Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9PqkEGRCIk2yYfzY26gLFkQ-8js.roa
File: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (raw, json)
Hash identifier: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=
Subject key identifier: F4:FA:A4:10:64:42:22:4D:B2:61:FC:D8:DB:A8:0B:16:44:3E:F2:3B
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A076A3F8E642EEAF0A23CE747A8FD57229
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9PqkEGRCIk2yYfzY26gLFkQ-8js.roa
Signing time: Sun 06 Sep 2026 12:14:12 +0000
ROA not before: Sun 06 Sep 2026 12:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 78.231.0.0/18 maxlen: 24
78.231.64.0/18 maxlen: 24
78.231.128.0/18 maxlen: 24
78.231.192.0/18 maxlen: 24
78.235.32.0/19 maxlen: 24
78.235.64.0/19 maxlen: 24
78.235.96.0/19 maxlen: 24
78.235.128.0/19 maxlen: 24
78.235.160.0/19 maxlen: 24
78.235.192.0/19 maxlen: 24
78.235.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:a3:f8:e6:42:ee:af:0a:23:ce:74:7a:8f:d5:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 6 12:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4faa4106442224db261fcd8dba80b16443ef23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:2f:00:6b:44:f4:2d:80:b4:b6:b5:d6:55:
7e:5a:17:1c:d4:6f:d4:6f:fa:b7:e5:3c:1d:08:9f:
e1:d8:37:3c:34:01:fc:e6:21:a0:0b:37:13:a7:d7:
02:ef:fd:68:a0:33:73:b3:48:75:4f:c6:0a:6e:3e:
57:5b:21:b2:4f:ac:a4:57:34:2e:7c:29:1a:6d:de:
ad:02:41:5e:b5:b7:f6:11:6c:c8:be:74:f0:cb:4f:
64:38:02:fb:82:e1:a6:8d:89:6c:f6:dd:2e:e3:dc:
1d:27:3d:25:ea:3e:93:98:54:f5:c7:e5:df:41:ff:
4a:be:7b:77:06:91:ce:08:a3:52:37:fc:a1:48:21:
c5:da:e5:bf:ce:c4:60:0b:a5:ea:c6:63:f9:ac:2e:
f5:8f:42:81:12:ec:11:35:64:b0:5d:2c:fe:9e:05:
09:03:c7:0f:c1:e0:14:cc:6d:3e:72:03:5b:28:c5:
47:30:50:1e:bc:fd:c0:a0:73:9e:02:45:64:cf:c9:
bf:98:fd:22:f1:71:9a:04:61:8d:8a:b9:5c:c1:35:
cf:1a:c7:04:a2:36:13:a8:d6:20:40:37:aa:b9:76:
f9:e0:79:0a:7c:c7:21:b9:23:4d:b4:e2:9e:ca:f2:
d1:ce:ee:b6:92:83:f3:f3:03:e4:a5:c0:48:04:05:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:A4:10:64:42:22:4D:B2:61:FC:D8:DB:A8:0B:16:44:3E:F2:3B
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9PqkEGRCIk2yYfzY26gLFkQ-8js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.231.0.0/16
78.235.32.0-78.235.255.255
Signature Algorithm: sha256WithRSAEncryption
52:0d:bd:6b:30:bb:1d:38:84:c2:c5:81:49:c2:83:18:72:c6:
8b:d7:09:19:45:80:90:a2:be:94:6c:d8:62:79:f4:c7:8b:e0:
f1:1a:1b:74:ed:d4:98:b9:f6:6f:46:c5:fc:89:f6:fc:04:4b:
e5:5a:f1:ce:3a:d2:c1:cd:c5:fb:c6:dd:9b:76:25:32:51:7b:
35:41:a7:12:b2:c1:85:bd:2a:ac:77:c0:4d:38:fd:15:1f:31:
ef:37:b0:d0:01:5a:af:c9:6b:1d:d8:d1:7a:fb:08:d2:11:82:
78:b6:f0:19:45:65:fd:d7:82:22:df:8e:d9:63:6b:e4:db:12:
3c:9a:a5:94:54:df:18:b1:bf:a5:24:41:6e:a3:92:60:f8:17:
6b:19:f8:0d:ba:1a:4b:64:ca:57:88:6a:f1:f9:88:0b:d2:28:
91:58:cb:e9:c3:db:d4:7a:b3:3f:ae:bc:09:b5:b3:d3:e3:27:
7c:83:f9:58:ab:f5:87:3c:0d:ed:51:34:e1:2f:11:2b:65:db:
92:c8:39:00:e0:b0:50:c0:71:e6:59:da:6a:82:ea:7c:9e:96:
18:f5:4e:f7:39:97:65:06:b2:d2:cf:f7:62:a5:b1:ea:98:af:
fd:66:e5:b8:47:02:99:35:d0:81:37:46:d5:12:ed:5f:61:db:
72:59:a7:13
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB2o/jmQu6vCiPOdHqP1XIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwOTA2MTIxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGZhYTQxMDY0NDIyMjRkYjI2MWZjZDhkYmE4MGIxNjQ0M2VmMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+8vAGtE9C2AtLa11lV+Whcc1G/U
b/q35TwdCJ/h2Dc8NAH85iGgCzcTp9cC7/1ooDNzs0h1T8YKbj5XWyGyT6ykVzQu
fCkabd6tAkFetbf2EWzIvnTwy09kOAL7guGmjYls9t0u49wdJz0l6j6TmFT1x+Xf
Qf9Kvnt3BpHOCKNSN/yhSCHF2uW/zsRgC6XqxmP5rC71j0KBEuwRNWSwXSz+ngUJ
A8cPweAUzG0+cgNbKMVHMFAevP3AoHOeAkVkz8m/mP0i8XGaBGGNirlcwTXPGscE
ojYTqNYgQDequXb54HkKfMchuSNNtOKeyvLRzu62koPz8wPkpcBIBAXwpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPT6pBBkQiJNsmH82NuoCxZEPvI7MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvOVBxa0VHUkNJazJ5WWZ6WTI2Z0xGa1EtOGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMATucwCwME
BU7rIAMDAk7oMA0GCSqGSIb3DQEBCwUAA4IBAQBSDb1rMLsdOITCxYFJwoMYcsaL
1wkZRYCQor6UbNhiefTHi+DxGht07dSYufZvRsX8ifb8BEvlWvHOOtLBzcX7xt2b
diUyUXs1QacSssGFvSqsd8BNOP0VHzHvN7DQAVqvyWsd2NF6+wjSEYJ4tvAZRWX9
14Ii347ZY2vk2xI8mqWUVN8Ysb+lJEFuo5Jg+BdrGfgNuhpLZMpXiGrx+YgL0iiR
WMvpw9vUerM/rrwJtbPT4yd8g/lYq/WHPA3tUTThLxErZduSyDkA4LBQwHHmWdpq
gup8npYY9U73OZdlBrLSz/dipbHqmK/9ZuW4RwKZNdCBN0bVEu1fYdtyWacT
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:51 2026 by rpki-client