Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/LKjf7o_3WUfKZdN019fUVQORc-s.roa
File: LKjf7o_3WUfKZdN019fUVQORc-s.roa (raw, json)
Hash identifier: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=
Subject key identifier: 2C:A8:DF:EE:8F:F7:59:47:CA:65:D3:74:D7:D7:D4:55:03:91:73:EB
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A076A3F814605813089BDB271093534025
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/LKjf7o_3WUfKZdN019fUVQORc-s.roa
Signing time: Sun 06 Sep 2026 12:14:12 +0000
ROA not before: Sun 06 Sep 2026 12:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 78.231.0.0/18 maxlen: 24
78.231.64.0/18 maxlen: 24
78.231.128.0/18 maxlen: 24
78.231.192.0/18 maxlen: 24
78.235.32.0/19 maxlen: 24
78.235.64.0/19 maxlen: 24
78.235.96.0/19 maxlen: 24
78.235.128.0/19 maxlen: 24
78.235.160.0/19 maxlen: 24
78.235.192.0/19 maxlen: 24
78.235.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:a3:f8:14:60:58:13:08:9b:db:27:10:93:53:40:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 6 12:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ca8dfee8ff75947ca65d374d7d7d455039173eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:2d:16:97:9d:35:2a:9e:65:01:0c:1e:1f:
52:7c:31:96:e5:8d:c7:ae:b9:77:d7:c1:a8:41:10:
f1:4b:f5:a8:f4:2e:1f:da:ff:c7:22:be:3f:09:99:
2e:2b:8a:0d:76:7d:1f:fc:7f:17:9d:b0:e1:89:02:
a5:c2:b5:70:a7:38:e1:29:a1:fb:78:20:16:be:c3:
a3:ba:64:2c:70:50:b5:eb:5b:54:cc:b9:93:61:77:
18:eb:22:8e:6b:da:5b:3c:b6:a5:63:ef:d9:29:09:
ac:c1:0b:60:3d:02:33:21:7a:bc:69:76:ca:79:ed:
28:c2:94:9b:60:78:ae:ae:97:2f:2c:bf:a1:ab:4f:
df:98:98:67:c1:4f:78:4c:8d:fe:70:82:af:80:db:
1e:f8:1f:39:4a:69:d6:fc:fc:25:bf:21:e8:1b:b3:
e1:99:47:56:b1:3f:d5:11:fc:38:a6:1c:1d:21:52:
ac:6e:37:ec:5e:47:f7:0e:05:36:f6:17:49:ba:0f:
ac:56:ed:39:40:52:78:1d:52:20:2b:d4:c8:ed:46:
9a:28:18:c9:8d:15:37:1e:b7:b9:ed:fd:9d:fe:28:
41:be:91:e5:44:60:2e:68:33:15:a5:b9:98:df:c0:
49:d2:2d:ae:4e:b4:6c:3f:91:5b:36:3d:96:d9:50:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:DF:EE:8F:F7:59:47:CA:65:D3:74:D7:D7:D4:55:03:91:73:EB
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/LKjf7o_3WUfKZdN019fUVQORc-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.231.0.0/16
78.235.32.0-78.235.255.255
Signature Algorithm: sha256WithRSAEncryption
05:eb:41:cc:1c:47:d4:69:bc:14:44:6c:ce:b1:f8:11:74:04:
82:65:0f:64:e8:ea:95:3c:4f:24:14:a9:b1:a9:2d:0c:93:ef:
a4:2f:66:fd:70:f4:bf:63:7f:68:90:ff:b7:db:09:a0:68:2e:
0a:a6:04:46:ac:64:45:a7:e7:f3:e0:9d:01:31:85:38:f1:23:
45:ab:4a:01:65:89:e6:72:f2:fb:21:2e:c1:82:d7:fc:4f:bd:
81:16:d5:9d:36:ff:3c:4c:42:fb:38:c5:d6:82:5a:63:42:fb:
a2:17:ce:b3:94:31:84:63:e3:a1:8d:42:7c:3d:43:8d:08:00:
da:16:84:2f:4f:87:94:61:76:02:20:aa:9e:6e:94:b7:b8:19:
9d:5b:3d:3b:c4:05:9b:6a:e6:b4:ba:a7:ae:3e:b7:9c:46:f6:
4c:aa:d4:b9:a7:a5:c4:9f:ea:71:6d:80:50:ba:4d:6f:7c:88:
9d:f3:45:66:ea:cc:63:a9:bc:cd:25:5f:5d:4e:c1:3b:cf:46:
dc:15:d0:95:a1:7b:0b:41:3f:59:a8:32:a2:2f:82:aa:17:dd:
26:6d:f8:db:9c:a9:82:00:5b:a9:7e:91:95:f7:4f:a8:e2:c7:
1c:ba:5b:95:10:74:4d:93:2c:b5:30:25:9a:3c:08:36:f8:82:
68:37:06:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB2o/gUYFgTCJvbJxCTU0AlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwOTA2MTIxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2E4ZGZlZThmZjc1OTQ3Y2E2NWQzNzRkN2Q3ZDQ1NTAzOTE3M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCctFpedNSqeZQEMHh9SfDGW5Y3H
rrl318GoQRDxS/Wo9C4f2v/HIr4/CZkuK4oNdn0f/H8XnbDhiQKlwrVwpzjhKaH7
eCAWvsOjumQscFC161tUzLmTYXcY6yKOa9pbPLalY+/ZKQmswQtgPQIzIXq8aXbK
ee0owpSbYHiurpcvLL+hq0/fmJhnwU94TI3+cIKvgNse+B85SmnW/PwlvyHoG7Ph
mUdWsT/VEfw4phwdIVKsbjfsXkf3DgU29hdJug+sVu05QFJ4HVIgK9TI7UaaKBjJ
jRU3Hre57f2d/ihBvpHlRGAuaDMVpbmY38BJ0i2uTrRsP5FbNj2W2VDYTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCyo3+6P91lHymXTdNfX1FUDkXPrMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvTEtqZjdvXzNXVWZLWmROMDE5ZlVWUU9SYy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMATucwCwME
BU7rIAMDAk7oMA0GCSqGSIb3DQEBCwUAA4IBAQAF60HMHEfUabwURGzOsfgRdASC
ZQ9k6OqVPE8kFKmxqS0Mk++kL2b9cPS/Y39okP+32wmgaC4KpgRGrGRFp+fz4J0B
MYU48SNFq0oBZYnmcvL7IS7Bgtf8T72BFtWdNv88TEL7OMXWglpjQvuiF86zlDGE
Y+OhjUJ8PUONCADaFoQvT4eUYXYCIKqebpS3uBmdWz07xAWbaua0uqeuPrecRvZM
qtS5p6XEn+pxbYBQuk1vfIid80Vm6sxjqbzNJV9dTsE7z0bcFdCVoXsLQT9ZqDKi
L4KqF90mbfjbnKmCAFupfpGV90+o4scculuVEHRNkyy1MCWaPAg2+IJoNwbQ
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:55 2026 by rpki-client