Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q1W_NZTGNDBfESscNO2fqdtteyw.roa
File: q1W_NZTGNDBfESscNO2fqdtteyw.roa (raw, json)
Hash identifier: VZNyuH/XtDhnN8Ai/AG3rvfPlNGewh8co/sSxIvU3QM=
Subject key identifier: AB:55:BF:35:94:C6:34:30:5F:11:2B:1C:34:ED:9F:A9:DB:6D:7B:2C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F35ADB422846D55262D4FD7A45450851B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q1W_NZTGNDBfESscNO2fqdtteyw.roa
Signing time: Mon 06 Jul 2026 04:26:44 +0000
ROA not before: Mon 06 Jul 2026 04:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.236.0/24 maxlen: 24
78.17.237.0/24 maxlen: 24
78.17.238.0/24 maxlen: 24
78.17.239.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
167.17.32.0/21 maxlen: 21
167.17.41.0/24 maxlen: 24
167.17.42.0/23 maxlen: 23
167.17.44.0/23 maxlen: 23
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:ad:b4:22:84:6d:55:26:2d:4f:d7:a4:54:50:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 6 04:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab55bf3594c634305f112b1c34ed9fa9db6d7b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:3d:db:e5:26:1a:ff:82:cd:0e:fa:6f:82:
34:c2:94:b5:44:2d:3b:b2:30:2b:7b:27:ac:e4:68:
f1:4c:da:f2:1c:ad:17:c1:4d:48:5e:48:69:eb:d8:
8d:73:19:73:6e:d2:c4:32:29:75:e2:56:90:41:b9:
63:b1:28:d9:b3:7b:d3:94:1b:9b:26:54:bd:08:c1:
cb:9e:32:74:14:8d:59:5f:0c:58:10:10:0b:83:ee:
3b:50:14:a1:a7:02:d4:c0:78:fb:95:47:c4:de:c4:
5e:4b:d7:f0:9f:f4:27:a8:09:ab:31:c3:6a:e0:b8:
26:00:b2:35:0b:ea:c9:9a:e9:1a:df:31:07:1b:19:
66:cb:80:87:bb:46:91:49:61:a5:18:0e:e7:b8:15:
5e:e9:de:54:34:2f:a9:3c:ac:22:a9:53:c6:30:e6:
3c:b1:38:b7:55:a9:cb:ad:44:be:b1:b8:b0:3a:42:
42:32:a9:c1:3e:7f:36:dc:38:6e:31:ab:42:33:9d:
23:d1:e2:96:e5:ef:0c:45:52:6f:b2:e3:5c:8b:2e:
78:84:33:f1:6a:51:22:d4:33:b6:9d:b1:d1:bd:e4:
a5:87:c9:29:6f:44:f9:fc:40:d8:15:bc:a7:5d:36:
8d:46:7c:e7:83:92:81:20:ac:95:db:70:9e:66:21:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:BF:35:94:C6:34:30:5F:11:2B:1C:34:ED:9F:A9:DB:6D:7B:2C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q1W_NZTGNDBfESscNO2fqdtteyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.236.0/22
89.34.106.0/24
93.114.183.0/24
140.225.194.0/24
140.225.199.0/24
167.17.32.0/21
167.17.41.0-167.17.46.255
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:96:03:23:ab:a1:d0:de:a7:d1:45:d9:29:7a:57:0f:67:a8:
4c:e7:2e:40:24:a2:ba:f8:65:c9:c1:82:22:ba:0a:4b:2f:b6:
87:99:11:7e:6d:d2:82:67:35:0f:0b:e4:cd:37:81:40:7c:c0:
9e:2d:9b:21:b4:d1:3b:8d:7d:82:7c:53:f0:31:78:1b:69:c3:
f2:97:33:37:30:99:43:13:97:93:67:a9:1f:12:cd:ac:86:1e:
32:8e:cf:a8:e2:0f:f5:3b:62:cc:af:f5:cd:5c:fa:cf:0f:05:
44:20:30:f6:e8:d7:67:32:f5:6e:e4:f9:96:a1:18:84:61:fb:
75:7d:b3:14:77:f3:56:9d:fb:19:59:fb:6b:a8:71:c9:81:ef:
20:50:47:58:ff:c7:d4:b3:0e:33:d1:57:89:bc:e0:bd:bf:18:
b3:36:30:78:f6:ec:76:94:71:83:62:fe:c6:73:ab:05:21:00:
98:3e:a9:93:8a:36:ff:2c:99:47:86:52:73:21:22:c2:72:2d:
35:2e:d7:e5:be:1e:60:1c:0f:30:e1:c1:8b:9b:28:f6:03:a8:
4f:dc:6d:ad:8b:b1:c4:f9:78:0d:5f:95:80:59:c2:96:6a:24:
d7:05:89:90:ba:f9:5d:45:70:d7:65:13:ad:02:22:ad:6e:25:
6e:c7:39:f9
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZ81rbQihG1VJi1P16RUUIUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNzA2MDQyNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjU1YmYzNTk0YzYzNDMwNWYxMTJiMWMzNGVkOWZhOWRiNmQ3YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUI92+UmGv+CzQ76b4I0wpS1RC07
sjAreyes5GjxTNryHK0XwU1IXkhp69iNcxlzbtLEMil14laQQbljsSjZs3vTlBub
JlS9CMHLnjJ0FI1ZXwxYEBALg+47UBShpwLUwHj7lUfE3sReS9fwn/QnqAmrMcNq
4LgmALI1C+rJmuka3zEHGxlmy4CHu0aRSWGlGA7nuBVe6d5UNC+pPKwiqVPGMOY8
sTi3VanLrUS+sbiwOkJCMqnBPn823DhuMatCM50j0eKW5e8MRVJvsuNciy54hDPx
alEi1DO2nbHRveSlh8kpb0T5/EDYFbynXTaNRnzng5KBIKyV23CeZiEhAQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFKtVvzWUxjQwXxErHDTtn6nbbXssMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcTFXX05aVEdOREJmRVNzY05PMmZxZHR0ZXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAk4R7AME
AFkiagMEAF1ytwMEAIzhwgMEAIzhxwMEA6cRIDAMAwQApxEpAwQApxEuAwQApxE7
AwQAwjovAwQAzvWcAwQAzvWeMAwDBADUwAcDBADUwAgDBADUwAoDBADUwB4DBADU
wNAwDQYJKoZIhvcNAQELBQADggEBAAeWAyOrodDep9FF2Sl6Vw9nqEznLkAkorr4
ZcnBgiK6CksvtoeZEX5t0oJnNQ8L5M03gUB8wJ4tmyG00TuNfYJ8U/AxeBtpw/KX
MzcwmUMTl5NnqR8SzayGHjKOz6jiD/U7Ysyv9c1c+s8PBUQgMPbo12cy9W7k+Zah
GIRh+3V9sxR381ad+xlZ+2uoccmB7yBQR1j/x9SzDjPRV4m84L2/GLM2MHj27HaU
cYNi/sZzqwUhAJg+qZOKNv8smUeGUnMhIsJyLTUu1+W+HmAcDzDhwYubKPYDqE/c
ba2LscT5eA1flYBZwpZqJNcFiZC6+V1FcNdlE60CIq1uJW7HOfk=
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:16 2026 by rpki-client