Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lfbC9NB7X3IqNly8zTv2EqkphUU.roa
File: lfbC9NB7X3IqNly8zTv2EqkphUU.roa (raw, json)
Hash identifier: blaGpvbUe5TNqcNFYJpGaCW3QQJS5cw0F1y3BCICZlo=
Subject key identifier: 95:F6:C2:F4:D0:7B:5F:72:2A:36:5C:BC:CD:3B:F6:12:A9:29:85:45
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F210B1C5550F751B5675414B5869FA741
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lfbC9NB7X3IqNly8zTv2EqkphUU.roa
Signing time: Thu 02 Jul 2026 04:16:44 +0000
ROA not before: Thu 02 Jul 2026 04:16:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26832
IP address blocks: 78.17.93.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
185.141.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 18:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:0b:1c:55:50:f7:51:b5:67:54:14:b5:86:9f:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 2 04:16:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95f6c2f4d07b5f722a365cbccd3bf612a9298545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:08:5f:27:23:4f:d0:13:82:e4:13:0f:7c:
dd:68:41:8a:a1:b9:52:f5:dc:4e:81:f5:e1:dc:36:
1f:66:6b:01:cd:fa:1a:06:ee:29:b2:6c:37:c4:5e:
86:20:03:c8:c3:21:d8:26:82:df:b4:43:c8:8a:ee:
76:f5:22:a7:90:c2:80:c4:5e:dc:00:a8:e8:27:79:
40:a1:7c:05:69:68:35:b0:ce:b4:61:43:d4:46:b6:
b4:a0:49:48:97:ee:ec:8a:c7:35:a6:d0:9a:6f:44:
6b:67:48:27:96:99:b3:17:4f:56:94:66:36:8a:3a:
cd:d6:a9:8f:18:78:b7:1a:c5:5f:ee:e5:99:0c:35:
14:58:27:a4:e0:46:c0:a3:01:e8:41:f2:e0:10:fd:
94:22:a4:94:87:e4:67:8f:df:7d:5a:c2:68:d1:12:
66:8d:a3:a9:63:79:75:61:14:e5:10:74:48:16:f5:
47:38:dd:66:63:7a:1f:57:2f:2c:2f:95:97:1a:f8:
2b:0c:37:b7:64:c1:98:e0:45:e2:71:2b:b6:03:85:
b1:08:18:c0:28:35:0a:77:6d:70:fc:30:aa:bf:ec:
b2:62:17:ef:8c:af:73:41:6f:b4:f2:ba:f8:29:ab:
8f:80:ae:8d:14:7c:a7:f3:32:55:2a:ab:d8:b8:90:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:C2:F4:D0:7B:5F:72:2A:36:5C:BC:CD:3B:F6:12:A9:29:85:45
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lfbC9NB7X3IqNly8zTv2EqkphUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.93.0/24
86.107.168.0/24
185.141.216.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ef:e4:bd:42:14:c0:fd:76:7b:d0:78:55:43:34:85:ab:b8:
5f:6a:36:22:b6:1a:09:af:15:b0:ba:9b:62:56:c4:05:e3:27:
79:02:83:63:16:3f:25:7b:e4:81:00:47:57:41:8f:0d:b2:a5:
af:3b:fe:85:44:6a:a9:fb:c2:c3:2d:28:80:e7:fe:4e:f2:8a:
67:9c:24:a2:fc:c3:98:38:a0:e9:cf:87:2b:3c:b7:52:fb:f4:
51:9d:5f:c7:36:b5:b1:e5:f0:e1:6e:2a:1d:d6:9a:d5:0a:08:
35:6e:f1:60:fb:8b:42:2f:76:c0:47:f5:ae:15:89:35:46:cc:
13:29:ca:bb:e9:10:94:d0:07:46:05:a5:02:72:ff:c3:a2:75:
f0:bf:f0:64:24:b3:0e:04:19:f3:24:d5:56:4b:a0:04:67:77:
fd:39:97:d2:de:da:79:cd:fd:cf:00:d6:a3:e6:55:ce:27:05:
3f:48:fc:7f:84:88:c5:87:89:8d:17:5b:c5:81:62:92:96:9a:
2c:60:af:0a:47:39:07:12:4b:35:e6:9b:30:2e:55:d1:7b:b0:
46:42:05:4b:ef:d9:d6:56:3f:c6:de:56:5b:8e:0c:28:5f:8f:
b4:e9:bc:54:63:a0:6e:9d:28:60:d2:d0:06:3a:ef:2e:2c:b7:
50:b4:76:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:11 2026 by rpki-client