Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/78N4Zas2TFsia5o0H4J2xg1gwmI.roa
File: 78N4Zas2TFsia5o0H4J2xg1gwmI.roa (raw, json)
Hash identifier: k3G9hT1kpqRM/KASlv3a5BakZ1/OT0m7VnZ/zg0ttuk=
Subject key identifier: EF:C3:78:65:AB:36:4C:5B:22:6B:9A:34:1F:82:76:C6:0D:60:C2:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA678FE0A312F715CEB13A0DE4BA89082
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/78N4Zas2TFsia5o0H4J2xg1gwmI.roa
Signing time: Tue 28 Jul 2026 02:06:15 +0000
ROA not before: Tue 28 Jul 2026 02:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 82.109.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:78:fe:0a:31:2f:71:5c:eb:13:a0:de:4b:a8:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 02:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc37865ab364c5b226b9a341f8276c60d60c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:be:74:9c:b7:31:96:63:f3:62:ad:99:9d:
2b:9d:84:69:c4:84:e3:d8:15:31:85:99:a5:fe:97:
38:2e:b7:db:5c:e3:d5:81:4e:d9:2f:31:75:77:d6:
88:17:88:f6:3f:e3:a5:18:e4:6f:53:19:ad:3b:42:
5c:fb:04:da:26:3f:86:7b:dd:62:05:56:5a:27:39:
fc:77:e1:da:bd:7f:20:9a:e9:12:02:fa:dc:6f:fa:
be:e9:c6:54:dc:4e:9a:c9:db:84:22:53:68:7f:16:
f5:89:17:28:21:c9:15:91:b5:27:ff:77:07:78:06:
e0:21:fc:39:1c:ad:1a:91:bb:b6:ce:93:39:c9:b0:
df:40:4b:88:68:56:bf:ad:d3:5b:ec:43:29:a9:c4:
50:d4:28:c1:03:97:59:29:6a:12:d4:6c:77:ad:d5:
e0:54:41:de:d5:bd:e4:66:1c:ea:4b:fa:c5:39:17:
12:0e:df:0d:2a:95:e2:d5:b3:1d:b3:d8:3a:63:77:
c4:9f:b0:5d:0c:d3:bd:c1:71:65:85:a9:28:1d:de:
57:01:fa:c4:16:e7:32:27:b9:18:e3:8d:5d:58:bc:
a0:0f:ad:b2:d3:81:37:e3:06:ec:32:61:77:25:08:
4e:94:98:0d:33:1f:0e:ff:cc:40:0a:d7:5b:a0:73:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:78:65:AB:36:4C:5B:22:6B:9A:34:1F:82:76:C6:0D:60:C2:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/78N4Zas2TFsia5o0H4J2xg1gwmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cd:6d:e3:32:a7:34:07:97:06:fc:2e:44:cf:52:1e:52:36:
e0:6d:a7:44:6e:f9:95:b4:ae:ef:93:f3:53:a1:39:39:2f:5d:
6d:41:74:ce:6e:69:8f:d3:08:00:4b:ab:b3:0e:61:fc:fd:e8:
0f:2f:b2:89:54:bb:d2:e2:06:02:11:55:5a:da:7a:e9:4d:79:
40:d8:14:ca:07:94:91:35:ac:3a:c6:d0:ae:ce:6f:af:25:02:
a7:dd:0c:8c:77:00:75:a3:19:db:8d:4b:af:35:63:2c:15:fa:
d6:e3:92:0e:89:63:c1:fd:05:0f:dd:60:4f:7c:97:c0:b3:7c:
b3:7a:50:5c:e4:33:8a:6d:a1:36:55:71:65:51:01:67:be:5e:
98:9f:42:24:c9:f3:46:69:91:85:7a:41:d4:85:d7:a3:15:fd:
3f:a1:ec:a5:a0:1b:0a:e8:92:7c:f6:8d:b8:d4:0f:cc:dd:26:
57:3a:d6:a4:98:47:1f:23:b7:e7:fc:39:c3:8f:cf:e0:80:90:
47:22:1e:f2:53:66:66:2f:c7:f6:1d:7d:9c:d9:0d:b9:2d:ca:
4e:c8:f7:02:8e:81:7b:47:3c:ba:cf:31:27:4e:c2:78:41:8b:
d0:13:7d:bd:89:41:0d:d4:c1:9b:7a:2f:ea:71:64:7f:77:97:
89:81:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:49 2026 by rpki-client