Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xsw_DhGFym3jsfTy56JVX4hlnZ0.roa
File: xsw_DhGFym3jsfTy56JVX4hlnZ0.roa (raw, json)
Hash identifier: Pui8THW74oOs+0AfwuL0o7ntuHgceeKh59qvhm0jMQ8=
Subject key identifier: C6:CC:3F:0E:11:85:CA:6D:E3:B1:F4:F2:E7:A2:55:5F:88:65:9D:9D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A043D8641CB50F27DF35D62677490BD522
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xsw_DhGFym3jsfTy56JVX4hlnZ0.roa
Signing time: Thu 27 Aug 2026 15:30:49 +0000
ROA not before: Thu 27 Aug 2026 15:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 78.17.214.0/24 maxlen: 24
78.17.220.0/24 maxlen: 24
78.17.224.0/24 maxlen: 24
153.76.196.0/24 maxlen: 24
153.76.200.0/24 maxlen: 24
153.76.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:d8:64:1c:b5:0f:27:df:35:d6:26:77:49:0b:d5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 27 15:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6cc3f0e1185ca6de3b1f4f2e7a2555f88659d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:ee:a1:40:3a:b5:98:76:17:85:32:1b:c0:
be:13:c4:78:c2:53:61:7a:71:00:5c:7b:37:df:17:
c6:d2:a6:b3:e2:52:fa:1a:4d:44:2a:30:69:e6:70:
17:e7:87:8d:16:ed:57:e9:cd:ea:c3:55:5d:e0:ca:
59:e8:b2:22:75:6c:bc:fa:d6:df:1a:f2:7d:99:af:
48:49:ee:b3:25:a1:09:31:d6:da:9c:a7:73:ab:f3:
b7:a2:2b:2c:41:ba:74:03:ec:3f:68:4a:fe:24:1f:
22:cb:46:8c:98:6c:b8:5f:7d:35:c3:99:ea:f4:be:
7b:a5:13:ff:fa:ee:30:69:6c:7c:c2:50:72:d4:72:
1c:f3:e8:26:1b:64:b7:e3:4a:8d:0f:0b:73:20:67:
92:b9:1d:f4:3b:96:bf:8c:1a:15:e1:b8:1a:0a:f8:
b5:5d:2f:60:70:a6:dc:c2:02:e4:5f:f2:92:a3:fe:
d4:0b:aa:2d:c9:e3:7b:16:21:65:bc:7e:64:26:18:
90:45:53:d9:5d:bc:d7:4a:27:84:41:96:d4:2f:9a:
d8:b9:37:5c:50:65:b6:c4:b7:f2:c1:54:fa:bb:16:
f8:f1:6e:60:d1:7f:0e:2f:f9:c1:e1:bc:94:c0:24:
87:13:70:82:00:f3:64:eb:d2:b7:4f:0e:99:89:de:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:3F:0E:11:85:CA:6D:E3:B1:F4:F2:E7:A2:55:5F:88:65:9D:9D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xsw_DhGFym3jsfTy56JVX4hlnZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.214.0/24
78.17.220.0/24
78.17.224.0/24
153.76.196.0/24
153.76.200.0/24
153.76.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a6:d0:e3:f1:65:16:7a:47:8d:4f:2f:7b:01:04:eb:b8:59:
52:be:19:5e:b3:a1:52:3c:a0:bf:45:2e:ea:4c:09:9f:a3:03:
b8:8c:e7:6e:de:2a:27:03:e8:a0:98:50:50:04:06:02:68:16:
20:ae:e1:8b:e8:b4:e3:27:b0:7f:4e:7a:e1:ee:d7:02:87:f4:
84:2e:cf:f2:26:3f:e3:08:c0:46:13:da:60:77:fc:6f:51:92:
25:fa:c9:9a:6d:ef:ba:fa:ee:7c:bc:c8:57:56:a4:2b:6a:44:
45:2c:7d:59:f2:4b:af:75:06:58:75:ae:3b:fc:00:6c:c9:6b:
45:9d:67:17:d9:c6:68:0b:bb:e6:69:85:aa:96:0d:4c:57:96:
98:6f:47:9a:36:9c:55:b6:76:90:78:18:93:7e:57:bf:fb:21:
fd:34:06:1f:7e:90:ba:16:f6:62:54:da:05:70:99:8a:81:51:
50:d3:1d:fc:d7:4a:25:30:2a:7a:67:69:9f:d9:f4:7a:57:98:
93:e7:c9:53:ea:6b:ee:a6:de:13:c2:e0:a6:fe:b7:00:a1:22:
f6:8d:2b:82:14:38:b2:42:92:14:86:2c:65:d6:81:bb:42:8a:
5b:ad:63:09:97:e8:d9:50:9b:5c:b5:e8:34:d8:15:7b:03:92:
05:35:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:41 2026 by rpki-client