:ba:0a:42:27:56:9e:db:f1:28:37:af:ce:
6b:db:f0:c2:a7:a8:e2:12:19:b9:a8:f9:70:73:4e:
0b:7e:83:8a:c3:a9:d5:4e:32:96:f4:c4:d0:a0:43:
f3:39:0e:44:41:1f:09:0c:4f:fd:4a:b3:cb:57:fc:
23:f1:34:b0:bc:d9:1f:66:38:ed:e7:3e:c7:c5:92:
d7:32:a5:9d:cc:13:18:19:e9:db:b7:19:ed:a5:74:
13:2c:19:4d:ba:61:e1:24:99:62:7c:3d:51:6d:13:
35:1b:e7:ee:7d:16:19:74:a7:64:99:54:aa:29:9e:
f5:b2:bd:66:f6:cb:a3:d7:81:a4:41:0c:25:d6:4f:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:A6:EF:95:3F:D0:95:CB:58:D3:19:F4:64:78:7B:1B:0F:36:76
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aw-m75U_0JXLWNMZ9GR4exsPNnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.19.0/24
78.17.115.0/24
89.37.192.0/24
89.125.120.0/24
89.125.129.0/24
89.125.166.0/24
89.125.168.0/24
104.143.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1f:4c:09:e1:4d:8c:77:a3:aa:36:f0:28:9b:d6:2a:e2:79:
88:bf:0e:88:30:6b:17:8a:10:8b:10:95:4e:32:21:48:b9:cd:
28:84:5a:9d:e3:73:d0:23:c0:fe:2d:41:a7:92:79:71:59:4a:
81:67:da:c5:90:9b:29:f1:56:f2:38:e0:39:c4:8c:de:15:39:
b7:e4:a4:9f:71:7f:23:31:fb:d5:d8:6c:de:26:7e:7d:e8:ac:
12:e6:87:e4:7b:b0:60:79:33:85:28:cc:0a:ce:7c:1b:f6:7b:
0f:30:bc:0d:e4:c0:41:ea:00:ca:04:57:29:83:85:8c:86:b2:
2e:4d:bb:b8:a9:a5:56:ba:26:84:93:3b:d9:19:81:09:53:22:
e7:ef:15:ed:26:f5:68:97:82:c5:24:b7:2a:59:e1:c0:30:7c:
b6:c7:a0:e9:32:8f:72:93:82:90:dd:13:15:a9:79:d2:71:5b:
5b:ab:c3:fc:cf:47:93:50:32:13:87:8b:10:9e:1b:1b:9c:4b:
f9:25:86:99:a9:51:39:16:47:4d:e0:fe:71:8a:30:42:ee:54:
13:cb:9c:42:c2:2d:ca:37:4c:2f:04:fe:ac:01:96:9c:16:19:
de:f2:74:92:94:04:27:ba:84:a3:b0:72:e5:68:85:41:fb:02:
06:55:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:49 2026 by rpki-client