Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IscWjCjLUQr6nFxS5S71mmGIcqs.roa
File: IscWjCjLUQr6nFxS5S71mmGIcqs.roa (raw, json)
Hash identifier: 8RWYGVDQuxlFhj/wCqcOlDe4Xsvx73B5WbE/LELH4qY=
Subject key identifier: 22:C7:16:8C:28:CB:51:0A:FA:9C:5C:52:E5:2E:F5:9A:61:88:72:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D62745C1F08FCE99CC462B682019E8769
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IscWjCjLUQr6nFxS5S71mmGIcqs.roa
Signing time: Mon 06 Apr 2026 11:01:26 +0000
ROA not before: Mon 06 Apr 2026 11:01:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 78.17.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:74:5c:1f:08:fc:e9:9c:c4:62:b6:82:01:9e:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 6 11:01:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22c7168c28cb510afa9c5c52e52ef59a618872ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:35:83:93:a9:25:50:97:85:f7:fe:46:f8:
fd:d3:ee:62:93:89:08:54:a3:a1:30:23:b6:8e:8b:
eb:6f:16:d8:76:85:1a:46:e8:77:72:c5:8c:bf:20:
d0:4f:ce:de:6f:bb:6d:76:cf:db:80:11:a1:4a:7d:
ae:b7:12:35:90:dc:97:d1:4d:f6:37:ae:30:7b:df:
33:c0:9e:e3:5a:12:0d:94:84:10:26:07:33:15:c4:
d5:15:0a:b1:03:8d:46:cd:16:d2:fd:40:85:8d:34:
0c:0e:f1:5c:77:e1:67:33:b1:2e:90:a3:55:ec:eb:
52:91:d4:0a:18:fa:48:71:3b:99:5e:b6:cf:e3:48:
f0:f2:2c:4d:0e:a4:45:60:e5:e6:3c:c6:fd:2f:0a:
f5:b7:71:e6:82:d8:00:d1:57:c1:b6:53:6a:0e:80:
fb:a3:f6:ac:63:1e:cf:e4:b3:c4:28:f2:a3:65:b7:
b9:a6:46:5f:eb:d5:56:b4:86:19:7a:37:40:35:af:
7f:52:0e:23:c9:fc:94:dd:dd:4c:f1:e0:62:02:97:
66:cb:4f:26:b8:a9:e9:f4:96:ec:c0:72:c5:81:08:
13:e4:ff:4c:c4:38:2a:b8:ca:ea:25:69:bd:52:65:
5b:29:4b:0b:77:9e:dd:8c:ba:92:86:a9:34:b5:c1:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C7:16:8C:28:CB:51:0A:FA:9C:5C:52:E5:2E:F5:9A:61:88:72:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IscWjCjLUQr6nFxS5S71mmGIcqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.168.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cf:f9:a4:fb:e4:be:9e:1a:0f:22:de:07:17:b4:13:f6:40:
65:9b:70:35:0e:64:b7:36:31:6b:40:2c:bc:31:54:2d:33:cb:
72:ba:d6:5b:c6:2a:d9:a4:be:db:84:25:8b:e6:4b:11:86:9e:
cc:eb:76:2f:bb:bc:19:63:bd:98:e7:4b:cd:60:fc:6b:ba:00:
24:28:96:3e:ef:55:d8:4b:49:38:81:32:ad:fa:d1:36:84:d5:
dc:6c:45:9f:19:11:7e:d9:44:59:64:5e:80:88:63:e7:4f:47:
76:fa:97:2b:87:ec:6b:4f:22:4a:4b:bc:16:e9:fa:40:5b:f0:
0e:08:d7:6b:1a:f8:a7:83:9c:18:80:de:4f:a1:b4:ca:80:45:
7f:8e:87:85:9c:1a:ee:5b:2f:b2:86:38:16:3f:3f:74:0e:f9:
db:a3:8f:a1:74:63:ef:32:a9:55:60:d7:bd:18:45:0a:c2:e7:
f5:c9:98:82:c0:90:78:8c:92:be:c8:c4:1e:1d:cf:7d:ab:e0:
27:c6:ac:23:34:ef:88:d5:84:16:2d:c2:e2:d4:01:23:54:52:
df:05:ff:2f:04:06:9b:79:76:cd:d9:13:a0:1c:f4:ce:35:ac:
f3:a5:4a:bc:f5:c9:da:d0:7c:36:e7:ab:30:57:f6:ec:6a:2f:
a9:dd:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:27 2026 by rpki-client