Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jYG82nUa9QLVgbWvqqpyxGh7V7k.roa
File: jYG82nUa9QLVgbWvqqpyxGh7V7k.roa (raw, json)
Hash identifier: ZQKNZjL+ZtnE6h4vlanq0HqwiYN9o0+ayP2UtF7hzzo=
Subject key identifier: 8D:81:BC:DA:75:1A:F5:02:D5:81:B5:AF:AA:AA:72:C4:68:7B:57:B9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0C33EDF06CF947F7635A60DE762E8824B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jYG82nUa9QLVgbWvqqpyxGh7V7k.roa
Signing time: Mon 21 Sep 2026 09:14:32 +0000
ROA not before: Mon 21 Sep 2026 09:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 78.17.218.0/23 maxlen: 23
78.17.238.0/23 maxlen: 23
78.17.248.0/23 maxlen: 23
78.17.250.0/23 maxlen: 23
89.125.190.0/23 maxlen: 23
89.125.230.0/23 maxlen: 23
104.143.196.0/23 maxlen: 23
104.143.198.0/23 maxlen: 23
104.143.208.0/23 maxlen: 23
104.143.210.0/23 maxlen: 23
104.143.220.0/23 maxlen: 23
162.35.232.0/23 maxlen: 23
162.35.234.0/23 maxlen: 23
162.35.236.0/23 maxlen: 23
162.35.238.0/23 maxlen: 23
162.35.240.0/23 maxlen: 23
162.35.250.0/23 maxlen: 23
162.35.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:3e:df:06:cf:94:7f:76:35:a6:0d:e7:62:e8:82:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 09:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d81bcda751af502d581b5afaaaa72c4687b57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:12:b3:a8:b1:be:67:14:4e:29:7d:de:38:
86:80:36:67:e2:80:70:33:69:bf:ba:28:b9:34:16:
87:51:dc:b9:95:61:e9:bd:4d:8f:68:07:96:c0:af:
f8:7c:a6:38:70:f6:c4:db:6f:58:de:2f:36:2c:6f:
33:05:4d:b7:ca:7f:72:ff:78:dd:bf:07:82:45:03:
75:0a:3c:df:72:93:ce:8e:98:cf:e6:c2:8b:1b:05:
17:e1:a3:9c:86:01:b4:66:25:e1:6d:88:44:ec:81:
66:63:9d:d2:da:ac:27:9e:9f:09:f1:b5:11:0d:0d:
7b:fd:3f:94:be:67:4a:2e:cc:ac:f1:9b:75:ad:14:
5c:87:1a:a5:91:36:03:65:51:74:2e:a9:2f:e0:e5:
d7:67:9f:f0:d8:75:f6:49:06:1c:65:fa:a6:4e:80:
c5:02:d8:c9:b3:a8:50:66:cd:1a:75:10:26:18:25:
77:87:7d:ac:f3:b4:01:13:f3:fc:cf:60:31:ca:0b:
9c:44:4e:91:4f:be:0a:72:0b:6d:fb:f2:8c:7f:f5:
b3:4b:58:f8:e4:8f:ad:56:04:a6:0a:b4:33:14:d6:
9b:d3:8f:ad:35:ed:99:00:cd:7b:9c:53:56:d5:bf:
fc:fb:c7:18:d8:b0:f1:c4:45:9e:cb:e1:64:e1:b2:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:BC:DA:75:1A:F5:02:D5:81:B5:AF:AA:AA:72:C4:68:7B:57:B9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jYG82nUa9QLVgbWvqqpyxGh7V7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.218.0/23
78.17.238.0/23
78.17.248.0/22
89.125.190.0/23
89.125.230.0/23
104.143.196.0/22
104.143.208.0/22
104.143.220.0/23
162.35.232.0-162.35.241.255
162.35.250.0/23
162.35.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b8:6e:05:34:6c:08:9a:86:47:52:6b:48:ad:db:46:90:52:
ea:9c:00:e4:ee:b0:66:9c:bf:a3:4f:11:13:55:97:7d:07:39:
e8:13:a9:55:be:55:08:54:5c:d8:45:0d:ef:39:ab:b9:77:da:
35:c3:9a:5f:4e:d4:ce:37:3d:ed:4a:fe:ab:fe:0f:1d:4e:ca:
0a:3a:c4:15:35:7e:c3:93:04:cc:50:86:0e:ef:a7:9e:29:ef:
e1:11:4b:ce:e1:b0:7a:29:52:3a:fc:44:20:a7:62:5c:c7:25:
6f:ef:25:99:64:c4:65:1e:0f:2f:46:e7:9c:1f:30:eb:08:ed:
cc:60:e3:f0:e5:57:6f:6c:92:a3:c7:59:5e:86:5c:ef:2b:a9:
15:e5:bf:ee:08:8b:ab:51:48:6e:de:2a:5e:c3:7d:7f:a8:f6:
27:0a:8d:38:01:04:a5:44:02:7f:5b:11:ea:3f:29:0c:85:a0:
b9:00:04:69:5e:f9:93:29:8e:c7:f3:4a:59:ca:b2:94:3a:2c:
91:97:c3:1e:dd:b4:6c:6a:ba:58:d8:76:09:53:ff:9a:c4:12:
dc:49:a3:87:29:96:63:4e:7e:19:15:5f:1b:4b:a6:a8:8b:49:
01:1b:88:b2:35:74:9a:2c:a1:ae:fc:75:f6:03:d6:47:36:d8:
50:90:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:08 2026 by rpki-client