Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d3chP7jaK5pGzmfzfsDECNbDHGk.roa
File: d3chP7jaK5pGzmfzfsDECNbDHGk.roa (raw, json)
Hash identifier: sf8nUfsDQ3jJ88e5ssuqMfBDvKYZWfo03TfUXM+HYsE=
Subject key identifier: 77:77:21:3F:B8:DA:2B:9A:46:CE:67:F3:7E:C0:C4:08:D6:C3:1C:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0416B555BE51FB87F8B890531AEA0B9D2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d3chP7jaK5pGzmfzfsDECNbDHGk.roa
Signing time: Thu 27 Aug 2026 04:12:28 +0000
ROA not before: Thu 27 Aug 2026 04:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 78.17.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:6b:55:5b:e5:1f:b8:7f:8b:89:05:31:ae:a0:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 27 04:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7777213fb8da2b9a46ce67f37ec0c408d6c31c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:e8:3e:70:70:1a:24:10:76:b4:21:1f:2d:
59:b1:b9:13:72:31:e0:50:6c:84:e7:71:4f:9b:fb:
ae:88:ac:21:b2:3c:77:a4:31:25:01:bd:41:54:c2:
9a:d5:b7:de:b9:d2:6a:02:7d:3b:47:a6:28:40:10:
23:ba:e3:55:1e:f1:ff:8a:b3:86:92:a5:dd:10:6e:
5c:ee:35:b0:dd:48:dc:6b:64:aa:07:76:c7:ee:85:
33:f6:ff:8c:b6:b9:11:d9:49:67:c2:c9:fb:bd:dd:
31:66:ec:19:16:fc:f6:62:ea:3d:ff:26:e8:10:6d:
92:40:9d:d1:d8:21:b9:c1:7c:5a:df:66:8c:4e:83:
21:87:a8:30:7c:fc:c2:6f:7f:55:10:62:98:3e:21:
e7:48:62:8c:f9:02:50:a9:09:36:e3:39:5f:3c:c3:
2b:8a:2c:05:bc:40:7d:50:12:c2:87:8b:3b:e9:27:
74:f7:ab:1b:ef:80:7b:d9:38:b9:83:f7:3b:a8:df:
09:08:e0:58:69:14:32:57:e3:9f:7a:21:0c:25:8a:
70:41:6d:63:0b:b3:fd:b9:71:b5:c2:cc:68:64:5e:
76:e3:10:5b:ab:97:87:dd:4b:9d:3a:44:a8:8c:8b:
4d:e9:26:10:11:91:ef:9f:44:be:32:74:6f:d6:7a:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:77:21:3F:B8:DA:2B:9A:46:CE:67:F3:7E:C0:C4:08:D6:C3:1C:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d3chP7jaK5pGzmfzfsDECNbDHGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.196.0/24
Signature Algorithm: sha256WithRSAEncryption
44:70:2c:17:15:d5:84:2d:09:39:51:51:dc:75:fc:0a:31:af:
9c:0c:a2:d6:d7:41:01:9c:17:cd:82:96:d0:c3:58:f3:1f:3d:
92:d3:6c:ba:b5:4d:a7:af:c3:b5:47:10:18:68:15:3c:25:4f:
3a:78:65:60:c7:a2:80:65:84:f1:b9:f4:59:7e:5e:9a:e1:91:
68:3b:31:a4:43:02:10:9a:d7:df:81:5a:58:0b:66:2c:75:76:
82:1e:de:b9:fc:61:ad:3b:ae:58:d4:de:01:2d:39:34:bd:28:
31:0a:dd:78:8e:ec:92:b5:80:e6:83:dc:01:c5:52:03:0b:de:
c5:ef:48:c5:55:a7:0a:64:56:1f:88:9b:b7:45:e3:01:ab:68:
60:a9:0a:2e:74:61:3e:8a:fd:a3:c3:fd:48:19:74:a9:60:e9:
20:4b:c5:cc:48:56:51:99:42:85:15:3e:d8:84:24:2d:62:a6:
c3:ea:e7:60:da:fb:77:fa:26:d3:2d:95:a9:11:b1:73:4a:a7:
6e:ad:f4:1a:46:41:ac:d8:4a:52:2d:ca:fa:24:dd:78:79:67:
c1:4e:16:3f:0e:e9:dd:e7:9e:5e:c5:19:45:d2:82:f3:20:e5:
79:dd:7a:4f:d2:4b:87:54:4e:5b:19:2e:9e:f9:31:86:43:1e:
03:89:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:37 2026 by rpki-client