Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VhwJBdM6pLEZJ8spsviXzRlvY2U.roa
File: VhwJBdM6pLEZJ8spsviXzRlvY2U.roa (raw, json)
Hash identifier: gnOQVrfQZgs3zOTLQieybQtJJJPzc2DIcMg523Hda60=
Subject key identifier: 56:1C:09:05:D3:3A:A4:B1:19:27:CB:29:B2:F8:97:CD:19:6F:63:65
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F8DB237E9051E0CF7C294C77FC322B4AE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VhwJBdM6pLEZJ8spsviXzRlvY2U.roa
Signing time: Thu 23 Jul 2026 06:38:14 +0000
ROA not before: Thu 23 Jul 2026 06:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 78.17.94.0/24 maxlen: 24
78.17.170.0/23 maxlen: 23
78.17.178.0/23 maxlen: 23
89.125.31.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.166.0/23 maxlen: 23
89.125.174.0/23 maxlen: 23
104.143.202.0/24 maxlen: 24
140.225.192.0/24 maxlen: 24
140.225.198.0/23 maxlen: 23
140.225.206.0/23 maxlen: 23
140.225.212.0/23 maxlen: 23
140.225.214.0/24 maxlen: 24
153.76.198.0/23 maxlen: 23
153.76.202.0/23 maxlen: 23
153.76.212.0/23 maxlen: 23
153.76.214.0/23 maxlen: 23
153.76.216.0/23 maxlen: 23
153.76.221.0/24 maxlen: 24
162.35.224.0/23 maxlen: 23
162.35.242.0/23 maxlen: 23
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:b2:37:e9:05:1e:0c:f7:c2:94:c7:7f:c3:22:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 23 06:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=561c0905d33aa4b11927cb29b2f897cd196f6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:26:43:25:d4:e6:7f:6f:48:58:4e:41:54:
3f:01:65:8b:76:e7:96:4d:e8:e4:1e:f5:8e:69:ac:
cc:1d:ee:7c:09:d4:c1:bf:97:6d:dc:30:7a:b0:e1:
16:8a:89:67:59:47:c5:b4:71:c6:b6:e5:d3:37:96:
e2:06:fb:10:c7:9b:a6:44:5a:a1:8b:16:d6:09:57:
a1:7c:d1:70:87:d6:d4:b2:c8:da:9a:9d:fd:32:c2:
d4:91:34:1b:7a:20:03:c1:b9:38:aa:0a:a2:11:3d:
20:ae:d0:d4:91:a1:11:82:2a:82:92:b7:7b:bf:f0:
5e:18:9f:19:fb:78:2e:30:6e:f0:ac:35:c0:bd:f2:
60:95:9b:4a:ae:66:b5:5c:29:a3:25:b3:b5:49:08:
f1:85:ef:a1:26:62:f6:47:74:88:7c:21:68:45:5b:
1f:d8:c9:f1:6e:85:08:ea:bd:af:d6:f0:de:23:c8:
89:d9:17:20:b4:aa:02:d1:5f:2e:8f:80:e0:3f:2f:
27:1d:e9:26:fd:8c:f2:65:ec:e3:16:15:8e:d9:d1:
bd:37:00:1b:f5:7b:f0:ec:a8:bf:57:42:20:84:ff:
e4:71:01:54:07:a9:f6:89:18:18:cf:73:ee:32:7a:
bb:e3:99:c9:29:08:a9:ce:82:29:ff:0b:36:3a:ba:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:09:05:D3:3A:A4:B1:19:27:CB:29:B2:F8:97:CD:19:6F:63:65
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VhwJBdM6pLEZJ8spsviXzRlvY2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.94.0/24
78.17.170.0/23
78.17.178.0/23
89.125.31.0/24
89.125.143.0/24
89.125.166.0/23
89.125.174.0/23
104.143.202.0/24
140.225.192.0/24
140.225.198.0/23
140.225.206.0/23
140.225.212.0-140.225.214.255
153.76.198.0/23
153.76.202.0/23
153.76.212.0-153.76.217.255
153.76.221.0/24
162.35.224.0/23
162.35.242.0-162.35.245.255
167.17.32.0/23
167.17.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:6a:9a:46:b9:2e:db:f5:b5:cc:d1:0f:34:ec:c3:c2:a2:f8:
9a:43:91:bf:d6:35:cb:14:7d:b5:bc:bf:83:e4:7a:db:9a:4b:
93:73:e4:d9:1a:94:d2:5a:c7:c9:c0:7d:31:10:77:ef:db:1c:
d7:67:df:fc:e0:fc:e3:9a:eb:e7:c8:ba:01:d4:a7:f9:17:23:
2d:90:e0:2b:f5:d5:40:bb:04:a9:30:e8:fa:1d:dc:9d:71:43:
b8:81:8b:64:42:26:94:ae:c0:97:f1:6c:71:7b:5b:50:a4:21:
43:38:a2:69:09:75:f2:8e:8b:8b:64:d4:62:26:a9:ef:01:83:
f6:c6:6f:10:c8:ea:32:c7:2a:d4:c7:31:ed:af:61:0f:ee:f0:
81:c7:04:17:3c:d0:1b:8d:88:5d:50:37:eb:59:88:64:49:c2:
eb:9f:5b:c9:4a:b6:81:bc:9e:d1:d8:dc:66:41:75:ad:c6:35:
16:be:f2:af:db:ab:51:97:7d:e7:f9:f6:25:17:7b:55:29:7f:
f1:72:c6:bd:75:7d:48:ef:4d:c3:48:8d:ea:7e:36:21:9e:21:
3c:75:84:cc:05:dc:b8:dd:96:e8:4c:be:41:7d:da:2b:90:1f:
07:9f:cb:41:e5:26:8a:05:14:97:b5:62:93:f9:8b:33:37:a5:
18:a0:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:06 2026 by rpki-client