Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ClltCBJ47dBQeDZEuVBvnFtCJ-8.roa
File: ClltCBJ47dBQeDZEuVBvnFtCJ-8.roa (raw, json)
Hash identifier: grCRbmwck8qXVNA6tDeTaZhsZGbPth2dRQgmuhXr+bE=
Subject key identifier: 0A:59:6D:08:12:78:ED:D0:50:78:36:44:B9:50:6F:9C:5B:42:27:EF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EB5FFF8E4EC4AE3E9C0628D3D7F207115
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ClltCBJ47dBQeDZEuVBvnFtCJ-8.roa
Signing time: Thu 11 Jun 2026 09:25:12 +0000
ROA not before: Thu 11 Jun 2026 09:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.129.0/24 maxlen: 24
78.17.236.0/24 maxlen: 24
78.17.237.0/24 maxlen: 24
78.17.238.0/24 maxlen: 24
78.17.239.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.193.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.144.0/21 maxlen: 21
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:ff:f8:e4:ec:4a:e3:e9:c0:62:8d:3d:7f:20:71:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 11 09:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a596d081278edd050783644b9506f9c5b4227ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:34:87:b4:70:00:d2:ce:fa:36:d4:70:62:
b9:88:79:3a:90:5d:00:e2:28:59:e5:aa:90:79:d4:
2a:ed:21:de:a2:35:d1:a0:47:3e:04:4e:af:e5:1a:
3c:e3:8a:67:19:ba:3d:61:29:f5:e9:6b:75:29:16:
02:4d:3a:42:85:6e:20:0e:b0:01:fa:89:92:19:44:
02:38:33:84:9b:4e:ee:38:1c:d4:45:9a:fc:57:dc:
c1:09:dd:ab:d8:71:87:1f:8d:6d:a3:75:22:6a:8a:
13:8b:37:2f:2a:57:b1:ec:cb:83:4e:86:62:cc:6f:
8a:7b:49:8e:15:b9:b5:6c:a9:be:3e:b7:02:b7:99:
2c:0a:cc:3b:ef:d5:d7:80:c3:7f:34:28:81:17:29:
06:59:cc:87:63:01:d1:8d:af:44:95:d8:02:9e:03:
f5:c5:be:16:80:91:ca:cd:4f:0d:3c:6a:91:23:ba:
9a:ba:2a:9f:a7:43:e2:07:7d:ea:27:36:f6:ab:60:
af:4b:52:a0:d0:b3:f0:31:4a:32:a4:5f:93:ee:60:
c4:5e:8d:00:a4:61:40:69:30:c8:bc:ca:0a:d9:7b:
e1:01:f5:2a:b3:06:a2:cb:85:1a:13:96:c3:ff:28:
e8:fe:80:61:48:2e:0d:d1:71:46:f9:44:2a:fe:51:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:6D:08:12:78:ED:D0:50:78:36:44:B9:50:6F:9C:5B:42:27:EF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ClltCBJ47dBQeDZEuVBvnFtCJ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.129.0/24
78.17.236.0/22
89.34.106.0/24
89.35.73.0/24
89.125.126.0/24
89.125.193.0/24
93.114.183.0/24
103.245.228.0/24
140.225.194.0/24
140.225.199.0/24
194.58.47.0/24
206.245.144.0/21
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1a:9c:5d:e5:cb:92:8c:f1:9d:fe:12:04:e4:71:18:69:73:
9a:3d:30:08:9f:ff:71:b6:b0:83:5f:ea:2f:19:5f:bf:e0:f3:
11:10:62:dd:82:29:3c:cb:14:cc:06:b6:f4:74:3a:4c:90:8f:
7d:6a:f4:61:5a:f5:fa:ce:61:00:40:f2:f4:7e:e5:b6:fa:2b:
7f:91:83:d2:a5:ea:a9:84:96:93:19:0d:68:8e:30:6b:68:ef:
b9:7e:b6:08:44:14:f4:94:41:62:8b:3b:bd:fa:76:42:c7:eb:
03:d1:4a:f8:ce:30:14:69:53:89:46:12:66:2a:1b:42:0c:67:
70:7a:07:ef:61:57:e6:ca:06:c5:a5:0f:62:10:d7:04:1a:74:
12:e1:e2:83:21:3c:a4:7a:cd:81:31:38:6b:29:91:c0:61:e4:
6e:45:36:e0:bf:c9:d2:4a:af:ee:e1:10:70:fe:86:0b:97:75:
b2:ab:72:1c:08:c8:7d:99:11:97:21:13:30:aa:85:71:16:94:
47:0d:63:14:7a:aa:bd:59:5a:24:5e:6b:12:98:b8:8c:10:41:
2f:ec:ca:33:dc:50:08:8e:cf:15:83:ad:27:75:49:5b:d3:71:
64:9d:2e:bf:83:d2:a0:9d:c2:de:09:21:be:21:61:e1:28:04:
ad:ff:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:12 2026 by rpki-client