Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/yAVYxJFH5V5eInedSvCrsQJDCdM.roa
File: yAVYxJFH5V5eInedSvCrsQJDCdM.roa (raw, json)
Hash identifier: JLkjfyoNHYnLxSb+aahMC+v2H24Mr3DdjFtD7SH3WJ0=
Subject key identifier: C8:05:58:C4:91:47:E5:5E:5E:22:77:9D:4A:F0:AB:B1:02:43:09:D3
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A0BDE3F198F9E86A630009989E98028EB8
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/yAVYxJFH5V5eInedSvCrsQJDCdM.roa
Signing time: Sun 20 Sep 2026 08:17:07 +0000
ROA not before: Sun 20 Sep 2026 08:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.108.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:e3:f1:98:f9:e8:6a:63:00:09:98:9e:98:02:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 20 08:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80558c49147e55e5e22779d4af0abb1024309d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:91:3d:e6:08:ac:14:7d:c3:3b:60:49:29:
42:ff:55:b3:d4:be:38:2c:57:b9:a2:82:d1:e6:7d:
73:94:81:a7:d5:c0:f6:04:ad:3a:e5:1e:58:64:4e:
01:b9:68:e2:6b:03:61:3c:5c:e8:d6:0a:d9:32:2c:
d6:d2:2f:c7:41:c3:3b:b6:ce:c0:f4:9a:7e:a8:51:
e9:8b:da:c2:89:91:e9:c5:cf:56:91:b9:11:bc:ad:
a4:ae:84:a0:67:cd:fb:a9:51:1a:75:1b:10:71:30:
5c:f4:7b:f0:6f:74:62:86:fc:fa:6b:b7:48:78:24:
f3:65:0c:e3:40:8f:55:5a:89:b6:56:fe:a6:41:dd:
a3:f1:9c:e2:27:99:76:54:3f:61:95:df:74:19:f7:
5b:d6:92:4e:65:89:f1:37:08:6a:3b:74:5c:7e:aa:
13:1f:df:34:e2:95:e7:b3:2c:5b:a7:b3:af:de:be:
b1:af:76:c4:19:7e:53:ff:b9:72:bd:60:5c:01:46:
df:be:4b:1a:db:2e:1e:bd:55:e1:26:55:92:6c:0c:
ee:4f:45:2d:18:c6:8c:a2:54:12:c5:91:ec:a1:80:
b6:de:5d:ba:c1:43:a3:b9:d0:1b:7f:0f:02:ae:07:
8e:2f:48:bb:46:69:4a:cf:ce:af:01:72:bf:58:d0:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:58:C4:91:47:E5:5E:5E:22:77:9D:4A:F0:AB:B1:02:43:09:D3
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/yAVYxJFH5V5eInedSvCrsQJDCdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:68:4d:55:b1:dc:ce:ae:64:6a:59:e2:16:23:21:15:12:
a3:c3:8c:a9:1b:94:b1:ed:94:32:59:7b:cb:43:fd:fe:dd:33:
fe:ac:a9:29:84:5e:bf:04:24:55:4d:1f:24:68:95:d1:e1:7a:
4d:86:cd:c1:4d:c9:6a:2c:ae:03:0e:04:63:ea:fb:bc:b9:5d:
01:d8:a1:73:43:58:1b:37:97:2b:e0:06:21:b8:e2:8d:b7:76:
30:ff:73:f8:5e:d5:6a:54:82:27:8e:69:1e:20:d5:ae:db:83:
f8:33:92:d1:ea:17:6f:98:d9:63:60:03:bd:55:69:f5:7f:bf:
66:bd:e4:c9:a5:85:c5:a8:02:4b:1e:32:54:70:f7:1c:85:ed:
ea:c3:21:7a:e2:cf:17:0f:d9:23:4c:98:ba:6f:b2:35:a5:01:
88:56:b7:33:bd:aa:74:9b:ca:59:6c:20:14:3f:a8:9f:c2:45:
e0:bc:f7:a2:28:3d:22:6d:1f:3b:98:ba:63:25:71:ac:a8:59:
71:cc:42:2d:bb:62:43:38:ef:d9:60:01:e4:df:6d:34:cf:27:
c5:89:98:ab:37:c5:9e:91:bf:22:75:09:7c:97:39:95:16:f4:
01:a4:97:70:cb:75:e9:dd:07:a8:46:57:d8:df:a7:bd:a5:a7:
95:a6:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:25:05 2026 by rpki-client