Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z_PvOCKc58v7u9Ucl2v9E1SdnWY.roa
File: z_PvOCKc58v7u9Ucl2v9E1SdnWY.roa (raw, json)
Hash identifier: 7Iv5gjSp5qpovZS0HffDWSPYyAkcya+7c+UjiO59GC8=
Subject key identifier: CF:F3:EF:38:22:9C:E7:CB:FB:BB:D5:1C:97:6B:FD:13:54:9D:9D:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F93D9D7323815BC2B8439B753F8FEFFE5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z_PvOCKc58v7u9Ucl2v9E1SdnWY.roa
Signing time: Fri 24 Jul 2026 11:19:14 +0000
ROA not before: Fri 24 Jul 2026 11:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 78.17.94.0/24 maxlen: 24
78.17.170.0/23 maxlen: 23
78.17.178.0/23 maxlen: 23
89.125.31.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.166.0/23 maxlen: 23
89.125.174.0/23 maxlen: 23
103.110.39.0/24 maxlen: 24
104.143.202.0/24 maxlen: 24
140.225.192.0/24 maxlen: 24
140.225.198.0/23 maxlen: 23
140.225.206.0/23 maxlen: 23
140.225.212.0/23 maxlen: 23
140.225.214.0/24 maxlen: 24
153.76.198.0/23 maxlen: 23
153.76.202.0/23 maxlen: 23
153.76.212.0/23 maxlen: 23
153.76.214.0/23 maxlen: 23
153.76.216.0/23 maxlen: 23
153.76.221.0/24 maxlen: 24
162.35.224.0/23 maxlen: 23
162.35.242.0/23 maxlen: 23
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:d9:d7:32:38:15:bc:2b:84:39:b7:53:f8:fe:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 24 11:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cff3ef38229ce7cbfbbbd51c976bfd13549d9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:c3:f1:fc:10:87:99:0c:24:07:06:98:1d:
1c:a7:c3:bc:12:55:fc:6f:93:d1:06:3b:1d:50:2c:
d1:a8:d5:38:cc:b5:d9:d4:dc:c6:50:a3:1d:f9:70:
0d:ca:68:c7:75:c7:fc:eb:97:ac:b7:ca:42:82:80:
05:43:8d:04:bb:ce:10:8e:3d:97:b5:e4:5e:8f:2f:
3f:b6:27:a9:49:b4:60:89:d7:d5:4e:17:73:60:21:
86:ea:16:76:ba:e2:a5:7f:f8:ae:3f:7c:97:36:7f:
87:e3:e5:bd:de:9a:5d:d5:86:84:f3:12:8c:5e:d9:
44:5e:b0:81:cd:c5:1d:44:58:84:26:cb:44:88:63:
13:f5:6e:54:d4:2c:e8:3e:2c:d0:71:86:08:3a:36:
a0:1c:31:45:b0:cf:fd:28:db:1f:3b:50:32:c9:27:
d3:12:6d:73:7f:c1:6d:77:6a:fa:a1:70:80:91:2a:
bc:13:ed:f8:c7:e1:21:a0:54:15:17:d1:e2:78:55:
4d:52:86:a8:76:26:91:2d:c7:ac:3f:b8:6c:38:e5:
4b:d3:d2:97:ed:a0:9c:51:d4:94:c1:cd:b4:cc:7c:
9b:94:f5:fa:fe:75:e4:28:20:fb:97:4a:a8:b4:84:
04:34:8a:da:bb:a3:5f:66:c6:75:77:32:b9:e1:bb:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:EF:38:22:9C:E7:CB:FB:BB:D5:1C:97:6B:FD:13:54:9D:9D:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/z_PvOCKc58v7u9Ucl2v9E1SdnWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/24
78.17.170.0/23
78.17.178.0/23
89.125.31.0/24
89.125.143.0/24
89.125.166.0/23
89.125.174.0/23
103.110.39.0/24
104.143.202.0/24
140.225.192.0/24
140.225.198.0/23
140.225.206.0/23
140.225.212.0-140.225.214.255
153.76.198.0/23
153.76.202.0/23
153.76.212.0-153.76.217.255
153.76.221.0/24
162.35.224.0/23
162.35.242.0-162.35.245.255
167.17.32.0/23
167.17.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:e8:b6:64:ed:19:1f:47:79:d8:36:41:c9:12:d0:8e:f6:a5:
6e:76:81:7b:8b:23:1e:21:19:93:16:24:c2:56:39:b4:e6:3c:
d8:38:1d:63:6c:b5:a3:ea:b8:f4:f8:ff:fc:d7:30:37:9a:15:
cf:2e:ae:2c:d3:19:46:1f:11:3d:33:72:0b:e0:3e:13:71:be:
1c:e9:7c:43:ac:44:07:30:da:42:18:f4:d5:78:a2:08:97:70:
e5:e2:14:db:bc:93:44:98:d2:2c:62:f9:30:78:a1:18:7a:f7:
7e:bf:cd:d9:d8:39:cb:95:87:45:ff:bb:47:88:c3:be:1a:62:
61:1c:97:d9:c3:7b:69:39:bb:b3:d7:fe:d2:3a:6c:54:4d:f6:
42:18:17:da:e4:86:92:ba:11:c9:7f:a5:60:9f:2a:6d:54:43:
31:da:8b:22:c3:67:37:ba:3f:8c:ec:0a:60:ae:55:96:c7:ae:
04:b1:aa:03:ba:ab:8f:1c:62:81:03:a3:90:ed:9b:0d:b5:bc:
3c:51:5b:5d:7b:6e:1f:f2:e0:c8:7c:28:76:6b:1a:c1:6b:9c:
b8:aa:dd:e3:02:f2:6e:1e:81:62:d5:ed:b9:59:04:6f:41:b3:
a7:23:e1:18:be:02:de:21:2b:b7:69:55:66:49:c8:e0:47:2a:
72:3b:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:13 2026 by rpki-client