Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/na7BUBKl3VlRJ_zTU4cN_PMBCZg.roa
File: na7BUBKl3VlRJ_zTU4cN_PMBCZg.roa (raw, json)
Hash identifier: KPiFxHGddZL2Hp+7erKdVI9YMLGdf7NNuz0dvL+eOYw=
Subject key identifier: 9D:AE:C1:50:12:A5:DD:59:51:27:FC:D3:53:87:0D:FC:F3:01:09:98
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D8673F8694CA430E903A66DBDEE55C13E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/na7BUBKl3VlRJ_zTU4cN_PMBCZg.roa
Signing time: Mon 13 Apr 2026 10:47:20 +0000
ROA not before: Mon 13 Apr 2026 10:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 217.78.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:73:f8:69:4c:a4:30:e9:03:a6:6d:bd:ee:55:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 13 10:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9daec15012a5dd595127fcd353870dfcf3010998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:2e:7a:d0:6b:1c:76:9e:fd:9b:60:9b:c7:
58:78:90:ff:1c:6f:3b:ce:b4:69:33:f9:38:7a:0c:
94:8c:8b:54:af:31:eb:b9:66:87:78:b8:91:ec:8c:
a5:f6:70:92:0d:44:82:3f:3c:cd:4e:76:72:85:37:
bc:cd:8d:c0:af:41:fb:e8:7a:b3:81:47:ec:75:db:
8b:50:43:bd:9e:02:75:3e:68:cf:43:24:29:5e:56:
c8:db:02:d1:42:52:7a:e1:86:dd:e5:0c:50:d8:d1:
37:de:53:66:69:fa:77:54:71:aa:f8:8b:ed:57:d0:
9c:63:8e:4a:54:98:2e:5e:62:6d:96:1d:cb:d9:86:
0d:26:ee:a1:6a:03:0e:f1:bb:d1:a7:e4:31:2a:a7:
d7:a0:e3:e8:a8:ef:22:90:f2:e0:d8:b5:63:d4:97:
1a:2f:f2:d6:13:70:4c:e8:26:07:d3:67:ec:c3:b8:
8f:c7:a2:bb:2c:88:1c:55:e7:17:85:5c:cc:de:7b:
5f:bd:99:a6:bc:50:a0:0f:a6:fa:9d:3c:ca:6d:cd:
2d:d2:86:ea:20:9c:70:ba:86:52:30:16:46:de:32:
42:33:53:9a:49:58:51:d5:4f:b6:51:c4:bc:d7:dc:
e9:59:26:37:57:ae:52:77:86:cf:3c:fc:cb:7e:13:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:C1:50:12:A5:DD:59:51:27:FC:D3:53:87:0D:FC:F3:01:09:98
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/na7BUBKl3VlRJ_zTU4cN_PMBCZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.239.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9a:4e:18:4f:38:98:51:79:ae:49:a8:9f:39:96:3a:43:e4:
e6:d0:f4:e9:3e:c1:08:f6:9b:0b:ec:0d:43:ab:a5:07:b2:5b:
a4:f8:b1:b9:9c:0c:e4:3e:81:cb:35:4c:bc:5b:6b:5b:cd:0c:
5b:47:20:6a:c3:f7:85:cd:61:54:0c:66:c2:57:71:29:e8:a1:
f9:3a:d7:0a:4b:44:7b:12:71:a5:80:c7:df:41:12:65:5c:81:
38:35:d7:cc:d1:ad:2b:71:71:2b:4c:96:30:1e:8c:eb:8c:3d:
11:8c:8f:5e:14:db:14:ee:b0:bb:dd:2e:db:44:39:8f:c6:ae:
53:7d:cf:f2:b3:78:f2:10:66:e4:b2:71:28:7c:d1:66:94:c9:
f8:7b:8f:45:5e:c7:eb:37:18:95:23:18:a3:63:b4:34:d4:d9:
6b:60:81:68:59:d3:f3:d3:47:e6:0b:a0:f8:97:ef:38:7f:87:
a5:ed:67:16:17:e4:78:1a:5b:6c:ad:f8:f6:78:b0:d3:ab:f5:
e7:4b:c2:9c:a5:31:81:9e:6e:7c:5f:32:c1:80:b6:0d:9f:58:
ac:c9:63:c5:61:7c:cc:25:fe:21:2a:dc:02:e1:67:b6:1c:63:
ac:65:45:b3:89:5b:58:7d:81:62:0b:27:cb:01:91:d8:19:1f:
db:9f:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:23 2026 by rpki-client