Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa
File: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (raw, json)
Hash identifier: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=
Subject key identifier: 41:AF:23:AF:8A:FD:A1:43:10:A9:75:A3:69:B7:43:7D:0E:E0:9A:95
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D8592C00078070162366A571F7DDA51C2
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa
Signing time: Mon 13 Apr 2026 06:41:20 +0000
ROA not before: Mon 13 Apr 2026 06:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:92:c0:00:78:07:01:62:36:6a:57:1f:7d:da:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Apr 13 06:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41af23af8afda14310a975a369b7437d0ee09a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:8a:bd:1c:27:06:02:fa:ec:a7:86:96:d5:
50:90:88:27:dd:f9:18:95:01:a8:7a:bc:04:c3:04:
f4:ac:f4:e6:4a:eb:3c:75:54:6e:e9:2c:f6:50:69:
ff:73:65:04:76:c3:39:79:5e:0e:0c:f4:1f:36:69:
c5:49:12:52:3d:cd:e5:32:3e:2e:c1:d3:28:24:d4:
d1:fc:1a:e3:31:2f:01:7a:6b:67:ea:6e:fc:01:1d:
0f:62:9a:c6:43:b6:86:d8:f7:4d:92:aa:c9:cf:1c:
4e:e6:4b:a6:bd:0f:0b:8e:f3:7a:61:26:0c:b3:95:
5a:59:e9:1b:41:0e:97:3d:f2:ca:c6:a2:a3:b5:4a:
85:69:f2:6c:be:9e:2c:92:04:89:9d:73:ce:21:54:
41:05:49:18:37:53:d7:44:85:95:8e:a1:aa:9f:d2:
c7:22:e2:1b:15:c5:68:be:0a:92:b2:50:c7:3d:c3:
82:b3:83:5c:41:7b:cb:34:fd:8e:4a:6e:4d:8f:e9:
be:7a:14:c3:76:6a:1e:bd:df:35:1e:6b:b3:cf:e7:
97:8d:5f:58:ba:59:34:38:4b:d1:80:9e:37:0f:d8:
0f:8f:66:7b:9b:05:47:8e:d7:dc:ce:84:0a:cd:7c:
4f:f4:4d:8f:d1:35:08:c9:73:9d:92:0d:32:a0:40:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:23:AF:8A:FD:A1:43:10:A9:75:A3:69:B7:43:7D:0E:E0:9A:95
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/23
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:4a:7e:91:40:c7:87:f9:24:b2:c4:97:14:e4:0f:6c:6c:4e:
3b:82:89:bd:6e:2c:91:b0:9a:19:63:aa:06:02:9c:fc:71:e9:
3c:66:98:5b:57:8e:1a:47:48:fb:a9:b0:4a:62:6f:5f:c5:13:
08:26:47:91:8c:e6:64:cb:69:3b:0a:48:2d:66:75:d6:69:01:
5f:3a:c3:4e:7b:f5:5b:fe:a5:53:e0:bb:b2:13:96:da:9c:1c:
7e:eb:46:30:bf:fa:05:ab:d4:e1:27:4a:b5:1e:4c:5e:70:c6:
b7:91:b8:84:7f:4b:3b:8d:3a:b3:38:50:03:2c:07:f2:55:d9:
f7:96:4e:57:5f:58:f5:01:49:21:00:fd:19:8e:c8:77:67:5f:
01:b4:e7:11:c7:6e:6f:53:91:e7:7a:af:f1:d4:2c:54:8a:9c:
10:9d:c0:c9:ab:8e:3e:5b:44:01:53:ff:bf:70:ca:78:1c:d8:
d6:a4:cb:62:04:a4:67:a2:3f:6f:d1:ee:51:3a:6d:f9:69:a1:
46:73:e7:65:35:d9:eb:d0:8f:e7:bc:e1:1a:07:81:3a:36:26:
46:17:6f:f3:91:9b:e9:14:c4:cb:ba:4b:05:2d:f2:66:47:b2:
e5:fa:9a:df:2f:7f:54:5e:ec:e3:9a:e9:45:55:ea:1a:bb:fa:
14:c3:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:37 2026 by rpki-client