Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9JzLr_kY6fV9XLrISkFEllTE8Yg.roa
File: 9JzLr_kY6fV9XLrISkFEllTE8Yg.roa (raw, json)
Hash identifier: vLCl7UqAkvLu4Gv7Uv3OI5gYhrAd84MopPXeYDD7onk=
Subject key identifier: F4:9C:CB:AF:F9:18:E9:F5:7D:5C:BA:C8:4A:41:44:96:54:C4:F1:88
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019FD26F46B40620B7057C13ED75A3099D22
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9JzLr_kY6fV9XLrISkFEllTE8Yg.roa
Signing time: Wed 05 Aug 2026 14:58:55 +0000
ROA not before: Wed 05 Aug 2026 14:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.1.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.11.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.14.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.144.0/20 maxlen: 20
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
88.151.194.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.12.0/24 maxlen: 24
188.64.13.0/24 maxlen: 24
188.64.14.0/24 maxlen: 24
188.64.15.0/24 maxlen: 24
2a00:48c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:6f:46:b4:06:20:b7:05:7c:13:ed:75:a3:09:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 5 14:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f49ccbaff918e9f57d5cbac84a41449654c4f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7d:28:f6:07:35:e9:73:6c:98:59:57:80:2c:
1b:b5:5e:ed:07:09:07:a8:93:ac:1b:e7:3e:ff:95:
8d:30:37:67:12:bd:a7:3f:b8:32:a5:ca:c7:e8:57:
1b:ff:43:47:8c:89:8f:dd:b3:25:5b:bc:95:68:1c:
47:09:a1:45:35:bb:50:2f:54:5b:16:e9:95:c8:2e:
c6:55:89:7c:0c:46:2d:cf:33:77:8b:c3:b3:ee:16:
c6:cc:f7:35:14:c1:31:cc:ad:8e:85:7d:f8:f0:09:
ab:24:e7:86:1d:9a:b6:66:48:c6:f5:d1:8e:0c:d1:
b2:cf:5c:48:d9:ba:cc:e4:ce:4c:13:04:31:33:c4:
b7:57:b6:7d:49:2a:61:6a:05:a8:eb:3a:bf:8f:74:
a3:86:d9:3a:3c:83:d9:7b:90:d1:65:a6:e0:48:14:
8a:01:42:76:09:c8:df:0f:0d:39:aa:9f:86:67:d8:
5a:91:30:fa:fa:46:05:3b:f0:3d:8d:7f:6c:c5:f8:
d5:bd:a6:89:65:6d:90:bb:56:6b:1b:10:67:34:c7:
fc:49:17:e2:ea:2a:a4:19:2f:7a:ba:39:c0:a3:6c:
6e:1d:78:1c:10:da:0a:e9:97:61:c7:c6:72:81:0c:
88:76:68:41:36:95:10:f3:24:5f:79:15:db:51:b0:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:CB:AF:F9:18:E9:F5:7D:5C:BA:C8:4A:41:44:96:54:C4:F1:88
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9JzLr_kY6fV9XLrISkFEllTE8Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.1.0/24
5.178.4.0/22
5.178.9.0-5.178.15.255
46.23.100.0/22
46.23.111.0/24
62.217.128.0-62.217.132.255
62.217.134.0/24
62.217.138.0/24
62.217.140.0-62.217.142.255
62.217.144.0/20
88.151.194.0/24
88.151.199.0/24
109.205.208.0/24
109.205.213.0/24
109.205.215.0/24
185.81.216.0/23
185.81.219.0/24
188.64.8.0/21
IPv6:
2a00:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ba:43:ab:62:34:b1:ef:c8:be:7b:12:bb:42:14:99:21:c7:
66:5e:a4:ca:15:9e:b5:bc:32:05:ca:03:f9:c2:39:99:eb:9f:
dc:43:d1:e5:60:0a:b6:8e:9b:5c:50:f0:07:44:7b:58:b7:0e:
2e:4e:2c:3c:1f:42:43:a2:09:bf:28:9d:72:9b:9e:0e:31:df:
d0:ab:c1:06:c1:90:07:da:48:2b:c0:b5:9e:89:ea:ca:8b:e1:
02:6f:3f:fe:43:59:87:31:7b:51:41:33:b6:60:06:82:ec:f0:
13:3f:ca:12:c5:47:51:3f:53:e2:8a:26:09:ca:0f:f0:4b:5f:
a6:20:01:f2:5e:ad:58:c6:f4:2c:30:c3:b2:42:d4:fd:8d:57:
d5:6d:9e:7a:ab:f4:e0:78:46:78:f4:55:0c:b3:31:a4:e9:c1:
0b:41:4a:03:79:5e:97:ed:f9:44:5a:ab:5f:4d:67:2e:04:c5:
68:c9:cd:16:4b:5e:3a:78:97:8e:d2:0e:76:ec:92:c6:05:64:
0e:2d:58:7b:51:fd:3f:38:18:e7:f5:3f:a6:f9:c3:4d:a4:6d:
eb:cb:7f:ba:e0:70:96:72:4d:12:6a:ac:3d:bf:6d:fb:b9:20:
4c:28:7c:37:54:83:80:21:d2:55:92:56:5c:66:e7:91:77:85:
2e:30:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:21 2026 by rpki-client