Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/SILmdN_k0hAwwcd5aO58JpMMhcU.roa
File: SILmdN_k0hAwwcd5aO58JpMMhcU.roa (raw, json)
Hash identifier: nQR9MafvgRfhU+4mU9GSk9xhrq7Cg3nhVrjZkbbiQrI=
Subject key identifier: 48:82:E6:74:DF:E4:D2:10:30:C1:C7:79:68:EE:7C:26:93:0C:85:C5
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A1343F350068AE9CF9607B670C2F013201
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/SILmdN_k0hAwwcd5aO58JpMMhcU.roa
Signing time: Tue 13 Oct 2026 07:51:59 +0000
ROA not before: Tue 13 Oct 2026 07:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218711
IP address blocks: 78.110.224.0/21 maxlen: 24
78.110.232.0/24 maxlen: 24
78.110.234.0/24 maxlen: 24
78.110.235.0/24 maxlen: 24
78.110.236.0/22 maxlen: 24
178.23.24.0/21 maxlen: 24
178.23.27.0/24 maxlen: 24
178.23.28.0/24 maxlen: 24
178.23.29.0/24 maxlen: 24
2a11:7f80::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:3f:35:00:68:ae:9c:f9:60:7b:67:0c:2f:01:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Oct 13 07:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4882e674dfe4d21030c1c77968ee7c26930c85c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:b8:48:2a:fc:45:3b:e8:d1:96:e5:a4:4d:
5d:a1:3a:56:ea:c8:49:0e:a8:eb:20:ec:7a:fe:ef:
53:a2:c5:d2:14:1e:57:ed:9b:cb:e5:e2:76:ae:f9:
da:42:73:bb:43:58:e0:58:0d:04:2e:bd:e3:28:ce:
30:86:2f:ec:b0:65:a0:fb:19:90:b9:13:af:9d:9c:
26:5b:eb:40:0e:28:cc:9c:3a:58:96:b6:bb:29:8d:
a4:4f:63:a0:71:a3:6d:68:ba:04:f0:83:a4:28:22:
8f:7e:8e:a0:c5:cd:06:a3:a4:5a:32:73:a6:1b:63:
f7:ab:d0:ad:9a:f1:3f:b8:b4:81:72:21:07:12:e0:
bb:14:92:8e:1f:98:80:53:a6:8a:bd:36:46:fd:5c:
9c:f4:31:79:71:b8:c9:40:5f:08:c6:77:b0:1c:09:
f0:28:a0:4c:42:90:ea:79:61:e9:eb:65:50:8c:37:
98:e7:b8:e5:88:3b:ba:3e:8c:04:15:86:16:82:8f:
92:82:81:26:25:56:56:48:2e:36:7c:75:af:1b:5a:
0c:16:89:98:94:3e:44:91:02:f6:04:02:77:19:88:
98:62:13:c3:05:c8:ab:9c:24:e7:6b:9f:dd:d7:8a:
5f:ae:0a:b6:a3:16:4f:9d:b7:ed:3c:f5:72:2c:31:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:E6:74:DF:E4:D2:10:30:C1:C7:79:68:EE:7C:26:93:0C:85:C5
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/SILmdN_k0hAwwcd5aO58JpMMhcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.224.0-78.110.232.255
78.110.234.0-78.110.239.255
178.23.24.0/21
IPv6:
2a11:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
4d:bc:5a:5a:16:ed:18:3c:8f:01:40:6d:f0:da:4f:06:d1:84:
83:9a:8b:32:0e:3a:f5:af:1f:ca:df:5c:b7:f1:26:b4:5e:31:
a3:89:e6:37:7f:90:54:94:bc:a9:5f:a8:ef:77:f4:a5:d9:6c:
29:64:96:ca:3f:6b:d8:0b:39:ba:07:a8:15:b8:2b:03:1e:6a:
81:d0:31:25:bd:ca:d7:64:ac:7c:3a:7b:87:ba:96:e1:51:6c:
d3:a7:f1:c1:1d:18:0f:cc:23:3f:fa:45:46:ad:45:a2:1f:bb:
f1:75:c2:e7:2a:96:d3:cb:b7:51:50:1e:4a:d0:c5:d6:eb:56:
5c:57:f1:c9:30:32:4b:48:16:a8:06:b9:5e:62:92:3d:1a:77:
0e:e9:5f:68:9b:5a:b8:ce:1f:20:a7:a3:c9:08:c7:08:99:e4:
ae:1e:0e:e3:a9:a5:fa:06:1c:5e:0b:c5:3a:04:18:9c:13:8b:
3f:cd:e5:a4:b0:48:0f:9d:c2:04:2f:6b:e9:5d:84:e7:61:9a:
7b:dd:27:ee:fa:d1:50:a3:b1:3c:52:f2:84:84:11:85:97:36:
34:55:54:28:05:e4:ff:ce:b8:23:f2:f1:31:88:d7:11:43:d6:
4b:37:76:ec:1a:ce:5b:7f:72:4a:1e:e9:f2:f1:50:aa:a9:76:
2b:8e:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:58:26 2026 by rpki-client