Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa
File: 8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa (raw, json)
Hash identifier: FxsIDxqiDCsks/QZP2zl7z65J0NcQRJR7OpzOE/ZLiM=
Subject key identifier: F1:97:10:AC:DD:20:55:CC:45:9E:BF:82:85:C2:32:15:67:5F:A0:5F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019C45E57BB615F36D452A489BF757E08A26
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa
Signing time: Tue 10 Feb 2026 04:53:13 +0000
ROA not before: Tue 10 Feb 2026 04:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.1.0/24 maxlen: 24
5.178.4.0/22 maxlen: 22
5.178.4.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.11.0/24 maxlen: 24
5.178.12.0/22 maxlen: 22
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.14.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
62.217.128.0/19 maxlen: 19
62.217.128.0/20 maxlen: 20
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.144.0/20 maxlen: 20
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
188.64.8.0/22 maxlen: 22
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.12.0/22 maxlen: 22
188.64.12.0/24 maxlen: 24
188.64.13.0/24 maxlen: 24
188.64.14.0/24 maxlen: 24
188.64.15.0/24 maxlen: 24
2a00:48c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:e5:7b:b6:15:f3:6d:45:2a:48:9b:f7:57:e0:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 10 04:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19710acdd2055cc459ebf8285c23215675fa05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:51:01:af:b2:54:36:4d:1b:8f:d9:e6:81:
22:fb:c6:fe:10:20:92:9f:7f:b9:7e:3c:85:54:9b:
cc:47:f4:a9:ef:f8:0d:45:74:e4:8d:ed:86:57:33:
17:17:5d:53:d5:f8:d2:cc:34:5b:90:83:e8:ad:d9:
33:2e:b1:6b:97:b6:ee:5c:14:6e:94:d5:6e:23:b3:
b2:6b:43:71:a6:09:fb:3b:f6:09:bc:61:2f:53:44:
4a:7c:32:61:5b:e1:97:46:ac:2f:31:1b:49:c6:46:
b6:93:53:4c:dc:34:5d:eb:a1:28:32:17:b4:04:b4:
fa:36:10:0f:ad:ab:58:46:cf:48:5d:8c:6a:cb:04:
7d:2f:d9:32:9e:67:69:53:07:30:05:4e:6a:4c:01:
8e:97:af:ce:e0:9f:6c:05:c0:72:c5:bb:ea:ea:e0:
b6:5b:e5:b2:3c:78:16:96:28:bc:24:f9:4a:9f:cf:
0b:4b:b4:7d:9c:b3:f3:1d:da:cc:73:b5:89:8b:a7:
ec:54:3d:45:cb:e2:54:90:0e:c9:1b:d0:d8:d2:b0:
69:07:b9:c4:06:fd:ea:a5:4b:3a:d8:7d:e1:13:9b:
5c:cf:31:83:87:78:e7:58:14:f4:53:cc:7e:30:b0:
b4:ee:14:87:39:3a:2c:cc:95:59:25:70:a8:24:3c:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:10:AC:DD:20:55:CC:45:9E:BF:82:85:C2:32:15:67:5F:A0:5F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.1.0/24
5.178.4.0/22
5.178.9.0-5.178.15.255
46.23.100.0/22
46.23.111.0/24
62.217.128.0/19
88.151.199.0/24
109.205.208.0/24
109.205.213.0/24
109.205.215.0/24
185.81.216.0/23
185.81.219.0/24
188.64.8.0/21
IPv6:
2a00:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
86:93:b1:6d:1f:d9:29:10:7e:d0:d5:75:c2:3c:fa:ff:ee:14:
98:00:b3:da:18:46:65:6c:53:55:d5:b3:25:97:34:48:3a:d4:
70:67:a2:73:ec:1b:01:8c:43:4e:12:fd:9f:39:dd:ae:9a:d0:
ea:30:52:ef:22:90:bd:f5:9c:ba:fd:4b:7b:92:ff:b8:fb:f7:
dd:b4:90:6a:e3:04:56:27:16:62:a1:cb:9b:a5:b2:79:9a:a3:
eb:59:2a:fa:04:72:6f:b1:40:85:a2:d5:cb:6a:f1:f0:4a:3d:
32:08:f2:47:63:c6:83:93:ba:25:38:05:b9:0e:e3:4f:b7:b6:
b6:02:06:c7:10:1a:1f:a4:14:38:53:bc:a5:a3:47:ae:e3:c6:
ad:a2:14:f1:db:32:49:94:1f:9f:5b:d1:29:77:40:7e:74:56:
06:c6:f9:20:b7:1a:ec:49:7e:04:81:47:8f:8f:77:58:10:d7:
44:88:d0:18:2d:c0:6a:9c:ad:c2:a5:a0:f4:0f:b6:d7:fe:e9:
05:bf:57:74:76:11:95:34:c2:37:e5:94:27:84:13:24:de:c8:
83:5e:f6:01:92:43:6d:40:24:71:b0:18:4d:9b:21:67:0f:3b:
5e:90:34:cc:f8:56:35:5e:8c:b6:99:64:96:44:dc:93:c8:55:
f6:33:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:44 2026 by rpki-client