Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Acby6wRCp5drtEFlj_VZ6RM36Y.roa
File: 1Acby6wRCp5drtEFlj_VZ6RM36Y.roa (raw, json)
Hash identifier: b91XTYhUKV3AjDcRoXdMYhCV5y6iZXDD7I5bVFdOS54=
Subject key identifier: D4:07:1B:CB:AC:11:0A:9E:5D:AE:D1:05:96:3F:D5:67:A4:4C:DF:A6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A172DBBE13AC83C5741FBFEFB553A371FD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Acby6wRCp5drtEFlj_VZ6RM36Y.roa
Signing time: Sun 25 Oct 2026 11:39:25 +0000
ROA not before: Sun 25 Oct 2026 11:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.166.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
89.125.237.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:db:be:13:ac:83:c5:74:1f:bf:ef:b5:53:a3:71:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 25 11:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4071bcbac110a9e5daed105963fd567a44cdfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:55:c0:70:6f:a5:7e:ff:77:d2:09:e1:82:
5f:a4:2a:4e:66:55:91:73:51:c1:6a:9c:10:dd:2c:
55:00:15:3f:38:7d:ef:d7:a2:ca:b1:54:f7:28:70:
45:68:f2:3b:89:6b:f7:2f:34:62:85:8e:8d:32:91:
34:96:e5:96:72:79:74:98:0f:f9:cc:7a:31:12:44:
2f:39:01:ff:98:fe:63:42:ed:96:37:2a:c3:c9:1f:
7b:e5:71:25:2e:1c:2c:d0:ef:f6:18:99:55:4a:2d:
9f:5c:5e:8f:cd:88:e0:d8:e5:4e:fa:ef:eb:4e:09:
fc:ca:13:85:3d:e3:a6:30:1d:6e:c4:75:12:91:e6:
2c:bd:a8:6a:72:e2:19:ef:38:23:7a:af:78:cc:ed:
bb:8b:53:3c:86:c1:af:44:ed:48:bb:50:e2:24:b5:
22:e3:fb:5b:ea:bd:03:ed:ef:d6:3a:c2:61:e7:79:
0e:91:ca:42:85:b8:9a:bc:9f:96:b2:39:bb:d0:f8:
a5:ed:fb:19:83:f9:0b:5e:a9:6b:cb:ce:68:b1:d4:
73:d9:5d:3b:02:59:d5:14:4b:39:d0:0c:6a:c5:28:
00:f4:24:25:a0:07:4b:95:fc:c5:03:fa:3c:01:7c:
24:47:55:56:0b:28:a0:59:cc:9c:a9:34:f1:14:0d:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:1B:CB:AC:11:0A:9E:5D:AE:D1:05:96:3F:D5:67:A4:4C:DF:A6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Acby6wRCp5drtEFlj_VZ6RM36Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.19.0/24
78.17.115.0/24
89.37.192.0/24
89.125.120.0/24
89.125.129.0/24
89.125.166.0/24
89.125.168.0/24
89.125.237.0/24
104.143.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:53:69:ca:b1:c1:0a:14:51:c0:42:d7:bf:25:68:59:54:22:
07:9c:e4:5c:9d:64:24:72:38:b8:ca:6f:1e:70:19:e1:3b:c4:
50:a1:5c:1d:fb:c5:ba:68:32:7f:12:d9:d9:0f:9c:d0:4c:fc:
6b:fb:55:f3:88:0a:44:3a:07:88:cd:6c:4f:03:20:2c:2c:66:
7d:f5:0f:cc:1c:45:af:28:73:5d:c4:9d:d4:9b:e2:49:70:2d:
3e:2d:a2:a8:f4:96:26:db:67:73:60:6e:42:df:50:6f:44:23:
09:f7:90:1e:f4:2c:a7:54:8a:74:c5:7b:3b:3e:22:71:12:df:
d6:6d:fa:a1:db:e1:33:8e:73:c6:3c:e9:0f:57:53:48:d9:a7:
1b:85:ca:f6:e4:53:f3:42:42:57:5c:d3:18:19:ca:83:82:46:
d8:79:dd:88:00:1b:86:c5:4d:84:af:a4:47:27:bd:9f:a0:6b:
62:e2:23:ca:16:7a:46:59:b3:cd:69:ca:5b:fe:6a:1f:ff:eb:
de:a0:30:54:0f:eb:b8:0f:c7:b6:5a:0d:22:43:ad:76:82:5e:
61:83:cf:51:a4:e1:88:1e:a9:26:fa:57:e7:de:6e:4c:22:af:
54:83:58:e3:fe:43:8d:71:c3:6d:c9:02:0e:c1:f1:85:34:f7:
16:ad:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:33:13 2026 by rpki-client