Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gH9tbYWKZz5KXVrdsn8zJrknBQM.roa
File: gH9tbYWKZz5KXVrdsn8zJrknBQM.roa (raw, json)
Hash identifier: RTRn54NYkefeS3iV1Jp9RfEd7yhGtQ5q/CBmXPG8ze8=
Subject key identifier: 80:7F:6D:6D:85:8A:67:3E:4A:5D:5A:DD:B2:7F:33:26:B9:27:05:03
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0B3FB058BB55FA3B61322B057BEC87099
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gH9tbYWKZz5KXVrdsn8zJrknBQM.roa
Signing time: Fri 18 Sep 2026 10:06:07 +0000
ROA not before: Fri 18 Sep 2026 10:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219190
IP address blocks: 78.17.82.0/24 maxlen: 24
78.17.83.0/24 maxlen: 24
78.17.119.0/24 maxlen: 24
78.17.157.0/24 maxlen: 24
78.17.163.0/24 maxlen: 24
78.17.169.0/24 maxlen: 24
78.17.172.0/24 maxlen: 24
78.17.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:fb:05:8b:b5:5f:a3:b6:13:22:b0:57:be:c8:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 18 10:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=807f6d6d858a673e4a5d5addb27f3326b9270503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:84:94:f7:64:f1:2b:12:7b:c7:ab:a3:e4:
b4:84:41:8a:17:3c:1a:ef:09:aa:64:a4:6b:f2:be:
a4:32:02:d3:de:d5:8f:12:fb:3f:41:3e:c4:e3:a5:
c3:90:90:58:f8:08:31:a3:e4:64:00:53:9e:60:3d:
5e:00:22:49:1d:69:37:f0:78:84:47:ed:77:f7:9f:
03:dd:7d:2d:84:0f:b1:0c:d7:a3:1d:8e:35:8c:f9:
e5:9a:85:f8:49:dc:3d:e0:82:6b:69:47:44:9b:69:
dc:4a:27:c6:e4:f7:4c:c6:ff:97:5f:e9:03:59:aa:
7a:ca:b8:b1:60:fa:ce:d2:13:38:04:58:31:d9:49:
16:5d:b1:b4:26:48:5a:00:9c:84:2d:30:76:6e:ae:
08:7d:17:cd:b7:27:f8:d8:18:78:5d:09:4f:33:56:
2d:78:69:df:da:1e:f1:48:19:04:cf:d6:d9:6e:45:
46:2a:37:1d:d2:3d:e0:50:dc:34:62:76:d7:8a:bf:
fb:13:0f:b9:69:be:c3:2f:df:72:1e:54:6d:ef:1c:
25:c9:fd:19:5b:08:b7:80:76:b2:ba:c5:6f:23:bc:
ed:10:ce:e8:c1:8c:75:8f:18:6a:6d:be:44:ae:0c:
a4:2a:33:ef:73:d0:3a:de:d7:3b:ff:2c:d6:0b:07:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:6D:6D:85:8A:67:3E:4A:5D:5A:DD:B2:7F:33:26:B9:27:05:03
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gH9tbYWKZz5KXVrdsn8zJrknBQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.82.0/23
78.17.119.0/24
78.17.157.0/24
78.17.163.0/24
78.17.169.0/24
78.17.172.0/24
78.17.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ef:55:0c:25:c2:7b:07:47:36:f3:c2:ff:e2:6c:e6:90:d1:
aa:52:10:13:57:e6:38:4c:5a:f9:41:3f:98:35:71:11:db:74:
1e:83:9c:d7:9f:4c:d2:da:c7:38:23:eb:89:a5:96:85:d6:6b:
f0:0f:ea:69:c2:df:87:1a:ab:e2:0d:1e:4f:26:f0:79:fb:c2:
ed:e5:9d:05:fb:3b:ae:6c:a7:9a:f7:2f:65:68:31:b7:7f:f7:
98:7e:89:ca:67:c0:5c:7a:dc:f2:ca:91:33:3e:14:d5:97:67:
ea:1e:4b:98:44:a3:30:65:ed:15:27:6c:e5:41:b9:c2:02:4d:
e4:66:9e:93:15:de:7c:f6:e8:8a:44:e5:4b:1e:a8:c2:9f:a3:
ef:94:cc:73:02:b4:58:8e:0a:da:d1:66:43:6c:e4:08:2f:d5:
32:93:71:85:56:30:e2:d0:27:a9:33:e9:42:22:03:3d:4f:f1:
9c:3e:cf:11:29:18:21:23:29:59:ae:a8:53:17:a0:1d:42:d8:
c6:5f:0d:4e:48:a8:f1:c5:54:70:e7:80:39:02:0d:e1:47:20:
ce:a2:3e:c0:ee:49:95:6f:6f:18:85:b0:54:8a:fc:7a:98:f7:
ff:27:a6:48:9a:bd:9a:8a:38:87:44:2f:6a:06:dc:65:80:04:
7f:d4:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:38 2026 by rpki-client