Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1akN65A8hrxHdJ_zpsI1rV1iEnU.roa
File: 1akN65A8hrxHdJ_zpsI1rV1iEnU.roa (raw, json)
Hash identifier: hTcWUIpoIT+Nw4S9m0zdCGaIlBehIs5hXDPto9MDXj0=
Subject key identifier: D5:A9:0D:EB:90:3C:86:BC:47:74:9F:F3:A6:C2:35:AD:5D:62:12:75
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019F65275323CBADFA87E53703815D67E255
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1akN65A8hrxHdJ_zpsI1rV1iEnU.roa
Signing time: Wed 15 Jul 2026 09:41:43 +0000
ROA not before: Wed 15 Jul 2026 09:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.1.0/24 maxlen: 24
5.178.4.0/22 maxlen: 22
5.178.4.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.11.0/24 maxlen: 24
5.178.12.0/22 maxlen: 22
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.14.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
62.217.128.0/19 maxlen: 19
62.217.128.0/20 maxlen: 20
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.144.0/20 maxlen: 20
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
88.151.194.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
188.64.8.0/22 maxlen: 22
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.12.0/22 maxlen: 22
188.64.12.0/24 maxlen: 24
188.64.13.0/24 maxlen: 24
188.64.14.0/24 maxlen: 24
188.64.15.0/24 maxlen: 24
2a00:48c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:27:53:23:cb:ad:fa:87:e5:37:03:81:5d:67:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 15 09:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a90deb903c86bc47749ff3a6c235ad5d621275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:08:8d:d8:1c:06:76:52:ee:d6:c8:31:72:
1b:40:5f:2d:40:a7:f5:dd:60:70:69:8e:97:54:9d:
74:61:40:a4:8a:c2:57:7b:7f:f0:9b:83:42:65:c1:
3e:cf:b6:0d:d6:3a:67:8d:51:c1:e4:41:08:ed:d1:
95:21:bb:ec:4c:80:f5:2c:17:4a:9b:9f:f8:60:8c:
f6:36:e5:ff:26:87:04:10:21:a6:13:24:bc:ed:1c:
63:13:3f:a7:97:24:39:1e:40:b5:1e:45:29:df:1a:
6e:3c:9a:ae:8f:30:93:d3:4a:be:ce:c7:97:1e:ea:
57:86:59:4f:31:1d:f6:43:3d:83:8c:27:b0:6d:14:
20:81:0d:fa:4a:a8:00:6d:e7:50:c6:1a:c2:ef:fc:
d1:7d:68:c4:0c:7f:04:af:41:30:73:91:e2:de:6e:
23:61:d2:74:25:ea:8c:fe:c4:92:83:be:b5:ec:e7:
24:a8:a5:bf:3d:e8:68:5d:b3:e4:3c:5b:df:1a:ac:
0f:24:42:e6:85:e7:2c:ed:a4:b0:b0:51:2a:c1:48:
19:3e:52:44:e7:86:e7:88:f4:84:bd:c9:cc:ae:94:
6b:71:80:90:85:c9:4b:44:ba:ac:f5:23:28:2c:5b:
ac:05:75:24:c4:dc:37:3a:76:ae:c2:b5:e3:89:a7:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:0D:EB:90:3C:86:BC:47:74:9F:F3:A6:C2:35:AD:5D:62:12:75
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1akN65A8hrxHdJ_zpsI1rV1iEnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.1.0/24
5.178.4.0/22
5.178.9.0-5.178.15.255
46.23.100.0/22
46.23.111.0/24
62.217.128.0/19
88.151.194.0/24
88.151.199.0/24
109.205.208.0/24
109.205.213.0/24
109.205.215.0/24
185.81.216.0/23
185.81.219.0/24
188.64.8.0/21
IPv6:
2a00:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:1d:bc:8e:ba:ba:f3:68:aa:6c:f4:2d:a0:bf:92:d7:e3:86:
00:e5:7d:c9:7a:7f:e5:fc:cd:52:bf:a2:21:e6:7d:e7:03:1c:
5e:be:b5:4b:b8:1c:2e:9a:37:a5:1d:49:5d:52:17:12:40:c3:
2b:73:ec:be:2e:49:86:36:f6:69:06:43:b3:d3:a6:6f:fc:6c:
76:b4:30:6d:51:6e:11:b3:f0:3c:21:7f:33:fc:e2:cc:ae:a3:
4f:1e:82:70:f4:3b:9d:7b:41:9b:8d:60:be:ad:f1:64:16:e8:
31:b9:3a:d3:54:a9:3d:c1:d4:2d:e8:6c:7d:65:51:75:1d:35:
10:4c:c4:f9:0c:ab:d9:c4:3c:58:37:4c:84:93:4b:69:86:9f:
af:06:50:96:8e:b7:1e:e7:67:cc:bc:b2:62:49:d8:70:da:94:
69:9d:6d:4d:f4:b2:e4:1c:a8:2f:2e:db:15:5d:e8:5f:3f:af:
7e:ef:16:5b:a3:68:8b:2f:73:ee:12:57:5f:99:e8:c2:94:29:
6a:10:10:67:a2:ca:8c:77:ab:9e:5f:6e:69:49:fb:d2:71:75:
1e:aa:35:1f:81:e1:e3:06:14:16:29:59:75:54:8c:49:71:98:
18:d1:ad:99:0e:b8:02:92:b9:4f:2e:82:0b:49:62:6c:c3:bd:
88:19:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client