Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/47NmL-owZnCv7b48I3BZdXLeC6I.roa
File: 47NmL-owZnCv7b48I3BZdXLeC6I.roa (raw, json)
Hash identifier: 2r4+rvzpQHT2sTCtsSf0XCU5hyxF6MsSPvh70V2zWnE=
Subject key identifier: E3:B3:66:2F:EA:30:66:70:AF:ED:BE:3C:23:70:59:75:72:DE:0B:A2
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A1315779B2AB8A75326D51B4D958E10FE8
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/47NmL-owZnCv7b48I3BZdXLeC6I.roa
Signing time: Mon 12 Oct 2026 18:19:38 +0000
ROA not before: Mon 12 Oct 2026 18:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213382
IP address blocks: 78.108.119.0/24 maxlen: 24
185.165.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:57:79:b2:ab:8a:75:32:6d:51:b4:d9:58:e1:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 12 18:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3b3662fea306670afedbe3c2370597572de0ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:8a:44:f3:68:c6:cc:ca:19:3c:ea:a4:ec:
90:6e:10:05:01:ba:37:a0:5d:4e:95:10:ed:49:d9:
16:5f:70:ef:65:0a:23:15:6e:d8:5c:54:cc:da:43:
75:56:19:f2:9b:d6:69:0b:14:1c:d1:e9:4b:6e:fc:
e2:a5:a4:c2:04:dc:d1:63:a9:5f:07:31:58:70:d7:
73:2b:ed:36:c0:5b:11:06:01:3d:ac:c0:20:df:64:
f0:f2:9c:ef:f2:c6:c0:75:4e:fc:2d:bb:4b:c6:71:
9a:1a:9e:21:18:83:c2:d6:c4:eb:54:fd:d6:b7:fd:
63:48:c4:80:f8:08:d8:50:2f:e3:83:f8:4a:a9:1d:
fc:c8:5f:09:3f:43:14:dd:8d:22:dc:e0:fd:bb:d2:
c3:6f:3c:32:b1:99:0c:8d:99:41:ca:ff:bc:5f:7e:
e5:96:cf:fa:2f:09:51:4d:48:e1:ff:14:71:76:e9:
ea:0d:23:9a:9c:ad:8a:4e:cf:ba:e2:67:d4:4d:f1:
23:1c:7a:6f:3c:4d:b9:c0:db:bf:bd:e6:c2:09:3b:
6c:26:b9:89:fe:02:03:35:f3:a9:84:a9:db:88:23:
dc:8a:a1:83:da:c1:3c:21:f0:a1:36:2f:8f:5e:e8:
89:91:e6:96:eb:a2:cb:03:71:e2:79:4a:9f:85:35:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:66:2F:EA:30:66:70:AF:ED:BE:3C:23:70:59:75:72:DE:0B:A2
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/47NmL-owZnCv7b48I3BZdXLeC6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.119.0/24
185.165.78.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f3:8a:f1:0f:98:9c:fc:48:6e:b0:9a:9f:76:e5:c4:aa:ed:
21:99:83:50:66:63:dd:77:83:23:e9:15:da:0f:7d:7a:5d:4d:
36:6a:a7:44:49:15:4a:f7:a7:b6:0d:e1:07:88:d0:4f:43:c9:
ad:2b:0d:1d:30:ba:f1:2e:22:ef:69:74:97:d7:84:ca:c8:4e:
0d:c4:78:8c:39:da:af:d1:f6:60:6a:0d:a0:0e:a0:d8:0e:ad:
86:88:4c:5b:ac:9e:db:7e:b8:33:2e:be:52:98:1c:86:62:2d:
2c:6c:4a:73:c2:00:19:fe:38:c6:69:4b:9a:e7:62:40:db:46:
f2:d4:e1:ca:43:4b:3d:c3:33:3f:15:b8:26:3f:fd:67:d8:38:
49:af:85:be:76:13:50:2e:b0:9c:c5:f9:2b:f7:3e:90:3e:94:
20:0c:62:c5:f9:72:5f:3a:4e:85:6a:d7:41:03:0f:ca:9d:ad:
0a:d3:bc:d6:ab:bd:b5:c5:d2:d9:f0:d8:1f:50:a1:f7:6b:73:
87:19:03:a5:62:2e:39:c5:37:a7:13:7f:05:44:c0:c6:20:8c:
b8:8c:1f:75:32:9e:64:37:8b:2b:8c:a8:08:bb:29:92:c5:38:
63:de:e7:f9:57:a9:00:5c:d3:4f:35:7a:24:36:b1:f4:af:b7:
23:97:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:29:41 2026 by rpki-client