Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wOZd7BCIWbQGY2Ws5T8VekkEGfw.roa
File: wOZd7BCIWbQGY2Ws5T8VekkEGfw.roa (raw, json)
Hash identifier: wuxqGxglq1VITtbbNuAn9FXT9eClu0/frtaKOF+Zw58=
Subject key identifier: C0:E6:5D:EC:10:88:59:B4:06:63:65:AC:E5:3F:15:7A:49:04:19:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D6C5FDBCC2AB5FEBAA5FDA2AF9FD4C08
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wOZd7BCIWbQGY2Ws5T8VekkEGfw.roa
Signing time: Fri 25 Sep 2026 04:14:54 +0000
ROA not before: Fri 25 Sep 2026 04:14:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 78.17.179.0/24 maxlen: 24
89.125.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:c5:fd:bc:c2:ab:5f:eb:aa:5f:da:2a:f9:fd:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 04:14:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0e65dec108859b4066365ace53f157a490419fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:8a:ea:cc:f7:65:87:b9:1c:4c:68:0a:c5:
fc:3b:3e:cb:67:32:20:12:92:8b:0c:71:0a:13:7a:
55:3f:46:1b:31:90:70:52:d2:40:2a:ce:32:4e:8a:
c1:80:2e:d8:d5:6e:ef:43:6d:60:e2:a1:9f:cc:b5:
6b:6b:3e:72:32:21:e2:d5:6a:59:26:25:97:44:76:
3f:b6:09:a0:53:9a:9c:77:27:1a:89:b5:00:a7:c7:
c3:a6:f2:36:e1:fe:70:e6:11:20:39:cf:23:38:24:
74:ab:49:b5:12:e8:e7:52:ff:07:7f:b9:f2:60:97:
b7:aa:a4:f1:c4:cf:31:c2:82:df:82:2b:2b:46:6b:
94:ec:0b:b0:0a:7c:a9:73:a3:bf:34:05:50:6b:07:
94:2b:c6:13:de:cc:77:cd:8e:aa:51:d6:1c:bc:c0:
31:ac:89:62:26:7d:64:61:62:9a:6a:bf:19:aa:9f:
a4:0b:62:a7:19:19:58:58:a2:f2:e6:50:60:de:bf:
e9:08:da:8b:63:9a:05:28:08:f2:cd:5f:a1:8f:01:
67:8b:86:30:9f:c2:3c:d4:c4:bb:bb:fd:76:7d:26:
ee:ac:04:de:a4:a0:97:84:a2:6a:40:d8:10:7f:93:
8a:34:2d:2f:b5:45:23:cb:d2:c6:5d:b4:9c:d6:4b:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:5D:EC:10:88:59:B4:06:63:65:AC:E5:3F:15:7A:49:04:19:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wOZd7BCIWbQGY2Ws5T8VekkEGfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.179.0/24
89.125.193.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c1:16:cf:7b:8c:d5:f4:ea:72:13:58:9e:55:53:8e:7b:14:
e9:4a:3a:9c:88:dd:5e:ee:c3:82:79:99:4d:d4:b2:2e:2c:7d:
97:ce:c8:98:f7:6f:5c:47:a6:d7:e7:27:4c:20:3e:d2:54:c5:
97:31:86:5d:16:0e:f8:09:98:91:23:24:ab:88:58:79:ab:36:
39:c6:3b:80:91:04:f6:f7:8f:47:9e:b8:ce:24:7c:9f:af:27:
5d:38:05:b0:e8:9a:94:36:76:28:e1:7c:08:2e:5e:c6:88:33:
5c:d2:39:b9:df:2f:ea:49:8d:7f:d3:de:f7:a2:01:db:d7:dd:
6f:cd:5a:16:d0:05:15:fa:aa:77:c5:b1:7b:9a:74:6e:02:91:
ec:d5:29:12:f0:d3:1d:d9:93:0f:9f:e4:39:57:86:04:a4:0b:
34:90:5a:86:65:0c:56:ab:be:ee:7e:24:d0:61:c3:f0:d9:28:
30:95:b0:c7:83:fd:61:f6:a2:f4:9a:d8:9d:87:e4:be:59:4f:
cf:08:84:13:1f:41:e8:1a:5f:1e:48:f3:b6:f3:d2:a8:41:aa:
c2:52:31:70:8d:56:8f:1c:03:ff:31:ab:c5:7f:75:cd:9b:69:
31:16:cf:63:d2:6a:ae:4b:9a:9a:c6:48:14:5b:00:96:d1:77:
07:64:a0:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDWxf28wqtf66pf2ir5/UwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTI1MDQxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGU2NWRlYzEwODg1OWI0MDY2MzY1YWNlNTNmMTU3YTQ5MDQxOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEmK6sz3ZYe5HExoCsX8Oz7LZzIg
EpKLDHEKE3pVP0YbMZBwUtJAKs4yTorBgC7Y1W7vQ21g4qGfzLVraz5yMiHi1WpZ
JiWXRHY/tgmgU5qcdycaibUAp8fDpvI24f5w5hEgOc8jOCR0q0m1EujnUv8Hf7ny
YJe3qqTxxM8xwoLfgisrRmuU7AuwCnypc6O/NAVQaweUK8YT3sx3zY6qUdYcvMAx
rIliJn1kYWKaar8Zqp+kC2KnGRlYWKLy5lBg3r/pCNqLY5oFKAjyzV+hjwFni4Yw
n8I81MS7u/12fSburATepKCXhKJqQNgQf5OKNC0vtUUjy9LGXbSc1kv+OQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDmXewQiFm0BmNlrOU/FXpJBBn8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd09aZDdCQ0lXYlFHWTJXczVUOFZla2tFR2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAThGzAwQA
WX3BMA0GCSqGSIb3DQEBCwUAA4IBAQBVwRbPe4zV9OpyE1ieVVOOexTpSjqciN1e
7sOCeZlN1LIuLH2XzsiY929cR6bX5ydMID7SVMWXMYZdFg74CZiRIySriFh5qzY5
xjuAkQT2949HnrjOJHyfryddOAWw6JqUNnYo4XwILl7GiDNc0jm53y/qSY1/0973
ogHb191vzVoW0AUV+qp3xbF7mnRuApHs1SkS8NMd2ZMPn+Q5V4YEpAs0kFqGZQxW
q77ufiTQYcPw2SgwlbDHg/1h9qL0mtidh+S+WU/PCIQTH0HoGl8eSPO289KoQarC
UjFwjVaPHAP/MavFf3XNm2kxFs9j0mquS5qaxkgUWwCW0XcHZKDy
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:46:10 2026 by rpki-client