Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/N9QQxg_R8io7DnlRj5HdQ23wfCk.roa
File: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (raw, json)
Hash identifier: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=
Subject key identifier: 37:D4:10:C6:0F:D1:F2:2A:3B:0E:79:51:8F:91:DD:43:6D:F0:7C:29
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019D30C03BEA8723D7F2FB1FD83257E637F0
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/N9QQxg_R8io7DnlRj5HdQ23wfCk.roa
Signing time: Fri 27 Mar 2026 19:23:17 +0000
ROA not before: Fri 27 Mar 2026 19:23:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 78.108.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:c0:3b:ea:87:23:d7:f2:fb:1f:d8:32:57:e6:37:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 27 19:23:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d410c60fd1f22a3b0e79518f91dd436df07c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:df:58:7c:64:0e:b1:14:95:42:6c:95:20:
ca:35:3c:2c:20:5f:8d:b7:72:83:90:32:97:88:7f:
e4:31:30:65:b4:c5:25:ff:90:28:97:58:c2:03:c0:
79:aa:46:28:f5:87:cb:f8:97:9a:0c:a3:8a:6d:bb:
03:58:05:a5:33:15:81:35:4e:1f:4c:17:8c:f0:9e:
0e:53:fb:8d:cf:e5:28:53:cb:aa:7e:30:e6:5c:3c:
30:b0:3e:1d:22:cf:47:d5:fc:98:a8:50:63:07:a7:
1b:2c:e8:9e:ae:30:5a:03:a1:bf:47:81:51:24:69:
b9:be:22:a8:cc:c1:95:d1:35:31:ce:f2:5b:8d:02:
85:49:32:f3:81:2f:01:a2:83:a4:90:01:89:50:5a:
58:a8:11:cc:ab:ea:7a:be:7d:91:41:3b:6d:73:b1:
bb:be:97:ce:db:8d:35:d6:5d:8b:fd:71:f2:0c:ee:
02:a7:8d:1a:1a:9b:d8:57:f0:87:54:29:46:11:87:
f1:57:41:33:10:f8:19:34:bf:9c:67:bd:1f:90:5e:
39:6d:e8:8f:31:e6:14:10:bb:68:b1:1c:e4:21:a4:
d7:15:2b:19:de:1b:45:cc:83:a6:42:ed:b7:2e:7e:
f5:10:fa:21:07:a3:06:98:c5:bc:26:cb:12:22:d5:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:10:C6:0F:D1:F2:2A:3B:0E:79:51:8F:91:DD:43:6D:F0:7C:29
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/N9QQxg_R8io7DnlRj5HdQ23wfCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:2d:a4:4c:e8:62:63:da:04:42:70:cb:86:8d:be:69:3c:
79:bb:bd:33:65:00:46:32:4e:13:f9:94:a4:30:a5:12:64:42:
28:de:9a:2c:d2:82:8e:1b:93:61:29:6f:9e:28:d8:f1:4b:32:
d3:73:de:0c:dd:8f:c9:36:22:64:75:25:05:b6:10:1e:20:39:
07:9c:b0:e5:60:c3:7e:12:69:76:f6:72:aa:ae:d3:f5:d8:55:
3a:b5:8f:c3:7a:ec:b6:7e:57:cc:28:fa:a9:ab:5e:95:bd:f7:
ac:c4:fc:be:b7:cd:5a:e1:ea:c4:71:e1:29:43:b9:c5:d2:c8:
bc:19:85:23:67:8c:6b:92:82:8b:b9:7d:75:14:d6:1c:6c:4d:
b8:5d:22:94:a4:89:55:6f:bf:e3:dc:2a:1b:7a:8a:6e:41:e6:
df:ec:a5:db:c7:42:ec:88:4d:9b:b2:32:f8:69:99:05:35:69:
13:c8:70:e5:52:3a:3f:2f:02:9c:36:f9:eb:94:85:c0:e4:22:
1b:4e:e8:d8:15:83:e5:44:f4:f7:46:ac:9b:dd:37:d6:68:22:
f1:61:f1:58:c2:e4:e1:bd:0b:cc:2e:15:6e:69:0e:29:9b:7f:
d0:67:92:66:3b:33:4d:f5:83:12:f5:af:31:38:61:60:60:83:
39:91:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:19 2026 by rpki-client