Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/r44RksBZvxwNg2NpEs-nnpEuoOc.roa
File: r44RksBZvxwNg2NpEs-nnpEuoOc.roa (raw, json)
Hash identifier: lMUYd0ctH/dlBOH9YgznNXGAiyOTAbJ/O++tGQyM/qY=
Subject key identifier: AF:8E:11:92:C0:59:BF:1C:0D:83:63:69:12:CF:A7:9E:91:2E:A0:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A08643397B4B515CBCFD50265A3D6F2D08
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/r44RksBZvxwNg2NpEs-nnpEuoOc.roa
Signing time: Wed 09 Sep 2026 13:02:27 +0000
ROA not before: Wed 09 Sep 2026 13:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.135.71.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.141.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.163.0/24 maxlen: 24
188.132.171.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.203.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:43:39:7b:4b:51:5c:bc:fd:50:26:5a:3d:6f:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 9 13:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af8e1192c059bf1c0d83636912cfa79e912ea0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:4a:c3:db:86:dc:46:1b:ba:46:51:58:07:
9c:3c:c2:86:18:8d:6f:48:33:4c:6d:09:2f:11:40:
e3:64:1c:15:0c:f4:7e:3c:47:07:b5:b4:ef:10:a2:
c5:46:c1:64:a9:a1:fd:6b:20:81:1f:4f:93:87:0a:
91:20:42:54:f6:47:42:52:c1:a2:c4:36:83:69:5f:
f6:de:54:b1:26:24:dd:00:39:72:88:92:0e:67:ae:
5c:11:d9:73:ef:1c:26:e1:c6:fa:46:a9:4e:14:27:
01:a6:28:a2:bd:c3:da:d5:b9:95:87:98:e2:e0:9d:
85:84:96:15:80:48:9e:fd:a7:de:78:bd:95:48:8d:
46:11:72:63:42:76:1c:23:b1:21:cc:9c:bf:99:41:
73:84:e7:af:6d:b3:6f:4f:d5:04:29:c8:9c:59:b8:
98:fa:00:9b:e6:d7:56:c0:69:7f:8f:28:81:d2:84:
91:0a:92:ce:2f:1e:ea:8b:08:6d:01:a0:13:8d:b0:
5a:e9:83:10:4a:92:d4:7b:ee:6c:49:f3:44:d2:72:
44:0e:a9:90:4f:13:62:0c:5e:b0:95:85:82:11:5c:
50:b9:cc:35:11:f8:7a:0c:e1:f8:c0:e8:ba:1b:89:
2c:a6:47:45:13:3d:ff:17:98:d0:b9:c7:c6:dd:1f:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:11:92:C0:59:BF:1C:0D:83:63:69:12:CF:A7:9E:91:2E:A0:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/r44RksBZvxwNg2NpEs-nnpEuoOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.71.0-78.135.72.255
78.135.74.0/24
78.135.78.0/24
78.135.81.0/24
78.135.88.0/24
188.132.141.0/24
188.132.146.0/24
188.132.152.0/24
188.132.163.0/24
188.132.171.0/24
188.132.189.0/24
188.132.191.0/24
188.132.203.0/24
188.132.212.0/23
188.132.216.0/23
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
9e:ff:53:4d:2d:31:95:ef:c4:f9:e6:75:0d:8f:6e:d4:7e:9c:
51:5d:a9:c3:84:34:6a:16:8a:a2:94:e4:03:6c:e4:a2:70:ba:
6f:3d:14:7a:75:78:45:eb:86:e7:1a:83:1f:7b:bd:ec:6e:c2:
68:3b:3c:49:57:b7:fa:9d:43:7d:a1:a3:4e:bd:a4:fd:99:95:
8d:b0:52:0e:ab:c8:4f:07:85:25:c2:f6:66:2f:9e:4b:23:3c:
76:b6:af:a5:3d:30:ba:04:1a:79:a5:25:04:c0:d9:75:43:8a:
c8:06:f0:37:8e:0a:33:af:f1:4a:9f:a9:aa:fb:81:92:44:de:
4b:3f:95:59:fc:5f:5b:bb:bb:78:fe:a4:3a:21:71:d4:e9:23:
a7:55:4d:58:8b:86:23:23:43:2c:88:d8:7d:ea:c4:b1:02:5f:
cb:f5:30:b0:69:19:88:83:88:55:e9:7f:cd:41:84:d5:66:36:
91:76:8a:2c:36:1d:61:65:2b:ee:84:2a:6e:82:73:92:b1:03:
d7:ca:fe:e6:9b:2e:c6:97:ae:47:2a:2c:c2:a2:e3:c6:1a:55:
86:45:05:27:68:d7:46:0e:81:34:0e:22:2a:18:84:fd:fd:af:
b8:f5:af:a3:22:b0:e1:82:2d:f2:96:0b:12:51:3e:1b:70:86:
a8:82:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:53 2026 by rpki-client