Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aTW4oZSsfu74OIsrnIcXBQinYnc.roa
File: aTW4oZSsfu74OIsrnIcXBQinYnc.roa (raw, json)
Hash identifier: ETrVGhVRz8Xv397jBAf1Sb4jEyjDXjaziX4p/bp15og=
Subject key identifier: 69:35:B8:A1:94:AC:7E:EE:F8:38:8B:2B:9C:87:17:05:08:A7:62:77
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F95ACC2114DD039091EFA483B83958157
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aTW4oZSsfu74OIsrnIcXBQinYnc.roa
Signing time: Fri 24 Jul 2026 19:49:14 +0000
ROA not before: Fri 24 Jul 2026 19:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 78.17.196.0/23 maxlen: 23
78.17.214.0/23 maxlen: 23
78.17.220.0/23 maxlen: 23
78.17.224.0/23 maxlen: 23
78.17.230.0/23 maxlen: 23
162.35.232.0/23 maxlen: 23
162.35.234.0/23 maxlen: 23
162.35.236.0/23 maxlen: 23
162.35.246.0/23 maxlen: 23
162.35.248.0/23 maxlen: 23
162.35.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ac:c2:11:4d:d0:39:09:1e:fa:48:3b:83:95:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 24 19:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6935b8a194ac7eeef8388b2b9c87170508a76277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:fa:aa:73:30:ea:c2:17:69:aa:44:cf:bd:
17:59:32:db:3e:03:7f:b2:bc:91:f2:48:35:b7:ef:
e8:26:7d:c1:d4:12:f8:d8:82:1d:91:d6:fe:3a:c2:
34:d7:7a:96:3f:c8:b8:88:d8:f9:bd:1e:46:17:21:
d0:c0:7e:9e:2d:e6:6b:c8:3e:e6:51:5f:5d:fd:80:
f6:06:b3:53:7f:48:c4:fd:0b:d2:65:d3:b2:6e:ed:
4a:87:dc:8e:4b:3f:45:ca:44:ec:cd:e7:6d:41:19:
1f:fb:f2:81:70:9f:04:5d:8e:9a:43:77:7d:e7:52:
8b:25:35:08:aa:64:7f:fc:6b:b1:d1:86:c3:07:65:
87:77:7e:35:03:b2:fc:17:1c:88:be:2f:95:e8:22:
4e:d9:48:e5:7f:b5:f9:57:15:e3:0f:30:8b:bd:5c:
36:ec:d8:68:9c:86:a9:b2:12:a2:80:f8:30:be:c7:
6b:ed:cc:c8:8b:94:71:e1:e8:ed:76:c5:3f:e1:c9:
7e:a4:38:36:2d:b3:8d:9e:74:5f:40:ba:ae:e9:71:
26:73:f4:f2:bc:fe:74:73:ce:27:49:17:bb:71:9f:
fc:56:2c:92:4d:00:f1:c2:d0:95:ec:a3:2c:7e:76:
b3:0e:a5:c0:b9:73:2e:97:e9:f0:a5:7f:9c:09:3d:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:B8:A1:94:AC:7E:EE:F8:38:8B:2B:9C:87:17:05:08:A7:62:77
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aTW4oZSsfu74OIsrnIcXBQinYnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.196.0/23
78.17.214.0/23
78.17.220.0/23
78.17.224.0/23
78.17.230.0/23
162.35.232.0-162.35.237.255
162.35.246.0-162.35.249.255
162.35.252.0/23
Signature Algorithm: sha256WithRSAEncryption
81:74:32:f3:d5:c2:34:ac:26:94:c5:20:c5:cf:27:e0:e2:d1:
2c:61:fc:c8:10:98:67:34:5a:11:a6:85:e0:52:65:24:5f:fc:
cf:1d:14:73:fe:b7:81:ba:96:10:09:82:c2:19:7e:11:bb:34:
b8:bc:ce:9f:bc:9f:de:53:bd:91:ee:74:b8:22:41:64:06:61:
2d:90:95:ba:2d:f2:6e:ae:ec:09:db:36:36:ca:f0:bc:c7:cc:
d9:f9:63:d2:6d:22:29:55:0d:99:06:3a:6c:24:b3:a7:94:82:
4e:86:d2:59:4c:76:bf:57:f8:4b:07:c3:a0:dd:00:ef:ac:3a:
50:26:2f:88:32:cb:6c:49:33:2d:06:49:29:4c:9a:16:3f:54:
e5:42:43:a8:4b:8e:f8:3f:3d:85:bb:4e:59:20:05:2d:ad:2b:
9a:63:4f:c4:72:65:36:d3:c0:9b:43:88:52:ad:af:f3:11:59:
f5:fc:8a:57:ca:93:65:96:00:ad:cb:5d:45:06:ba:97:0a:62:
c9:ab:81:e3:26:18:95:55:b0:00:73:6c:5d:1d:67:56:4a:ba:
50:03:d8:e9:a4:2a:cc:78:b2:8d:77:ce:b8:e6:71:56:63:d7:
57:c3:fd:ae:3e:08:a2:f1:4e:c2:55:d2:f6:9f:4d:4d:05:64:
cd:8b:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:53 2026 by rpki-client