Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/fcNdHqvJj3_fe0hO4mHQC3R7-CU.roa
File: fcNdHqvJj3_fe0hO4mHQC3R7-CU.roa (raw, json)
Hash identifier: Tke0Dkz/arOfPpNr0qBqzj49sqQsh6E1xz/bEOsT38Y=
Subject key identifier: 7D:C3:5D:1E:AB:C9:8F:7F:DF:7B:48:4E:E2:61:D0:0B:74:7B:F8:25
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 01A1A780CAF581600C7FEF0548A53B6238E3
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/fcNdHqvJj3_fe0hO4mHQC3R7-CU.roa
Signing time: Wed 04 Nov 2026 16:59:58 +0000
ROA not before: Wed 04 Nov 2026 16:59:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34187
IP address blocks: 78.26.128.0/18 maxlen: 18
78.26.128.0/19 maxlen: 19
78.26.128.0/24 maxlen: 24
78.26.129.0/24 maxlen: 24
78.26.130.0/24 maxlen: 24
78.26.131.0/24 maxlen: 24
78.26.132.0/24 maxlen: 24
78.26.133.0/24 maxlen: 24
78.26.134.0/24 maxlen: 24
78.26.135.0/24 maxlen: 24
78.26.136.0/24 maxlen: 24
78.26.137.0/24 maxlen: 24
78.26.138.0/24 maxlen: 24
78.26.139.0/24 maxlen: 24
78.26.140.0/22 maxlen: 22
78.26.140.0/24 maxlen: 24
78.26.141.0/24 maxlen: 24
78.26.142.0/24 maxlen: 24
78.26.143.0/24 maxlen: 24
78.26.144.0/24 maxlen: 24
78.26.145.0/24 maxlen: 24
78.26.146.0/24 maxlen: 24
78.26.147.0/24 maxlen: 24
78.26.148.0/24 maxlen: 24
78.26.149.0/24 maxlen: 24
78.26.150.0/24 maxlen: 24
78.26.151.0/24 maxlen: 24
78.26.152.0/24 maxlen: 24
78.26.153.0/24 maxlen: 24
78.26.154.0/24 maxlen: 24
78.26.155.0/24 maxlen: 24
78.26.156.0/24 maxlen: 24
78.26.157.0/24 maxlen: 24
78.26.158.0/24 maxlen: 24
78.26.159.0/24 maxlen: 24
78.26.160.0/19 maxlen: 19
78.26.160.0/24 maxlen: 24
78.26.161.0/24 maxlen: 24
78.26.162.0/24 maxlen: 24
78.26.163.0/24 maxlen: 24
78.26.164.0/24 maxlen: 24
78.26.165.0/24 maxlen: 24
78.26.166.0/24 maxlen: 24
78.26.167.0/24 maxlen: 24
78.26.168.0/24 maxlen: 24
78.26.169.0/24 maxlen: 24
78.26.170.0/24 maxlen: 24
78.26.171.0/24 maxlen: 24
78.26.172.0/24 maxlen: 24
78.26.173.0/24 maxlen: 24
78.26.174.0/24 maxlen: 24
78.26.175.0/24 maxlen: 24
78.26.176.0/24 maxlen: 24
78.26.177.0/24 maxlen: 24
78.26.178.0/24 maxlen: 24
78.26.179.0/24 maxlen: 24
78.26.180.0/23 maxlen: 23
78.26.180.0/24 maxlen: 24
78.26.181.0/24 maxlen: 24
78.26.182.0/24 maxlen: 24
78.26.183.0/24 maxlen: 24
78.26.184.0/24 maxlen: 24
78.26.185.0/24 maxlen: 24
78.26.186.0/24 maxlen: 24
78.26.187.0/24 maxlen: 24
78.26.188.0/24 maxlen: 24
78.26.189.0/24 maxlen: 24
78.26.190.0/24 maxlen: 24
78.26.191.0/24 maxlen: 24
78.26.192.0/18 maxlen: 18
78.26.192.0/19 maxlen: 19
78.26.192.0/20 maxlen: 20
78.26.192.0/22 maxlen: 22
78.26.192.0/24 maxlen: 24
78.26.193.0/24 maxlen: 24
78.26.194.0/24 maxlen: 24
78.26.195.0/24 maxlen: 24
78.26.196.0/24 maxlen: 24
78.26.197.0/24 maxlen: 24
78.26.198.0/24 maxlen: 24
78.26.199.0/24 maxlen: 24
78.26.200.0/21 maxlen: 21
78.26.200.0/24 maxlen: 24
78.26.201.0/24 maxlen: 24
78.26.202.0/24 maxlen: 24
78.26.203.0/24 maxlen: 24
78.26.204.0/24 maxlen: 24
78.26.205.0/24 maxlen: 24
78.26.206.0/24 maxlen: 24
78.26.207.0/24 maxlen: 24
78.26.208.0/24 maxlen: 24
78.26.209.0/24 maxlen: 24
78.26.210.0/24 maxlen: 24
78.26.211.0/24 maxlen: 24
78.26.212.0/24 maxlen: 24
78.26.213.0/24 maxlen: 24
78.26.214.0/24 maxlen: 24
78.26.215.0/24 maxlen: 24
78.26.216.0/24 maxlen: 24
78.26.217.0/24 maxlen: 24
78.26.218.0/24 maxlen: 24
78.26.219.0/24 maxlen: 24
78.26.220.0/24 maxlen: 24
78.26.221.0/24 maxlen: 24
78.26.222.0/24 maxlen: 24
78.26.223.0/24 maxlen: 24
78.26.224.0/19 maxlen: 19
78.26.224.0/24 maxlen: 24
78.26.225.0/24 maxlen: 24
78.26.226.0/24 maxlen: 24
78.26.227.0/24 maxlen: 24
78.26.228.0/24 maxlen: 24
78.26.229.0/24 maxlen: 24
78.26.230.0/24 maxlen: 24
78.26.231.0/24 maxlen: 24
78.26.232.0/24 maxlen: 24
78.26.233.0/24 maxlen: 24
78.26.234.0/24 maxlen: 24
78.26.235.0/24 maxlen: 24
78.26.236.0/24 maxlen: 24
78.26.237.0/24 maxlen: 24
78.26.238.0/24 maxlen: 24
78.26.239.0/24 maxlen: 24
78.26.240.0/24 maxlen: 24
78.26.241.0/24 maxlen: 24
78.26.242.0/24 maxlen: 24
78.26.243.0/24 maxlen: 24
78.26.244.0/24 maxlen: 24
78.26.245.0/24 maxlen: 24
78.26.246.0/24 maxlen: 24
78.26.247.0/24 maxlen: 24
78.26.248.0/24 maxlen: 24
78.26.249.0/24 maxlen: 24
78.26.250.0/24 maxlen: 24
78.26.251.0/24 maxlen: 24
78.26.252.0/24 maxlen: 24
78.26.253.0/24 maxlen: 24
78.26.254.0/24 maxlen: 24
78.26.255.0/24 maxlen: 24
185.70.108.0/22 maxlen: 22
185.70.108.0/23 maxlen: 23
185.70.108.0/24 maxlen: 24
185.70.109.0/24 maxlen: 24
185.70.110.0/23 maxlen: 23
185.70.110.0/24 maxlen: 24
185.70.111.0/24 maxlen: 24
195.245.118.0/23 maxlen: 23
195.245.118.0/24 maxlen: 24
195.245.119.0/24 maxlen: 24
2a03:1240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:80:ca:f5:81:60:0c:7f:ef:05:48:a5:3b:62:38:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Nov 4 16:59:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dc35d1eabc98f7fdf7b484ee261d00b747bf825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:d5:bc:78:fd:c9:82:bf:b4:5b:1b:d2:5b:
4c:0b:23:52:9f:c4:02:0d:e1:f3:81:35:01:f0:ea:
03:82:60:b0:63:9a:64:68:90:dd:c5:c8:87:65:4e:
73:be:24:53:fc:5b:10:de:02:a8:e8:d3:a4:0d:9a:
06:43:04:4a:06:07:ea:53:3b:e5:22:d7:21:7e:af:
e4:fa:82:32:d4:7c:64:40:0f:e6:72:c5:39:2b:dd:
e0:91:a2:47:37:1d:fd:30:ed:b4:d6:fb:d3:5c:b1:
23:6a:ba:07:f6:c5:56:99:7f:b8:8b:9b:b4:17:e4:
91:99:04:cc:d2:c6:68:ff:aa:c5:8d:31:f5:13:64:
c9:65:c1:b3:7a:16:30:9a:14:b7:63:dd:09:59:b0:
1b:5c:22:c4:cd:23:ad:20:e5:b7:b9:cb:d8:a0:1b:
88:cc:4f:33:17:96:41:cd:b0:e6:de:e6:81:d6:38:
48:33:66:64:de:f3:f0:c9:2e:b3:ec:ff:44:6e:eb:
6e:03:ca:48:98:a7:b9:1a:64:3c:41:22:ef:29:1c:
d3:fe:1c:58:46:c7:0b:ce:b6:62:83:3f:8f:00:cc:
8e:23:8e:8a:83:d1:f9:ef:5e:df:2e:6f:79:6c:98:
e3:f2:a7:61:6f:42:18:b1:47:ef:4d:c2:e2:b2:cb:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:5D:1E:AB:C9:8F:7F:DF:7B:48:4E:E2:61:D0:0B:74:7B:F8:25
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/fcNdHqvJj3_fe0hO4mHQC3R7-CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.128.0/17
185.70.108.0/22
195.245.118.0/23
IPv6:
2a03:1240::/48
Signature Algorithm: sha256WithRSAEncryption
a3:4b:67:a5:43:6f:96:38:1e:4f:9c:a7:4f:97:62:bf:8d:2b:
21:7f:4e:81:cb:a1:3b:d9:6a:d2:dd:1b:cd:82:59:82:fc:c2:
75:29:31:36:55:3b:66:ca:1d:8e:61:af:09:d3:f1:13:51:11:
31:01:3d:3a:42:50:bf:d0:9e:2d:92:36:14:b4:96:a7:c4:8d:
75:ca:a5:bd:9f:72:d8:ac:a9:f6:7d:6f:7a:38:be:9b:b7:44:
4d:04:46:f1:25:a9:52:1d:01:52:16:70:8a:a2:74:6b:2f:59:
98:2f:b5:93:ac:18:6d:11:9e:f9:e0:a7:16:3e:59:e7:d6:06:
f8:39:15:70:12:1c:b8:e4:6c:c6:50:11:95:b2:a2:a7:ce:6c:
c6:d3:34:ed:df:3c:ce:2d:56:9e:07:2f:f2:f3:48:8b:37:1d:
7a:00:69:de:66:09:a9:63:83:3c:a5:23:a1:92:b8:ca:5e:fa:
5e:e3:02:a0:ea:7b:fa:9b:9d:16:20:25:c6:c8:a8:ec:a9:1d:
0c:ee:31:21:b1:b6:a0:0f:1e:89:8d:e2:80:ba:7f:b6:f9:af:
71:73:9b:56:37:3d:f1:5b:eb:fa:d3:0a:7f:59:45:7b:b7:bc:
5b:53:21:a4:ff:f9:61:f0:00:e4:a5:14:69:e0:fb:21:14:d3:
54:bb:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:51 2026 by rpki-client