Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4S9jyZT5li2bS3MyplTOQ6H8t4s.roa
File: 4S9jyZT5li2bS3MyplTOQ6H8t4s.roa (raw, json)
Hash identifier: mrtsy8xvGBUTgN9xwfqCW2csiHrAYxqFQqi+TzjjGT0=
Subject key identifier: E1:2F:63:C9:94:F9:96:2D:9B:4B:73:32:A6:54:CE:43:A1:FC:B7:8B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EB6ED18523CE4DDE7D13E78EB06841B05
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4S9jyZT5li2bS3MyplTOQ6H8t4s.roa
Signing time: Thu 11 Jun 2026 13:44:11 +0000
ROA not before: Thu 11 Jun 2026 13:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 78.17.6.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.44.0/24 maxlen: 24
78.17.87.0/24 maxlen: 24
78.17.97.0/24 maxlen: 24
78.17.107.0/24 maxlen: 24
78.17.109.0/24 maxlen: 24
78.17.118.0/24 maxlen: 24
78.17.128.0/24 maxlen: 24
78.17.145.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
78.17.152.0/24 maxlen: 24
78.17.154.0/24 maxlen: 24
78.17.155.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:ed:18:52:3c:e4:dd:e7:d1:3e:78:eb:06:84:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 11 13:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e12f63c994f9962d9b4b7332a654ce43a1fcb78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:23:2d:ea:1b:23:f7:b4:e1:20:7b:19:b7:
d8:e8:45:72:7e:1c:75:d8:2d:d6:ed:e1:ef:a2:11:
a7:f1:d1:cd:b1:6e:bd:9d:78:fe:b8:20:17:e5:ef:
c0:1a:56:40:d5:7a:5e:d8:da:69:89:c7:70:72:68:
f2:0a:db:06:47:16:82:9f:b3:06:c2:00:1b:62:16:
a0:e2:df:1a:6f:6f:ff:bb:17:64:cd:17:a7:0e:4b:
fc:3b:30:0a:14:5a:2b:98:8a:e1:84:0e:af:d3:ec:
53:f1:db:08:e7:04:6f:ee:a9:04:ff:e9:0e:33:a5:
f0:4a:68:70:1e:e1:b0:70:53:f6:cc:a9:b6:16:33:
7c:77:5a:84:a2:36:28:24:2c:7f:d1:25:c4:02:51:
4a:8e:ab:84:4a:26:71:77:d4:9f:69:27:ee:b5:99:
63:1c:84:6b:05:d1:b5:69:d3:1c:60:2c:d5:b9:8a:
f4:20:63:8d:d6:64:60:23:4b:bd:3f:ea:55:b1:cf:
94:f9:1a:a3:b7:48:93:1a:57:99:fb:c3:43:e4:6e:
4c:e0:d7:80:b4:1a:f1:81:29:68:26:ad:40:64:44:
c1:11:3f:72:84:63:72:8a:ba:22:89:db:f5:16:b6:
ee:10:ba:31:b9:8f:ad:dc:a8:da:2f:44:c2:97:38:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:63:C9:94:F9:96:2D:9B:4B:73:32:A6:54:CE:43:A1:FC:B7:8B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4S9jyZT5li2bS3MyplTOQ6H8t4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.6.0/24
78.17.36.0/24
78.17.43.0-78.17.44.255
78.17.87.0/24
78.17.97.0/24
78.17.107.0/24
78.17.109.0/24
78.17.118.0/24
78.17.128.0/24
78.17.145.0/24
78.17.151.0-78.17.152.255
78.17.154.0/23
89.125.27.0/24
89.125.38.0/24
89.125.62.0/24
89.125.84.0/24
89.125.93.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dd:48:63:da:6b:18:92:a5:c5:94:b1:5f:08:2d:1c:31:11:
32:a2:f4:8a:16:7b:bd:f5:f1:58:e8:55:00:68:55:07:8b:12:
5e:42:85:23:7a:9d:e6:e3:86:f7:ff:8b:9b:a4:ae:1d:3e:d0:
39:72:df:ca:e9:a2:d1:ea:5b:d2:87:1a:3d:8e:1a:4a:25:a0:
f5:f8:e0:aa:41:73:3c:bd:08:b7:e9:42:72:00:0a:b0:04:62:
78:00:f5:0b:b2:61:10:fc:79:f7:d8:8d:4a:06:7e:81:fd:4e:
30:9a:c3:7b:44:d5:4d:dc:0c:0c:a4:47:6d:c1:90:a8:34:bc:
44:16:71:32:b5:8b:a1:c3:56:31:34:c7:70:de:f2:c0:00:40:
34:f3:2d:7d:77:eb:e8:9e:68:18:b2:69:c1:15:b5:d2:8c:c1:
15:4b:bb:da:58:a5:e3:1d:36:29:11:30:8b:09:06:58:57:07:
11:55:48:c1:6d:ef:84:00:3b:15:55:bb:f4:7b:63:d9:4b:61:
53:64:dd:69:62:87:da:7f:e9:06:a2:91:ab:93:34:9d:3a:b5:
19:c1:7b:cf:24:e4:01:c9:eb:24:38:65:40:23:d9:29:d8:0f:
37:5d:e0:6b:73:00:2f:38:16:7b:ab:04:5d:92:7b:f7:2b:80:
e9:d4:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:26 2026 by rpki-client