Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/K3ua2RrqGcbdB2SIo8hldBAl3_E.roa
File: K3ua2RrqGcbdB2SIo8hldBAl3_E.roa (raw, json)
Hash identifier: 3r2KWl0kTZ/mtXETApfCg3qAcK7g4mRubdUIUTx0FZU=
Subject key identifier: 2B:7B:9A:D9:1A:EA:19:C6:DD:07:64:88:A3:C8:65:74:10:25:DF:F1
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019D3DFC992B4DC8AC88AF8E397AF8032E7E
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/K3ua2RrqGcbdB2SIo8hldBAl3_E.roa
Signing time: Mon 30 Mar 2026 09:04:17 +0000
ROA not before: Mon 30 Mar 2026 09:04:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48434
IP address blocks: 78.41.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:fc:99:2b:4d:c8:ac:88:af:8e:39:7a:f8:03:2e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Mar 30 09:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b7b9ad91aea19c6dd076488a3c865741025dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:30:3b:a1:eb:97:01:6d:1b:27:34:c8:57:
81:8b:ee:90:e7:22:3d:0b:8d:cb:80:7b:52:bf:c1:
5d:e8:6a:69:d9:50:17:41:29:34:08:70:da:aa:a6:
ac:0d:26:5a:bf:19:f1:c4:3b:3e:94:c2:2f:88:c5:
70:03:a7:90:5a:72:dc:e4:cd:60:43:c1:33:cf:1c:
65:37:6a:90:67:f1:56:e6:e8:b7:2b:ab:ca:20:6b:
fd:2c:3f:9c:01:a6:af:71:a2:ed:e7:ab:9e:a3:69:
fb:15:76:a0:b4:d4:9f:57:38:d5:71:16:07:30:5a:
87:45:90:04:50:fb:7b:23:63:45:85:78:f8:f2:d8:
5d:78:0f:6c:c8:3e:b1:52:d4:2c:a1:75:51:fc:4c:
5d:b7:db:c4:e4:85:55:a9:60:93:e3:e8:30:a5:d3:
d1:bb:f5:3f:88:26:a4:bb:d3:01:2e:73:c6:ea:4c:
38:1a:64:ce:5c:36:5e:b1:98:63:96:c6:c5:bd:84:
55:70:cb:7d:a1:ff:d5:71:f0:76:36:ab:a1:45:68:
43:a3:25:89:66:1d:e9:7d:6f:60:6c:f4:ff:85:a0:
5e:04:8a:16:41:d6:07:d4:b8:5c:a0:01:ca:c8:1e:
c4:d0:94:9b:2c:66:f9:60:1a:11:48:df:c8:91:c1:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:9A:D9:1A:EA:19:C6:DD:07:64:88:A3:C8:65:74:10:25:DF:F1
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/K3ua2RrqGcbdB2SIo8hldBAl3_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.61.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0b:02:1f:25:81:67:4c:87:e9:0a:c3:6c:e3:6a:52:fe:62:
f1:88:23:2e:e7:0e:a3:91:d2:f3:67:c8:67:55:81:e0:81:91:
7d:69:1b:d1:58:3e:17:09:34:99:5b:71:fd:ae:93:f0:e1:b2:
35:c0:e6:d5:29:d6:09:1d:f5:55:11:e0:40:bb:ee:ba:e1:73:
c5:17:3b:1f:0f:97:30:eb:fa:12:7d:9d:0f:51:f6:91:6a:31:
f3:c8:4b:d2:2a:70:69:0d:61:64:da:80:64:13:12:13:14:2c:
4b:75:db:7b:6c:04:b1:2d:d6:20:de:8e:b1:a5:b2:cd:6b:21:
b4:36:08:35:b3:a4:a9:87:ef:d1:c4:cc:2e:56:9b:0b:f8:bd:
b6:19:65:7a:13:3a:a0:74:69:e5:73:f7:c1:15:3f:f7:9f:4c:
c9:85:6c:21:34:0d:12:ee:a8:8a:22:2d:ca:4c:99:1a:a4:18:
e3:b3:a9:ef:c5:f3:59:47:13:7b:77:c2:ba:0f:29:a5:e1:3b:
a7:00:73:b6:37:d4:ff:b5:e1:86:19:df:1c:68:11:45:e5:ca:
2a:7f:13:d7:41:e3:fa:bc:c4:b2:a4:87:55:33:f6:50:d3:ee:
4a:92:f1:32:12:fd:7a:ee:84:a8:20:eb:2b:ff:d0:39:b9:03:
6b:e4:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:20 2026 by rpki-client