Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/CgToz2b9vJXkfbV9wQD9McV1WUM.roa
File: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (raw, json)
Hash identifier: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=
Subject key identifier: 0A:04:E8:CF:66:FD:BC:95:E4:7D:B5:7D:C1:00:FD:31:C5:75:59:43
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019C683E33CEF2FC7FBE69D8A3B04BC20CB8
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/CgToz2b9vJXkfbV9wQD9McV1WUM.roa
Signing time: Mon 16 Feb 2026 20:57:12 +0000
ROA not before: Mon 16 Feb 2026 20:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 78.108.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:3e:33:ce:f2:fc:7f:be:69:d8:a3:b0:4b:c2:0c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Feb 16 20:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a04e8cf66fdbc95e47db57dc100fd31c5755943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:37:48:9b:51:f5:b2:e3:ee:81:0c:62:03:
a0:03:b9:10:0d:56:60:4b:46:e3:07:46:5b:70:99:
14:ba:f8:4d:06:b7:cd:70:e8:29:66:23:ef:d3:dd:
c3:4c:92:ad:70:97:08:a7:08:c3:f9:31:b8:93:a5:
c2:81:dc:fc:92:25:df:94:68:3c:db:dd:3c:1e:2f:
a0:c3:05:4c:7b:88:bf:bc:a1:06:cb:a3:d5:87:2c:
6c:0c:fc:dc:90:fe:dc:54:c2:40:70:90:94:c6:bf:
39:e6:f7:f5:30:ee:d3:ca:c9:fb:6a:79:5a:30:d3:
7e:b9:75:b0:5e:d5:2a:a1:ba:18:6d:82:e1:0a:b8:
38:64:70:aa:12:59:95:8d:81:4d:70:ea:72:36:3f:
24:5e:e9:5f:fa:76:15:a0:ba:c1:fb:28:c4:fc:b6:
a2:d0:11:00:e6:b9:cb:68:1d:be:50:ac:e5:6b:d1:
12:df:f7:b8:4b:52:91:64:56:83:04:93:84:e1:63:
12:04:66:27:f8:0f:28:82:72:4d:8b:41:e2:bd:81:
89:6c:29:97:63:14:28:11:20:b7:18:c8:8c:ed:e2:
20:77:24:d9:7f:d3:8b:ef:34:aa:30:3c:86:13:a1:
7f:1a:5b:f6:14:0a:b6:fc:05:5b:79:34:36:23:f8:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:E8:CF:66:FD:BC:95:E4:7D:B5:7D:C1:00:FD:31:C5:75:59:43
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/CgToz2b9vJXkfbV9wQD9McV1WUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.61.0/24
Signature Algorithm: sha256WithRSAEncryption
56:69:63:d4:95:d0:a1:92:97:04:87:e8:ad:e3:c8:87:94:3a:
02:3c:be:1d:84:3f:c9:89:f3:5e:85:07:4f:07:8e:ba:a5:14:
ba:70:35:f0:ae:8a:d6:07:73:a6:36:74:3b:0b:47:0e:20:e1:
ef:1e:5f:04:cc:a5:45:11:63:fc:c7:b8:af:26:6e:45:f5:4a:
c6:64:85:e1:cf:fc:4a:1d:a5:34:ea:d7:d4:14:bf:26:ed:6c:
a9:97:c6:63:a2:79:13:01:f7:73:dd:f2:f1:8c:12:83:85:c8:
33:26:32:a7:83:87:20:66:7c:bb:2f:09:ee:7e:4e:97:20:06:
e4:2b:d7:bd:1d:72:71:5a:fd:77:3f:37:68:b5:00:02:84:55:
8d:62:3e:46:3c:62:5a:f9:03:fd:5d:15:da:49:03:50:58:c2:
f5:29:5e:b8:32:f2:b9:93:48:a3:fb:ea:d5:fe:8f:62:4e:98:
c5:87:45:37:48:9d:33:eb:5b:88:10:dd:5c:95:0f:f1:e0:6f:
7d:31:a2:a8:74:be:0f:39:58:7e:b7:29:0c:7a:87:94:73:76:
e0:28:6d:43:97:fd:84:eb:c4:53:bc:f1:84:7a:ff:ae:21:0e:
af:69:1e:4a:0a:25:3c:e8:b2:77:2f:3f:59:0d:53:6e:ba:55:
d3:f7:28:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxoPjPO8vx/vmnYo7BLwgy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwMjE2MjA1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTA0ZThjZjY2ZmRiYzk1ZTQ3ZGI1N2RjMTAwZmQzMWM1NzU1OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLI3SJtR9bLj7oEMYgOgA7kQDVZg
S0bjB0ZbcJkUuvhNBrfNcOgpZiPv093DTJKtcJcIpwjD+TG4k6XCgdz8kiXflGg8
2908Hi+gwwVMe4i/vKEGy6PVhyxsDPzckP7cVMJAcJCUxr855vf1MO7Tysn7anla
MNN+uXWwXtUqoboYbYLhCrg4ZHCqElmVjYFNcOpyNj8kXulf+nYVoLrB+yjE/Lai
0BEA5rnLaB2+UKzla9ES3/e4S1KRZFaDBJOE4WMSBGYn+A8ognJNi0HivYGJbCmX
YxQoESC3GMiM7eIgdyTZf9OL7zSqMDyGE6F/Glv2FAq2/AVbeTQ2I/j4pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoE6M9m/byV5H21fcEA/THFdVlDMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvQ2dUb3oyYjl2SlhrZmJWOXdRRDlNY1YxV1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw9MA0G
CSqGSIb3DQEBCwUAA4IBAQBWaWPUldChkpcEh+it48iHlDoCPL4dhD/JifNehQdP
B466pRS6cDXwrorWB3OmNnQ7C0cOIOHvHl8EzKVFEWP8x7ivJm5F9UrGZIXhz/xK
HaU06tfUFL8m7Wypl8ZjonkTAfdz3fLxjBKDhcgzJjKng4cgZny7Lwnufk6XIAbk
K9e9HXJxWv13PzdotQAChFWNYj5GPGJa+QP9XRXaSQNQWML1KV64MvK5k0ij++rV
/o9iTpjFh0U3SJ0z61uIEN1clQ/x4G99MaKodL4POVh+tykMeoeUc3bgKG1Dl/2E
68RTvPGEev+uIQ6vaR5KCiU86LJ3Lz9ZDVNuulXT9yhx
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:33 2026 by rpki-client