Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RGKDGoeALr7CqXsHemEqn06KznY.roa
File: RGKDGoeALr7CqXsHemEqn06KznY.roa (raw, json)
Hash identifier: SdtN1yJDcLaQk3C/Ugmo4ti2gkeipLmComXFGe/GwbY=
Subject key identifier: 44:62:83:1A:87:80:2E:BE:C2:A9:7B:07:7A:61:2A:9F:4E:8A:CE:76
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019EAD5FFE296B80C16B1E4CEEE20BDFF383
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RGKDGoeALr7CqXsHemEqn06KznY.roa
Signing time: Tue 09 Jun 2026 17:13:29 +0000
ROA not before: Tue 09 Jun 2026 17:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47721
IP address blocks: 78.135.77.0/24 maxlen: 24
78.135.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:5f:fe:29:6b:80:c1:6b:1e:4c:ee:e2:0b:df:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 9 17:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4462831a87802ebec2a97b077a612a9f4e8ace76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:2a:4f:ed:dc:73:0f:65:31:65:34:72:c8:
fd:a3:b7:cf:7b:e6:03:a9:e4:5c:40:14:60:87:21:
83:e6:b5:f1:06:91:aa:ea:33:ee:22:eb:4f:dc:54:
4c:45:d8:57:da:c4:3f:eb:23:a1:63:8e:1f:b9:39:
51:0a:32:a5:ae:c1:0f:92:8a:50:4f:ae:8f:96:15:
cb:63:09:74:61:b8:20:b1:24:97:63:a2:93:a8:f1:
d8:30:98:27:fa:e2:86:a2:2d:97:8c:ff:c1:fb:91:
a5:2a:ca:d5:7f:30:97:0d:e8:1f:c2:37:a0:61:73:
73:e2:02:4f:fb:c2:21:62:64:3b:04:ff:d3:c0:2a:
00:26:fd:7e:b9:9c:b6:f1:96:af:ae:d2:a1:23:17:
8c:e7:59:5f:18:9b:89:81:06:f1:78:85:e6:86:01:
59:c7:03:52:00:53:f2:76:22:94:c0:b5:d0:a4:2d:
e2:f9:7f:d5:fa:4f:03:75:54:af:1e:50:96:fd:a2:
77:b8:0f:e3:cc:55:5b:71:ac:d6:91:9d:db:60:d5:
10:75:41:78:4f:fc:9f:64:66:9b:6c:f9:c9:f3:e0:
e5:12:0d:01:d2:9c:55:db:5c:eb:80:48:e9:3c:f1:
90:9f:d1:e0:22:7c:ed:96:94:8c:da:bc:94:b1:03:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:62:83:1A:87:80:2E:BE:C2:A9:7B:07:7A:61:2A:9F:4E:8A:CE:76
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RGKDGoeALr7CqXsHemEqn06KznY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.77.0/24
78.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fd:fc:e3:85:92:a9:5b:4c:23:3b:36:8f:a9:fe:0e:63:9c:
fe:eb:26:9b:91:31:7c:93:20:6f:3e:f4:d3:36:36:7e:ef:03:
64:05:70:c4:32:c0:f2:a2:94:90:98:cd:93:79:36:91:ee:01:
81:c4:86:19:14:2c:98:32:7d:55:42:64:84:b8:1e:93:ad:c2:
46:43:c0:00:31:dc:79:08:27:51:7e:de:d4:ad:08:cf:7d:1e:
1d:67:f7:c5:5e:aa:33:c4:4d:b3:39:49:b4:e1:6d:a6:64:4f:
17:99:b8:9b:e9:0b:5a:47:d5:8c:67:d5:92:98:bf:38:44:17:
87:99:ff:e5:e6:46:58:ec:be:7a:45:c6:7b:6a:57:30:24:73:
a1:e2:ba:35:08:04:1a:dd:24:e1:b2:29:80:7b:df:00:8a:af:
82:90:19:fc:9f:ec:d3:f7:ec:88:3f:c6:ce:0b:65:53:2e:2e:
05:01:0a:6c:e4:82:6b:88:77:72:b8:a5:36:a5:83:35:44:56:
c6:7d:9b:c4:e2:f8:97:57:ec:49:eb:d9:7c:c2:9f:63:fe:85:
63:35:b9:a5:02:68:57:e3:4a:c6:15:c0:7e:aa:0b:17:33:09:
41:55:5b:47:44:55:68:61:50:9d:55:da:8a:4f:00:b6:58:1f:
28:ec:a9:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6tX/4pa4DBax5M7uIL3/ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjYwNjA5MTcxMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDYyODMxYTg3ODAyZWJlYzJhOTdiMDc3YTYxMmE5ZjRlOGFjZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+oqT+3ccw9lMWU0csj9o7fPe+YD
qeRcQBRghyGD5rXxBpGq6jPuIutP3FRMRdhX2sQ/6yOhY44fuTlRCjKlrsEPkopQ
T66PlhXLYwl0YbggsSSXY6KTqPHYMJgn+uKGoi2XjP/B+5GlKsrVfzCXDegfwjeg
YXNz4gJP+8IhYmQ7BP/TwCoAJv1+uZy28ZavrtKhIxeM51lfGJuJgQbxeIXmhgFZ
xwNSAFPydiKUwLXQpC3i+X/V+k8DdVSvHlCW/aJ3uA/jzFVbcazWkZ3bYNUQdUF4
T/yfZGabbPnJ8+DlEg0B0pxV21zrgEjpPPGQn9HgInztlpSM2ryUsQP36QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFERigxqHgC6+wql7B3phKp9Ois52MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUkdLREdvZUFMcjdDcVhzSGVtRXFuMDZLem5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodNAwQA
TodaMA0GCSqGSIb3DQEBCwUAA4IBAQCl/fzjhZKpW0wjOzaPqf4OY5z+6yabkTF8
kyBvPvTTNjZ+7wNkBXDEMsDyopSQmM2TeTaR7gGBxIYZFCyYMn1VQmSEuB6TrcJG
Q8AAMdx5CCdRft7UrQjPfR4dZ/fFXqozxE2zOUm04W2mZE8Xmbib6QtaR9WMZ9WS
mL84RBeHmf/l5kZY7L56RcZ7alcwJHOh4ro1CAQa3SThsimAe98Aiq+CkBn8n+zT
9+yIP8bOC2VTLi4FAQps5IJriHdyuKU2pYM1RFbGfZvE4viXV+xJ69l8wp9j/oVj
NbmlAmhX40rGFcB+qgsXMwlBVVtHRFVoYVCdVdqKTwC2WB8o7Knk
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:03 2026 by rpki-client