Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0WowMnIiFPiJU9y9QKw8GQDOAas.roa
File: 0WowMnIiFPiJU9y9QKw8GQDOAas.roa (raw, json)
Hash identifier: q54yPTaPeqphy5FuFeRMcL2zLlGGq3aZNWL/gpAtolg=
Subject key identifier: D1:6A:30:32:72:22:14:F8:89:53:DC:BD:40:AC:3C:19:00:CE:01:AB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EDA590A0CDBA9E26981E32ADCE31CA7C4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0WowMnIiFPiJU9y9QKw8GQDOAas.roa
Signing time: Thu 18 Jun 2026 10:48:48 +0000
ROA not before: Thu 18 Jun 2026 10:48:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210718
IP address blocks: 78.154.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:59:0a:0c:db:a9:e2:69:81:e3:2a:dc:e3:1c:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 18 10:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d16a3032722214f88953dcbd40ac3c1900ce01ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:d5:0c:e8:06:20:4a:7d:c9:d5:23:da:3a:
f3:b9:5d:54:78:cb:ff:49:dc:1f:9e:12:dd:7a:88:
e8:38:1b:6c:29:f2:6e:2b:58:9e:68:ee:44:08:e4:
0f:c2:5a:58:82:d9:b5:44:ad:42:93:07:f9:1f:53:
b5:2d:bd:a4:40:8f:f5:30:7b:91:6c:80:1d:53:93:
ed:a1:03:04:ca:80:92:55:bc:80:dc:d3:bf:1e:c5:
e3:40:4c:cd:c3:30:b9:5a:00:67:e5:a4:47:7c:68:
e4:64:fc:10:6e:8c:c7:ae:35:58:df:26:38:db:ac:
22:b5:31:da:cf:d0:c3:45:d9:16:92:35:87:86:3c:
42:6e:dd:ca:95:e8:6d:24:2a:9e:51:2b:55:36:a4:
54:d0:5b:79:e5:03:63:1c:f2:c2:aa:55:9a:1b:64:
bc:4f:c4:2b:cc:54:95:65:34:f9:0e:a2:3b:dd:a0:
5e:ae:c6:62:c2:da:f1:76:b3:5b:fe:78:31:a7:2d:
bc:67:48:17:a7:e7:9a:78:f3:2f:6c:46:c5:98:f0:
13:51:0f:c9:a4:5d:67:5c:80:68:79:1d:13:4c:32:
22:7a:e0:b8:b8:6a:ea:13:16:a9:50:eb:b3:95:3a:
4a:47:ab:5a:2b:0a:db:96:a9:6b:00:8d:5f:1d:24:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:30:32:72:22:14:F8:89:53:DC:BD:40:AC:3C:19:00:CE:01:AB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0WowMnIiFPiJU9y9QKw8GQDOAas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.103.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6f:b7:df:d4:f1:54:37:f0:55:4f:4b:27:ea:fa:b2:43:24:
48:d1:73:b4:d0:d9:42:fe:23:41:5b:f7:fd:80:64:88:81:af:
bb:27:e0:be:35:0c:53:56:8c:04:d3:fb:46:da:16:0c:3a:6e:
ce:8b:c2:b4:9c:cd:d6:78:10:65:bd:be:1a:a5:78:e8:68:21:
3b:26:90:ae:a7:68:ca:75:6c:3d:af:62:c0:87:dc:07:9b:8b:
8a:10:75:fb:3e:ab:a6:99:14:fc:0d:5d:a7:a4:17:50:ae:7b:
03:9a:27:a2:03:00:0e:a4:16:a9:e3:b0:4f:d2:56:75:da:dd:
42:fb:87:d0:c9:af:9c:e8:57:eb:f5:ac:46:64:d3:e4:3a:05:
1d:0b:c6:e7:a3:72:8d:9a:7f:44:06:34:bd:52:88:07:f0:cf:
cb:04:63:f4:d0:b7:e6:c6:1f:33:fc:5f:34:78:0d:8d:6b:ab:
99:17:85:b5:97:3e:95:41:aa:84:43:57:f1:dc:a2:a1:fe:d6:
e9:18:af:2e:82:02:f1:38:92:3a:dc:e1:30:97:86:d2:fc:c3:
fb:18:fa:1a:a5:26:93:a9:41:ea:77:f4:87:85:12:9a:a6:37:
be:38:41:33:e6:ed:b5:d7:58:99:a9:ed:49:f4:d5:7d:70:1f:
c4:d0:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client