Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/W6xDj92QB_yTt67MOz4LRRk37bc.roa
File: W6xDj92QB_yTt67MOz4LRRk37bc.roa (raw, json)
Hash identifier: LxBOm9LqiQOWvpCTWjabQmnHLwm7xyywKss1rcgcfNA=
Subject key identifier: 5B:AC:43:8F:DD:90:07:FC:93:B7:AE:CC:3B:3E:0B:45:19:37:ED:B7
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A0B38E111172F715F1E2AEBFEC2B43468B
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/W6xDj92QB_yTt67MOz4LRRk37bc.roa
Signing time: Fri 18 Sep 2026 08:07:07 +0000
ROA not before: Fri 18 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43566
IP address blocks: 78.110.224.0/21 maxlen: 24
78.110.232.0/24 maxlen: 24
78.110.234.0/24 maxlen: 24
78.110.235.0/24 maxlen: 24
78.110.236.0/22 maxlen: 24
178.23.24.0/21 maxlen: 24
2a11:7f80::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:8e:11:11:72:f7:15:f1:e2:ae:bf:ec:2b:43:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Sep 18 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bac438fdd9007fc93b7aecc3b3e0b451937edb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:e3:9b:89:df:8a:f9:3b:55:49:09:02:6d:
46:ab:cc:a3:89:67:45:ae:9c:5c:28:e1:68:32:b3:
ed:44:11:96:ec:80:e1:a3:5c:79:e2:7f:fc:82:60:
04:9c:fd:49:3a:2a:6f:98:76:46:d4:f4:22:38:6b:
53:cc:fc:0e:5d:8d:fc:09:17:2e:6a:7e:28:26:58:
56:fc:32:bb:5b:40:e7:da:b4:76:3b:45:3d:57:ee:
93:69:0d:3f:8c:cd:04:4c:4a:d1:3b:d5:29:d8:9d:
59:69:42:1a:78:45:f6:73:c6:08:c8:a2:ba:6b:44:
f0:7a:56:87:6d:f5:40:03:aa:94:69:12:70:2a:b8:
d2:47:f7:1b:ad:f9:a6:13:ff:9d:03:e8:83:d0:5c:
4b:c3:23:3d:45:a2:5a:d2:ab:b7:6a:81:9f:ea:4a:
cc:ce:23:f0:88:9b:61:a2:4b:14:70:06:05:f7:5d:
47:b8:26:78:be:7a:27:e9:8e:96:f3:db:44:17:9b:
3f:fa:09:8e:33:f5:60:26:2e:fe:e8:10:28:cb:cf:
15:e6:41:da:34:ed:88:39:b5:06:a4:79:06:73:25:
53:a9:63:dd:8f:51:de:3e:e9:eb:bc:75:fb:15:87:
51:be:99:87:06:7d:01:2d:f4:3d:1f:74:ce:08:e2:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:43:8F:DD:90:07:FC:93:B7:AE:CC:3B:3E:0B:45:19:37:ED:B7
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/W6xDj92QB_yTt67MOz4LRRk37bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.224.0-78.110.232.255
78.110.234.0-78.110.239.255
178.23.24.0/21
IPv6:
2a11:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
67:de:f2:9f:8d:e4:ae:d3:46:d9:5f:c0:9c:14:96:18:95:17:
3f:32:a7:c6:e0:8d:b2:cd:dd:11:fa:2b:7d:3c:3c:6c:26:4a:
91:1a:28:09:48:e1:73:1f:b0:06:f2:a0:38:2e:53:73:da:91:
9e:75:3b:63:46:7c:04:be:d1:2d:11:1b:3b:24:2d:24:ae:65:
52:18:f2:13:38:93:46:5c:04:e4:b1:cb:58:e6:f3:f9:34:91:
f5:48:43:f2:20:d5:e6:81:08:77:9b:3a:f7:09:fd:e6:3c:82:
a1:81:50:d1:aa:eb:69:c4:25:c4:3c:c6:0f:24:be:5e:35:f1:
c6:38:ee:05:e3:d9:3d:6f:35:4b:e4:c9:97:fc:c2:e0:1b:14:
d8:44:59:72:67:1e:a2:64:78:9a:ba:c6:ad:f0:b6:6d:ed:36:
58:72:ed:a7:c2:94:84:9e:92:20:ff:1d:64:99:b5:b8:b7:24:
80:16:8b:f0:4b:d3:ef:23:5e:8e:7c:34:a2:44:a6:2b:d5:36:
f7:5f:a7:3f:7c:53:2b:52:0e:f2:93:33:36:51:22:fd:ed:2d:
bb:ba:21:02:e8:f6:b0:d9:57:37:3a:6c:e9:1f:e4:83:a2:29:
3b:31:78:28:fa:ab:b6:53:b8:70:13:d7:e5:de:20:a6:92:07:
1d:6e:74:f6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAaCzjhERcvcV8eKuv+wrQ0aLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2ViNDA1OTg3YTNhYThiYmU1OTlkOGVmNDY2M2M5MjQy
YTM0YjgwHhcNMjYwOTE4MDgwNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmFjNDM4ZmRkOTAwN2ZjOTNiN2FlY2MzYjNlMGI0NTE5MzdlZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmLjm4nfivk7VUkJAm1Gq8yjiWdF
rpxcKOFoMrPtRBGW7IDho1x54n/8gmAEnP1JOipvmHZG1PQiOGtTzPwOXY38CRcu
an4oJlhW/DK7W0Dn2rR2O0U9V+6TaQ0/jM0ETErRO9Up2J1ZaUIaeEX2c8YIyKK6
a0TwelaHbfVAA6qUaRJwKrjSR/cbrfmmE/+dA+iD0FxLwyM9RaJa0qu3aoGf6krM
ziPwiJthoksUcAYF911HuCZ4vnon6Y6W89tEF5s/+gmOM/VgJi7+6BAoy88V5kHa
NO2IObUGpHkGcyVTqWPdj1HePunrvHX7FYdRvpmHBn0BLfQ9H3TOCOIqtQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFFusQ4/dkAf8k7euzDs+C0UZN+23MB8GA1UdIwQY
MBaAFKPOtAWYejqou+WZ2O9GY8kkKjS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUt
NWRiODUxZDZmMDg2LzEvVzZ4RGo5MlFCX3lUdDY3TU96NExSUmszN2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUtNWRiODUxZDZmMDg2
LzEvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBAVObuAD
BABObugwDAMEAU5u6gMEBE5u4AMEA7IXGDANBAIAAjAHAwUAKhF/gDANBgkqhkiG
9w0BAQsFAAOCAQEAZ97yn43krtNG2V/AnBSWGJUXPzKnxuCNss3dEforfTw8bCZK
kRooCUjhcx+wBvKgOC5Tc9qRnnU7Y0Z8BL7RLREbOyQtJK5lUhjyEziTRlwE5LHL
WObz+TSR9UhD8iDV5oEId5s69wn95jyCoYFQ0arracQlxDzGDyS+XjXxxjjuBePZ
PW81S+TJl/zC4BsU2ERZcmceomR4mrrGrfC2be02WHLtp8KUhJ6SIP8dZJm1uLck
gBaL8EvT7yNejnw0okSmK9U291+nP3xTK1IO8pMzNlEi/e0tu7ohAuj2sNlXNzps
6R/kg6IpOzF4KPqrtlO4cBPX5d4gppIHHW509g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:58:38 2026 by rpki-client