Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/PgCWANz5uY2I9lsHzhkPjqX39Kk.roa
File: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (raw, json)
Hash identifier: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=
Subject key identifier: 3E:00:96:00:DC:F9:B9:8D:88:F6:5B:07:CE:19:0F:8E:A5:F7:F4:A9
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019EB29C0B8BC96C390EF3F7DA72CEEA21C1
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/PgCWANz5uY2I9lsHzhkPjqX39Kk.roa
Signing time: Wed 10 Jun 2026 17:37:11 +0000
ROA not before: Wed 10 Jun 2026 17:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 78.108.56.0/24 maxlen: 24
78.108.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:9c:0b:8b:c9:6c:39:0e:f3:f7:da:72:ce:ea:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jun 10 17:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e009600dcf9b98d88f65b07ce190f8ea5f7f4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:fd:5d:02:0e:ea:50:28:2b:8b:13:14:20:
52:41:94:0a:64:25:ec:52:e3:0b:1f:43:06:fa:49:
d5:de:4e:56:f1:7e:71:82:4a:40:1e:98:d2:0c:bd:
10:88:00:cb:11:4d:ac:5a:68:54:1f:f9:2e:6d:e2:
e0:f3:24:82:5d:9e:11:28:2c:6e:c9:ce:20:fd:d6:
98:4d:b8:1a:a0:42:92:f1:46:85:f9:8f:a2:0f:e2:
3b:67:ad:4a:dc:eb:3a:c0:10:64:92:75:77:9a:a1:
24:84:36:bb:90:e3:c2:81:b6:b3:63:68:c3:8f:d9:
92:97:e4:40:f5:6b:02:cc:a5:1f:a1:24:22:2d:e1:
26:7e:32:94:98:75:5c:db:5a:15:58:d5:af:f5:d1:
6f:f0:6b:1c:ff:07:7e:f8:33:df:04:9c:d5:2e:46:
8a:88:aa:6d:23:08:ef:01:6f:ed:99:6c:6a:79:f9:
ce:7a:44:0c:5b:43:1b:1a:40:22:e4:05:2a:8c:4f:
d1:16:5d:98:a7:50:c2:57:4f:f4:d0:d9:a5:09:9f:
bb:54:fb:eb:74:26:b8:6f:18:01:50:70:21:2e:1d:
3e:f1:1b:29:eb:30:5a:77:dd:13:20:27:c9:6d:b5:
74:a6:18:a5:99:19:5d:cb:25:1f:d9:37:48:fd:1c:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:96:00:DC:F9:B9:8D:88:F6:5B:07:CE:19:0F:8E:A5:F7:F4:A9
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/PgCWANz5uY2I9lsHzhkPjqX39Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.56.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e4:58:f9:ae:2f:91:2d:87:0a:6e:40:cf:73:f8:af:14:33:
a5:44:d8:a7:e5:4c:d6:14:00:83:cb:4d:74:80:ee:b3:0c:b5:
64:20:f8:8f:b1:02:a6:49:50:8a:11:70:a5:36:16:b3:31:8e:
17:89:3e:7f:f5:3e:75:2a:e5:6a:f0:72:4b:15:8f:a0:c2:be:
e3:55:8b:ee:17:2e:9e:9c:06:c9:62:3a:ff:83:00:9e:59:0d:
c8:82:40:f1:f8:30:31:a3:9c:d1:7d:7d:4f:59:a5:44:bc:b5:
93:90:49:c3:df:59:79:c5:36:3c:05:8a:fe:04:33:22:c3:e7:
31:f4:d1:02:84:da:4b:6d:fe:f7:27:c6:40:b3:e7:52:24:66:
60:87:eb:47:2e:44:b9:16:c0:91:01:13:6c:56:90:0d:6f:d6:
f5:c5:52:d1:cb:01:40:95:f8:69:8c:42:61:b5:3d:bc:57:e1:
c5:c0:6e:89:5e:cd:51:3c:c3:70:fe:02:e7:f1:d7:eb:f8:d7:
e3:03:54:80:7c:28:39:53:2f:9d:ad:c2:b1:4f:ad:d4:4d:1b:
cb:f9:39:20:8e:e9:f4:5e:4d:10:53:40:c0:37:4e:6e:a5:65:
47:32:48:13:3b:78:1a:93:3d:01:3e:56:3e:9c:21:84:b4:f8:
97:66:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:47 2026 by rpki-client