Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/wN49OFQ5_N3IG3a5kiAO9am9dg8.roa
File: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (raw, json)
Hash identifier: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=
Subject key identifier: C0:DE:3D:38:54:39:FC:DD:C8:1B:76:B9:92:20:0E:F5:A9:BD:76:0F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 019C7051767401952E7AF74EFB80F3B0DCE3
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/wN49OFQ5_N3IG3a5kiAO9am9dg8.roa
Signing time: Wed 18 Feb 2026 10:35:12 +0000
ROA not before: Wed 18 Feb 2026 10:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210595
IP address blocks: 78.234.0.0/16 maxlen: 16
2a01:e08::/32 maxlen: 32
2a01:e08:100::/44 maxlen: 44
2a01:e08:500::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:51:76:74:01:95:2e:7a:f7:4e:fb:80:f3:b0:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Feb 18 10:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0de3d385439fcddc81b76b992200ef5a9bd760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:cc:44:05:ac:19:88:bb:ef:76:72:ce:fe:
25:69:89:ed:51:0d:73:3e:f9:10:5c:c4:97:12:59:
d2:7c:1a:25:28:0a:26:29:6c:d2:78:ec:db:63:ab:
a3:17:0a:90:fd:9c:44:07:2e:f6:7c:b3:f1:19:3e:
67:14:07:07:ae:a1:66:ec:60:0a:a4:90:a9:60:33:
56:59:9e:2a:4e:52:b2:b9:5d:c4:be:de:76:e9:16:
c4:3c:48:31:c2:b0:e3:c4:3c:7f:4d:6c:d2:fe:43:
f8:cc:02:02:eb:20:9f:25:aa:74:d1:21:30:1a:2b:
4c:70:a9:4d:de:e1:77:f1:3f:3d:9c:23:ef:bd:22:
a1:d1:11:70:74:94:7c:3a:cc:f6:00:8e:eb:ee:7d:
1e:fc:24:6f:c9:0d:11:30:e6:44:2b:03:d1:55:1c:
c8:48:57:5d:51:d9:65:29:b1:8c:38:be:1c:bf:95:
c8:36:53:16:09:dd:b6:14:44:61:cb:b0:37:4e:c7:
42:d2:c9:8d:dc:5d:1c:ad:df:20:c0:31:57:90:8b:
00:f8:2f:b4:e6:a5:b6:fc:4e:0f:35:b3:94:90:e1:
8f:fa:3a:ba:1b:83:7e:bd:6f:93:7a:05:10:66:a2:
03:e8:dd:43:4d:52:52:f8:84:77:65:96:3a:d2:5b:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:3D:38:54:39:FC:DD:C8:1B:76:B9:92:20:0E:F5:A9:BD:76:0F
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/wN49OFQ5_N3IG3a5kiAO9am9dg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.234.0.0/16
IPv6:
2a01:e08::/32
Signature Algorithm: sha256WithRSAEncryption
51:c3:43:37:1f:65:e2:37:54:66:e5:27:66:d2:2f:75:e6:47:
aa:76:67:38:1c:87:ec:02:64:47:db:42:1c:c9:76:00:fb:57:
26:bb:be:22:a4:96:80:03:63:1f:4a:50:a6:54:27:e6:0a:c4:
b4:02:dd:64:83:7e:3a:88:39:ab:a6:de:9f:c2:43:ba:f8:72:
c4:73:e4:a9:b2:53:9f:00:14:3f:88:c8:e1:f4:90:0a:21:f1:
1a:f3:3a:70:98:0c:ec:f9:97:9f:7a:57:e6:52:ed:be:34:d4:
bb:18:0d:59:5d:13:a4:44:09:43:5b:af:d2:06:f4:8d:73:82:
de:95:49:b6:f5:2f:53:b1:6e:eb:e0:e0:16:98:0f:fc:1c:18:
5d:b3:99:54:47:a9:42:4a:db:72:f3:c9:df:19:6a:21:24:c0:
64:33:e5:22:30:0a:1c:26:fe:b6:d8:2b:ef:a5:e7:03:4a:44:
d2:37:fb:a5:1f:cf:ce:39:66:35:cc:39:e4:2d:9b:d1:78:88:
7e:5b:42:72:fe:a6:ca:b9:77:cf:8e:af:c2:fa:ac:c7:3f:ab:
6a:ab:7b:e9:a7:1b:50:d4:29:6a:cc:ed:cc:2d:7b:50:9d:a8:
53:f4:c0:49:df:de:8f:8e:34:32:3a:c4:46:aa:f3:49:ba:bb:
fd:05:15:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:13 2026 by rpki-client