Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AWifCUSGBLrO3rvf9HPLSVJMwxs.roa
File: AWifCUSGBLrO3rvf9HPLSVJMwxs.roa (raw, json)
Hash identifier: Zd+PLTpiK8fuUf0O1BZbRWwKmudBohflfzhXiTL055Q=
Subject key identifier: 01:68:9F:09:44:86:04:BA:CE:DE:BB:DF:F4:73:CB:49:52:4C:C3:1B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D7695C68B30B566C0EE4B89C8E3D197D8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AWifCUSGBLrO3rvf9HPLSVJMwxs.roa
Signing time: Fri 10 Apr 2026 08:50:20 +0000
ROA not before: Fri 10 Apr 2026 08:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:95:c6:8b:30:b5:66:c0:ee:4b:89:c8:e3:d1:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 10 08:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01689f09448604bacedebbdff473cb49524cc31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:31:45:b6:97:b9:14:37:62:3c:ff:39:21:
90:1b:20:1d:6e:bb:ad:b7:14:8a:70:51:40:41:e2:
da:02:2a:0b:d0:08:12:02:ea:6d:e9:30:75:60:48:
d6:7a:16:c1:8e:4f:ca:3b:ff:cd:f0:bc:ee:6d:ff:
1a:67:f6:15:5a:95:c0:c6:0a:36:5c:a1:f5:e0:82:
63:cc:97:b5:4b:82:32:4b:b2:18:07:f4:6b:0e:51:
b3:0a:78:cd:d1:3e:88:f6:dc:83:df:65:e1:ba:17:
a3:ba:22:ea:59:57:22:7e:76:15:ef:34:d2:dc:09:
c5:4b:17:bf:8e:a6:75:3f:da:5e:90:c1:a9:8c:27:
b7:51:d0:b2:06:c2:60:1e:d9:b9:0a:e8:42:53:72:
55:b7:55:c6:39:0d:c4:a8:41:9b:86:c7:f2:33:0b:
24:f2:b1:1d:bc:12:bf:49:ce:a6:81:7d:ab:72:3b:
0f:d8:fa:78:7b:38:2c:69:48:21:c4:55:82:07:75:
7a:90:8a:8b:be:c4:38:dc:7c:4a:7f:bb:05:31:f0:
f9:c2:46:05:6e:61:53:b1:66:bf:e8:99:4b:7a:e7:
90:bf:da:39:4d:e3:af:9e:12:b8:db:3a:ad:8b:a0:
3f:6a:35:49:80:11:c5:a5:94:28:d9:a4:6c:63:41:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:9F:09:44:86:04:BA:CE:DE:BB:DF:F4:73:CB:49:52:4C:C3:1B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AWifCUSGBLrO3rvf9HPLSVJMwxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.20.0/23
78.17.30.0/23
Signature Algorithm: sha256WithRSAEncryption
97:0c:c8:a3:53:39:fd:dd:29:39:76:7b:eb:3f:35:21:ed:b2:
8c:92:bf:60:6f:82:58:e0:23:17:7e:2f:11:e0:7c:68:f0:df:
ea:9b:ce:20:34:aa:5b:d0:e6:0d:ab:ee:b2:3c:ea:a7:dc:14:
23:39:8b:60:09:0f:87:db:0f:3d:45:8c:c9:16:f1:a4:d8:9c:
67:80:61:e1:e2:f6:c3:98:e7:b8:e7:57:09:72:00:e2:84:99:
e2:ba:a7:e2:6f:f4:17:66:02:9e:04:26:d1:26:18:cd:de:41:
da:f0:87:92:35:a4:2e:64:97:ae:c7:52:9a:fb:a7:95:2a:c7:
0d:e7:61:95:2a:dd:c5:1c:86:c7:55:82:f9:05:b9:19:12:f3:
d4:10:02:f9:65:f1:40:04:92:8a:19:59:e2:ae:db:c5:ae:fc:
00:f4:df:d2:51:e9:62:c0:8d:ab:b6:7a:21:e4:e9:3f:f1:2f:
7a:7a:eb:21:59:c1:67:78:fc:31:e7:fe:cd:35:28:35:7c:4f:
33:0a:76:5f:3f:31:61:11:c7:35:ff:f6:a8:ec:0f:41:ba:dd:
79:06:54:ef:36:8f:a3:7a:e6:56:cd:86:b4:96:f9:0e:bf:7b:
c1:d5:e2:df:ec:73:a3:47:fb:2a:01:62:34:d7:42:07:cb:8e:
b6:89:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:25 2026 by rpki-client