Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cChz05Zyi8QA39SLnVDs3w26t0o.roa
File: cChz05Zyi8QA39SLnVDs3w26t0o.roa (raw, json)
Hash identifier: m9u7W8xeBq2meRgZm96IeSKVigJWMS50lDevxWyZlUE=
Subject key identifier: 70:28:73:D3:96:72:8B:C4:00:DF:D4:8B:9D:50:EC:DF:0D:BA:B7:4A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCD704937650DA433CEBA545C5977BB2E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cChz05Zyi8QA39SLnVDs3w26t0o.roa
Signing time: Tue 04 Aug 2026 15:41:55 +0000
ROA not before: Tue 04 Aug 2026 15:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 78.17.23.0/24 maxlen: 24
78.17.25.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.12.0/24 maxlen: 24
89.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:70:49:37:65:0d:a4:33:ce:ba:54:5c:59:77:bb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 15:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=702873d396728bc400dfd48b9d50ecdf0dbab74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:6d:d0:0d:33:1e:fe:36:d4:12:e2:6b:95:
02:e0:fa:bb:07:89:83:15:45:8d:53:5d:4d:ac:a1:
61:a1:6c:fb:11:e0:b4:f1:15:db:fb:e3:13:81:81:
4a:06:5a:19:eb:a6:38:9d:06:f0:3d:5e:16:24:19:
95:85:32:6f:47:02:f7:0b:9b:e8:1f:7f:71:3c:25:
14:3a:03:23:66:56:b2:04:63:fa:bc:39:95:6c:56:
51:ff:a0:49:27:48:33:d7:8b:00:a7:f6:d7:69:67:
32:e8:23:6f:d6:2c:8a:af:d1:d2:44:ba:99:c9:4e:
7e:33:f7:b0:0a:7b:9a:51:6a:72:90:b8:21:7f:da:
98:55:c9:ab:f3:69:56:12:dd:0b:70:3b:6d:98:50:
f5:3d:23:48:ee:af:f8:c6:fc:7c:2f:35:0e:3c:a7:
5b:c9:04:d2:9f:65:ca:1f:23:51:bf:f4:0a:ec:80:
cd:33:d1:44:7c:a4:0b:d4:c7:d3:fd:be:fe:fe:38:
40:6f:9c:30:1c:80:bb:e0:a7:ba:7f:96:ad:dc:c4:
53:49:34:1a:31:38:59:84:88:13:24:90:bd:35:1d:
99:a8:c8:87:3b:41:bf:6d:5a:b1:06:d9:7d:11:4b:
e4:7a:6e:5c:c3:28:66:0f:fa:ea:70:a0:f7:86:d3:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:73:D3:96:72:8B:C4:00:DF:D4:8B:9D:50:EC:DF:0D:BA:B7:4A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cChz05Zyi8QA39SLnVDs3w26t0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.23.0/24
78.17.25.0-78.17.26.255
78.17.69.0/24
78.17.108.0/24
89.125.12.0/24
89.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
03:73:20:f3:c0:9b:f5:b0:8e:b8:12:aa:51:a5:b3:7d:82:98:
99:0f:22:f9:12:7f:46:bc:5e:de:14:e9:fe:51:57:ad:ba:70:
cc:55:f9:cb:f3:02:57:71:33:0a:f3:e7:8b:c9:25:dd:89:2f:
d5:61:6d:ed:5b:df:6e:17:ac:c9:58:ee:59:82:35:05:ef:57:
c5:82:87:37:cf:ad:c7:c9:86:b5:02:a9:1a:c0:8b:7a:f2:47:
c3:11:75:17:f7:a8:37:38:22:66:2f:22:b0:1d:33:99:c1:b0:
2e:99:a9:72:c0:cc:d7:cd:86:b8:50:12:14:69:8f:a8:76:d4:
36:ae:56:da:43:18:73:36:f7:c1:69:df:76:af:39:ce:0f:51:
03:ea:5f:e5:a7:68:c8:0f:3c:b1:f8:26:96:cf:3d:5e:44:96:
e2:32:5f:61:24:f5:7d:5d:a6:e8:ec:d4:6d:6d:3c:f8:75:5a:
c2:3e:48:2c:e7:03:6e:59:10:99:8d:f9:6d:6e:8d:14:15:0f:
5b:f0:cd:4a:2a:46:46:7e:df:65:82:1b:99:49:75:34:57:0c:
5c:77:81:76:0f:4c:ca:d0:b5:76:a7:84:5c:e0:f2:ca:94:83:
df:44:39:23:99:5a:18:14:90:40:75:20:77:ac:94:a7:1c:6b:
5a:2b:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:07:45 2026 by rpki-client