Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/5OsbbnnHwhVNORbPHv-OJIeuoGI.roa
File: 5OsbbnnHwhVNORbPHv-OJIeuoGI.roa (raw, json)
Hash identifier: XRJA8VpJASXYSnFu9o5yKclI6PUgREHgPT2bBiqSOmk=
Subject key identifier: E4:EB:1B:6E:79:C7:C2:15:4D:39:16:CF:1E:FF:8E:24:87:AE:A0:62
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019D4E1102C27091F91E0448E0856F9B3C94
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/5OsbbnnHwhVNORbPHv-OJIeuoGI.roa
Signing time: Thu 02 Apr 2026 12:00:30 +0000
ROA not before: Thu 02 Apr 2026 12:00:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.220.220.0/22 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:11:02:c2:70:91:f9:1e:04:48:e0:85:6f:9b:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Apr 2 12:00:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4eb1b6e79c7c2154d3916cf1eff8e2487aea062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:3c:68:25:98:da:8e:de:66:dd:6e:d2:d5:
8f:96:cc:ce:0d:2a:86:51:e6:39:fa:09:a0:8c:89:
c3:30:2d:60:17:4d:58:a2:fc:41:d0:06:24:f9:0b:
2a:c3:36:45:c9:e8:fa:53:6c:56:74:db:9d:7c:fc:
a6:0f:fc:d0:33:fc:d5:77:eb:25:db:30:f6:4e:8c:
c0:b0:7c:40:99:2e:eb:18:e5:fe:3a:e1:48:77:64:
b3:16:b6:8a:5a:f8:bf:e8:19:6d:46:f3:42:bc:6e:
de:d8:3a:5e:0e:fa:30:e0:e8:a5:44:2b:33:50:a5:
f2:1d:d5:b2:48:74:c4:8e:f3:da:8f:89:64:87:a3:
02:ce:35:06:4c:aa:42:64:af:8a:60:5b:6d:4d:bc:
0f:19:a4:50:2b:bf:49:d8:ce:98:f5:f4:bb:d1:06:
ae:d0:e4:d6:72:d6:a7:5d:c4:4f:36:5b:1c:36:6d:
fc:b9:68:e2:59:69:9e:84:94:35:4e:ed:b3:a2:ad:
2f:e1:4d:35:92:d3:01:eb:6c:07:91:7e:ec:ce:0e:
ba:5d:aa:95:da:2b:ae:21:14:ba:5f:ae:a4:da:34:
5c:13:d9:dd:cb:f7:69:17:90:f9:9c:df:c8:96:5e:
b0:15:dd:2e:e0:81:7a:6e:2f:bb:77:e0:85:46:66:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:1B:6E:79:C7:C2:15:4D:39:16:CF:1E:FF:8E:24:87:AE:A0:62
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/5OsbbnnHwhVNORbPHv-OJIeuoGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
Signature Algorithm: sha256WithRSAEncryption
80:b9:c8:1b:45:df:5f:55:ca:30:90:70:f2:d8:84:6b:3d:d0:
7a:3f:06:de:94:95:89:35:f6:7b:b5:b0:b5:8c:98:f2:06:e0:
36:26:57:74:14:a0:d9:f3:cd:85:68:43:3b:c6:f9:3f:e5:94:
69:a7:31:41:23:87:a2:a3:9d:cd:a6:ef:d2:7f:1e:5e:c7:40:
a3:54:a2:a9:4c:50:41:66:83:c5:b9:48:9d:13:9e:e9:36:c0:
f4:bc:44:07:24:d7:c9:e0:23:61:1a:b2:95:50:24:6b:27:83:
d8:9a:06:aa:38:d6:d7:70:f0:83:98:fc:ae:86:5a:a2:68:78:
14:4c:ef:d3:11:18:ef:36:fa:ab:df:98:8a:bf:27:c7:ae:9d:
17:d0:ad:44:25:62:cf:1c:bb:8a:ee:fd:86:b3:d5:4c:bc:81:
ae:5c:63:b0:09:da:c0:25:e3:81:87:71:e8:89:cc:15:60:2a:
62:ca:9c:71:aa:ff:27:35:c4:aa:a2:3a:2b:79:4c:13:c0:83:
87:13:ab:b7:a1:5f:b9:1e:a3:25:f5:e5:2a:98:0b:0f:1d:25:
26:da:d1:e8:cd:24:cc:67:6b:0b:02:1d:e5:b4:e2:3b:44:27:
26:bb:30:e5:6a:25:f7:bf:d1:de:f2:d5:f9:26:43:d1:7e:21:
84:c3:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:06 2026 by rpki-client