Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dwNEPVJTt_9LyOQsjZPVSnk0R2Y.roa
File: dwNEPVJTt_9LyOQsjZPVSnk0R2Y.roa (raw, json)
Hash identifier: bq+GsnDvDT6PZ9RW5ufq/EUOsHmdDryHa7Wgb6ufVjM=
Subject key identifier: 77:03:44:3D:52:53:B7:FF:4B:C8:E4:2C:8D:93:D5:4A:79:34:47:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E8EA1D3CBBFEA2DF0432F65FAE9264407
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dwNEPVJTt_9LyOQsjZPVSnk0R2Y.roa
Signing time: Wed 03 Jun 2026 17:57:10 +0000
ROA not before: Wed 03 Jun 2026 17:57:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 78.17.6.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.44.0/24 maxlen: 24
78.17.87.0/24 maxlen: 24
78.17.97.0/24 maxlen: 24
78.17.118.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a1:d3:cb:bf:ea:2d:f0:43:2f:65:fa:e9:26:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 17:57:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7703443d5253b7ff4bc8e42c8d93d54a79344766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:bf:41:57:35:f2:9c:e3:5d:48:7d:e0:ed:
4d:b6:14:80:0b:bb:8f:7c:dc:d4:16:38:0f:34:62:
00:e0:12:c8:e4:46:05:14:9b:85:2d:d4:01:f1:58:
6e:8f:44:52:e2:c1:2f:50:ef:24:6b:ca:76:1d:dc:
3f:58:03:9b:13:f8:e5:9c:f1:2f:c2:65:9b:1a:0f:
dc:f4:10:b1:37:d8:81:d5:0d:e0:d4:e7:64:4b:3a:
3c:29:e8:38:4c:32:f8:c2:f0:8b:4f:25:b1:5d:67:
07:c9:a9:94:98:e4:a2:f1:d8:6f:1a:9b:2e:ba:74:
3f:a4:a1:b4:19:50:a7:67:21:2b:5c:3b:90:6c:98:
d1:58:4a:86:68:85:9a:89:1f:b5:67:c8:db:be:7e:
6f:72:d0:c2:f7:15:44:56:0a:7c:87:f0:42:ad:2c:
1e:46:94:d6:f6:37:80:38:eb:24:88:ee:8f:8d:71:
9d:32:9a:cb:c3:61:ae:17:1c:72:03:58:bc:34:bf:
47:fe:cb:3e:27:1b:5a:4d:7d:6f:88:b5:b3:64:2b:
c7:bf:e4:e8:50:7f:8e:c4:09:03:7a:06:09:5e:1b:
ff:24:51:7b:3c:78:df:be:d5:57:0e:ef:a2:06:08:
c4:91:38:ee:45:55:6e:a6:d2:55:7d:4b:e9:d1:a4:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:03:44:3D:52:53:B7:FF:4B:C8:E4:2C:8D:93:D5:4A:79:34:47:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dwNEPVJTt_9LyOQsjZPVSnk0R2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.6.0/24
78.17.36.0/24
78.17.43.0-78.17.44.255
78.17.87.0/24
78.17.97.0/24
78.17.118.0/24
78.17.151.0/24
89.125.27.0/24
89.125.38.0/24
89.125.62.0/24
89.125.84.0/24
89.125.93.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:78:5b:23:2d:19:b8:dc:26:2e:09:51:89:de:8a:8a:1f:40:
51:21:a5:4d:17:fe:91:42:3c:39:a1:e6:6a:5e:06:eb:37:94:
49:f5:7f:fa:89:93:d0:a2:05:3a:46:a5:e8:5e:f4:0c:dc:1d:
bd:4a:2d:0e:fd:26:90:89:9a:05:ce:a8:5b:dc:52:43:a7:56:
36:af:01:18:c6:bf:69:8e:9c:4c:67:0e:d3:9b:84:2a:cc:45:
14:5d:13:72:21:59:43:81:c9:37:55:a3:66:a7:da:f1:22:c6:
65:a3:0d:9f:9a:35:7b:cf:13:ed:44:52:ef:6f:68:10:63:fe:
cb:ec:f2:4e:ba:50:08:1e:d0:c2:ec:59:ef:ee:bc:bb:c9:cc:
3f:be:9b:3c:e6:76:46:95:28:8c:d3:23:85:02:c8:79:1a:f5:
b8:a7:db:ca:4f:bc:fe:68:f4:c8:fc:47:dc:b0:9b:bb:2c:af:
01:ab:6e:6c:20:f3:4e:ec:23:45:e6:91:73:ab:ad:11:86:18:
9e:92:41:cd:29:b7:91:4d:a1:f3:d2:68:1e:8b:7e:c7:c5:1e:
55:09:d6:98:60:27:f3:f2:1f:37:6c:18:7c:ad:4c:92:d4:96:
2b:97:c8:07:3a:bc:f3:7c:b2:26:62:74:ad:76:d0:32:d8:8c:
55:c1:11:6b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZ6OodPLv+ot8EMvZfrpJkQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNjAzMTc1NzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzAzNDQzZDUyNTNiN2ZmNGJjOGU0MmM4ZDkzZDU0YTc5MzQ0NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2a/QVc18pzjXUh94O1NthSAC7uP
fNzUFjgPNGIA4BLI5EYFFJuFLdQB8Vhuj0RS4sEvUO8ka8p2Hdw/WAObE/jlnPEv
wmWbGg/c9BCxN9iB1Q3g1OdkSzo8Keg4TDL4wvCLTyWxXWcHyamUmOSi8dhvGpsu
unQ/pKG0GVCnZyErXDuQbJjRWEqGaIWaiR+1Z8jbvn5vctDC9xVEVgp8h/BCrSwe
RpTW9jeAOOskiO6PjXGdMprLw2GuFxxyA1i8NL9H/ss+JxtaTX1viLWzZCvHv+To
UH+OxAkDegYJXhv/JFF7PHjfvtVXDu+iBgjEkTjuRVVuptJVfUvp0aS2FQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFHcDRD1SU7f/S8jkLI2T1Up5NEdmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZHdORVBWSlR0XzlMeU9Rc2paUFZTbmswUjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAThEGAwQA
ThEkMAwDBABOESsDBABOESwDBABOEVcDBABOEWEDBABOEXYDBABOEZcDBABZfRsD
BABZfSYDBABZfT4DBABZfVQDBABZfV0DBADUwBYwDQYJKoZIhvcNAQELBQADggEB
AB94WyMtGbjcJi4JUYneioofQFEhpU0X/pFCPDmh5mpeBus3lEn1f/qJk9CiBTpG
pehe9AzcHb1KLQ79JpCJmgXOqFvcUkOnVjavARjGv2mOnExnDtObhCrMRRRdE3Ih
WUOByTdVo2an2vEixmWjDZ+aNXvPE+1EUu9vaBBj/svs8k66UAge0MLsWe/uvLvJ
zD++mzzmdkaVKIzTI4UCyHka9bin28pPvP5o9Mj8R9ywm7ssrwGrbmwg807sI0Xm
kXOrrRGGGJ6SQc0pt5FNofPSaB6LfsfFHlUJ1phgJ/PyHzdsGHytTJLUliuXyAc6
vPN8siZidK120DLYjFXBEWs=
-----END CERTIFICATE-----
Generated at Thu Jun 4 06:20:37 2026 by rpki-client