Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/T0S4YdYefDDSTrO6v8KHFw7diko.roa
File: T0S4YdYefDDSTrO6v8KHFw7diko.roa (raw, json)
Hash identifier: sMhMOdHTx2kXdQQbdZ1K2j//0vSZpvz10tFThLHco1c=
Subject key identifier: 4F:44:B8:61:D6:1E:7C:30:D2:4E:B3:BA:BF:C2:87:17:0E:DD:8A:4A
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0A95E09E8279598C33123CA32C79888B8
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/T0S4YdYefDDSTrO6v8KHFw7diko.roa
Signing time: Wed 16 Sep 2026 08:38:27 +0000
ROA not before: Wed 16 Sep 2026 08:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5e:09:e8:27:95:98:c3:31:23:ca:32:c7:98:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 16 08:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f44b861d61e7c30d24eb3babfc287170edd8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:d9:f0:12:bb:d8:d6:56:51:ac:b4:0e:47:
9b:b0:10:e4:a6:3e:ff:6b:17:d1:3e:29:02:79:4e:
c3:07:50:36:10:e6:cb:b0:b4:f1:88:37:33:b2:b3:
82:f6:79:ed:34:b2:d0:bb:c2:1d:9b:4f:b2:ac:21:
1a:d6:a7:25:58:c1:45:d7:66:56:55:94:7a:17:ab:
e7:13:a8:78:c7:15:51:ec:cc:0b:f3:f9:8d:5c:5e:
b3:cd:22:c9:33:5e:4d:b3:52:60:0d:2d:bf:7e:a0:
8c:89:85:e2:43:ce:3a:21:4b:ab:68:f6:6a:c8:a7:
60:e3:36:0b:32:cb:09:34:0b:0e:80:75:14:ad:af:
c9:3c:7c:ce:5d:14:31:1f:aa:56:e2:29:d7:e8:5b:
dc:37:1c:aa:45:43:64:51:e7:c1:e6:78:b3:b0:6f:
27:44:ce:b7:3f:1f:bd:b5:ba:35:1c:3a:0e:5e:a4:
b7:72:cf:4b:4c:20:20:b2:67:cb:bf:8e:dd:df:8a:
ba:82:5e:35:76:9c:54:59:49:3b:b8:c6:7f:28:af:
3e:39:97:3b:c1:88:7e:49:a2:f6:fe:3d:2f:a2:11:
bf:3b:e6:7c:0c:d0:90:6a:cb:71:44:f7:8c:04:82:
03:35:7c:99:b5:a8:ed:2d:65:c2:70:2a:06:01:1c:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:B8:61:D6:1E:7C:30:D2:4E:B3:BA:BF:C2:87:17:0E:DD:8A:4A
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/T0S4YdYefDDSTrO6v8KHFw7diko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
73:15:38:bb:e9:ac:9f:7c:10:35:2b:6e:c7:a2:7a:42:4c:34:
66:07:59:ad:f8:c3:c2:96:70:2b:9c:4f:3d:be:1e:2f:76:32:
78:44:35:82:25:cc:e4:6e:11:2e:e3:67:e3:a3:11:a5:ee:43:
9a:14:0d:ba:ff:3a:d3:12:65:ef:69:87:99:d9:4c:94:87:ca:
57:c4:90:8f:ca:ac:e0:b6:29:00:15:34:70:cd:6a:7b:f8:3f:
b7:7e:68:ef:ed:cb:16:47:fa:73:80:1f:9f:5f:13:8d:68:07:
4c:a1:58:b7:b9:87:bf:de:29:4f:f6:74:50:ab:84:bf:60:21:
69:eb:f6:da:06:09:f6:bb:92:e6:8e:99:bc:e8:dd:95:ae:51:
8b:c9:a2:44:9e:f9:41:12:5b:3e:73:97:9f:74:99:c9:13:cb:
b5:8a:42:93:de:91:70:5a:60:5f:98:e7:6a:57:7b:fe:47:9d:
25:92:57:65:47:e8:1c:1a:96:be:f6:8f:67:4c:bb:dc:c7:b9:
3d:85:74:d7:02:54:c3:ca:0f:b8:57:82:cd:13:17:e5:13:6f:
b2:7e:99:d2:c7:db:20:34:6b:10:98:2b:ce:6e:3d:8a:23:9c:
ca:7d:87:f9:d8:80:f9:de:8e:57:0f:66:70:7b:cc:47:fd:84:
b6:39:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:18 2026 by rpki-client