Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1-IsyXimgStm6iFdQzOtOH_LpB-w.roa
File: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (raw, json)
Hash identifier: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=
Subject key identifier: F8:8B:32:5E:29:A0:4A:D9:BA:88:57:50:CC:EB:4E:1F:F2:E9:07:EC
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D8592C08274A268E1AD98C1BA0EFE855E
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1-IsyXimgStm6iFdQzOtOH_LpB-w.roa
Signing time: Mon 13 Apr 2026 06:41:20 +0000
ROA not before: Mon 13 Apr 2026 06:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 78.24.122.0/24 maxlen: 24
78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:92:c0:82:74:a2:68:e1:ad:98:c1:ba:0e:fe:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Apr 13 06:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f88b325e29a04ad9ba885750cceb4e1ff2e907ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:02:3f:cd:8d:55:75:9d:8e:65:aa:1e:37:
4c:a4:3f:02:3a:f9:bd:83:22:83:a4:ae:1c:c1:d6:
26:75:2d:7b:02:82:4d:77:42:58:77:d6:1b:11:b6:
f5:77:3e:6b:fe:57:71:11:dd:24:35:2a:a1:64:d2:
e1:b6:f4:fd:62:29:26:31:38:bf:d2:cd:44:85:1c:
85:6e:ba:b3:ae:c6:8f:fa:45:82:d8:62:25:f3:73:
2c:5f:8f:d4:25:37:cb:28:16:78:8b:a3:84:dd:6f:
0f:c8:9b:ab:bd:1b:b9:95:b0:93:9b:a1:e7:f3:ed:
be:07:56:0d:ba:a3:5d:b3:1d:ca:af:3a:d7:1e:d0:
2f:97:a7:64:25:70:cf:cb:55:42:b2:ff:2e:46:0d:
c1:2b:1f:c4:28:49:de:ba:12:ad:09:89:3f:32:a8:
ed:a5:76:26:37:cf:c0:65:de:8a:9b:b7:58:30:d7:
4d:ca:10:5f:82:ff:49:a6:b2:f6:eb:a7:9e:51:66:
f0:9d:4a:05:b9:2a:0b:45:5c:47:15:b1:25:ad:df:
da:bb:8d:f9:66:5f:da:8b:31:43:9c:77:2c:cc:82:
93:d4:1d:de:81:d4:3b:10:70:fa:9b:19:c3:f3:2d:
73:86:5c:14:b4:c6:26:2d:1e:83:cb:2e:42:e4:79:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:32:5E:29:A0:4A:D9:BA:88:57:50:CC:EB:4E:1F:F2:E9:07:EC
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1-IsyXimgStm6iFdQzOtOH_LpB-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
78.24.124.0/23
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0c:af:c7:2c:94:dd:f1:09:b7:a7:71:f1:21:0a:48:70:2a:
75:83:36:4e:1e:3c:9c:c9:21:c7:5e:44:9c:76:be:08:e1:ae:
1c:11:34:4f:59:b5:c8:d5:fa:33:c5:b5:7b:2b:7d:d8:7b:3d:
6d:6c:e3:c0:53:d9:42:42:58:39:37:a7:36:05:e9:54:cc:ec:
38:1e:d6:a7:dd:3a:61:35:52:6f:8d:2c:2e:41:c6:d5:5e:c1:
5e:10:e3:a8:55:e1:b4:42:d6:42:21:b5:ca:2f:aa:fe:f8:1c:
a6:43:c9:51:33:3e:d6:4c:b3:fa:62:ac:bc:c3:cc:ad:88:60:
be:75:f8:4f:e1:63:b8:9a:f2:bf:3b:b7:65:97:81:67:5e:dc:
d4:e2:2a:e0:38:07:18:b2:4f:d5:ad:48:d6:56:4c:46:c2:b4:
06:2c:43:c2:66:57:d9:7d:92:1b:91:4d:86:93:27:42:3f:f5:
47:e5:c2:1c:2d:66:f4:95:1d:d0:3b:2d:c6:86:f7:4c:14:17:
44:ad:d6:2e:63:11:ab:e0:bd:d7:77:a8:68:4f:ae:49:75:fb:
00:a7:3f:fc:0c:99:bc:83:26:6e:4b:1f:8f:6d:d5:b6:58:4d:
ba:3a:d8:23:10:a0:c6:2f:e5:8e:8f:43:89:c5:e2:9c:d7:e9:
7a:18:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:02 2026 by rpki-client