Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FsqORyoXH010ccRvozBRItB3mE0.roa
File: FsqORyoXH010ccRvozBRItB3mE0.roa (raw, json)
Hash identifier: gDh6QisMvcfVkozZSz/eg0WOKXjrHhmaUPQ4bC3AAu4=
Subject key identifier: 16:CA:8E:47:2A:17:1F:4D:74:71:C4:6F:A3:30:51:22:D0:77:98:4D
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0A95E0A7E2A7322ADB319056FC8826C93
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FsqORyoXH010ccRvozBRItB3mE0.roa
Signing time: Wed 16 Sep 2026 08:38:27 +0000
ROA not before: Wed 16 Sep 2026 08:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5e:0a:7e:2a:73:22:ad:b3:19:05:6f:c8:82:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 16 08:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16ca8e472a171f4d7471c46fa3305122d077984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:5f:03:0e:e8:ec:d4:c1:40:f4:92:2e:e5:
30:0e:55:cd:b4:76:53:01:dd:50:7a:5a:3b:c0:24:
33:41:c8:35:07:58:c1:93:90:e0:44:d5:35:c7:eb:
3e:d7:77:2c:22:ab:de:a7:4e:19:00:f1:d9:87:97:
76:a1:34:0d:ed:85:63:3f:bd:2b:59:5a:0d:ab:61:
f5:e1:37:4e:7d:92:b4:f1:b8:d3:30:48:09:78:cb:
6c:40:7c:37:a6:ee:ae:ae:24:bd:fa:b5:47:8e:30:
ac:1a:95:35:6f:18:5e:0e:57:14:4e:87:a8:64:ea:
ca:bf:b8:a9:94:ba:9d:44:07:e4:2b:de:4e:5b:26:
a6:b0:d2:42:77:e5:d4:d6:f6:2d:bc:4f:76:af:b0:
59:01:2b:18:81:72:8f:31:01:79:2f:95:36:d9:34:
4d:0e:32:3e:d7:d3:84:b3:db:d7:6f:c7:27:c4:e2:
ba:aa:f5:ca:f3:a8:7b:26:5c:b0:03:a8:62:43:44:
c8:1d:30:49:4c:12:6a:c3:a1:12:3f:2d:e2:a7:de:
20:42:e2:09:17:46:41:c2:37:4b:24:d7:b1:11:68:
46:aa:1a:23:56:1b:f5:63:77:fd:0b:12:80:a2:42:
70:3d:aa:d2:eb:64:7c:61:03:05:8d:21:3b:07:74:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:8E:47:2A:17:1F:4D:74:71:C4:6F:A3:30:51:22:D0:77:98:4D
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FsqORyoXH010ccRvozBRItB3mE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ad:c9:98:e7:04:65:59:bc:f5:51:76:ea:f9:91:b1:a2:44:
89:4c:0f:8a:1f:45:07:81:6a:91:3b:19:95:51:c1:e9:24:89:
bb:d1:04:aa:89:a2:2a:db:1a:a1:21:bf:dc:fd:a9:f9:c8:86:
06:1c:25:25:77:f7:00:cd:d6:e6:4b:d1:93:95:c2:12:79:bc:
32:52:35:0d:0a:66:96:88:b7:71:a1:ae:d5:79:1e:04:0e:b5:
eb:1e:a9:eb:91:97:32:e8:47:77:09:dc:6f:a0:29:1b:0e:ea:
84:90:5e:f9:ff:39:81:c8:a1:fd:c5:14:b6:16:ae:6d:37:c0:
44:08:79:91:6f:06:9c:2e:e8:15:a1:fa:11:35:fb:4c:ba:2b:
b5:1f:44:73:7f:dd:14:c6:4b:d2:c7:bf:19:9b:4d:2d:7c:7f:
dd:24:14:0e:66:37:f1:60:05:be:bb:fc:73:5b:1a:e6:0a:c0:
f9:eb:91:77:b1:f7:cb:6f:30:b2:72:c2:47:4a:bd:cb:a0:b6:
c6:13:bc:24:b4:dd:c2:e1:d1:5c:76:a3:68:44:76:fb:fc:66:
db:2f:28:a9:60:27:f0:4b:c5:d5:41:ab:6c:81:c5:5d:d3:24:
0d:c2:35:fc:f3:96:5d:80:6d:1a:1b:42:06:a8:3a:6e:93:83:
2a:02:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:14 2026 by rpki-client