Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/XAznTblJegYcplVVQXaH3ppcMfw.roa
File: XAznTblJegYcplVVQXaH3ppcMfw.roa (raw, json)
Hash identifier: fZ68B4N01j08pH9TtDFmtDL2WFFY8CgbipokTmIzdqw=
Subject key identifier: 5C:0C:E7:4D:B9:49:7A:06:1C:A6:55:55:41:76:87:DE:9A:5C:31:FC
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 019C57835E21FEAAF27196878D94A647D557
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/XAznTblJegYcplVVQXaH3ppcMfw.roa
Signing time: Fri 13 Feb 2026 14:59:12 +0000
ROA not before: Fri 13 Feb 2026 14:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8855
IP address blocks: 212.78.0.0/24 maxlen: 24
212.78.2.0/24 maxlen: 24
212.78.3.0/24 maxlen: 24
212.78.4.0/24 maxlen: 24
212.78.5.0/24 maxlen: 24
212.78.6.0/24 maxlen: 24
212.78.7.0/24 maxlen: 24
212.78.9.0/24 maxlen: 24
212.78.10.0/24 maxlen: 24
212.78.11.0/24 maxlen: 24
212.78.12.0/24 maxlen: 24
212.78.13.0/24 maxlen: 24
212.78.14.0/24 maxlen: 24
212.78.15.0/24 maxlen: 24
212.78.16.0/24 maxlen: 24
212.78.26.0/24 maxlen: 24
212.78.28.0/23 maxlen: 23
212.78.28.0/24 maxlen: 24
212.78.29.0/24 maxlen: 24
212.78.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:83:5e:21:fe:aa:f2:71:96:87:8d:94:a6:47:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Feb 13 14:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c0ce74db9497a061ca65555417687de9a5c31fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:eb:53:fb:e5:80:54:89:51:ca:08:f8:5e:
83:24:a4:05:fe:95:35:a8:b1:68:44:2f:3f:0e:3b:
38:ea:63:89:b1:63:e7:ef:79:62:eb:57:39:1b:3c:
9e:8e:6c:89:15:1e:19:20:47:78:91:b1:4c:3f:74:
3e:cc:47:31:77:6f:76:b6:f9:0a:7b:33:8e:c7:79:
75:8d:85:96:d9:84:06:e2:7a:d0:29:02:80:02:d0:
61:54:f8:47:ab:f6:a4:d9:5c:1a:c5:79:f7:dc:07:
37:a0:d3:65:e1:a2:62:59:0f:1e:0e:17:40:61:07:
8e:8d:e1:1f:ee:96:00:4c:92:88:63:5e:31:23:ee:
b3:65:d6:98:4a:dc:a7:59:c1:9f:c0:b9:7d:50:a1:
94:8c:c9:08:c3:f8:34:89:53:51:b4:f9:b5:88:7e:
5c:21:89:d8:fa:1a:a9:d6:ee:6f:cd:72:70:10:c6:
4a:05:bf:9d:8a:47:ee:c4:f8:3a:8a:6d:ea:da:29:
ca:37:62:f1:43:26:26:e8:ea:61:4b:d1:5f:9e:75:
53:94:91:59:ee:55:d0:34:47:1c:30:e9:f5:87:d0:
bf:9e:30:4b:a6:37:d3:09:62:59:c8:d8:5a:39:63:
03:6c:18:a2:2b:31:a4:03:3a:4e:74:df:20:7f:f3:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0C:E7:4D:B9:49:7A:06:1C:A6:55:55:41:76:87:DE:9A:5C:31:FC
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/XAznTblJegYcplVVQXaH3ppcMfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.0.0/24
212.78.2.0-212.78.7.255
212.78.9.0-212.78.16.255
212.78.26.0/24
212.78.28.0/23
212.78.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8c:e6:f9:24:fc:87:e4:a7:46:91:af:e4:9a:fe:8a:3c:90:
47:59:39:7c:9e:d4:94:de:04:ef:a8:71:2e:03:d7:b6:24:5d:
df:6a:64:51:b8:98:5e:51:71:6b:7f:4b:08:9c:5f:c9:89:57:
2f:f5:74:4b:69:fe:7f:f1:cc:85:d2:f7:85:81:08:70:ce:f3:
02:1f:62:35:79:af:b0:46:d9:e1:aa:61:91:78:d0:a2:99:b5:
27:92:30:18:77:44:18:72:a6:e3:4d:cc:7c:d0:3e:0a:e8:c0:
fd:54:35:4a:69:5a:84:a3:94:ff:13:78:c6:97:55:6a:09:fc:
dd:fe:32:68:26:8d:86:93:f1:c2:bd:cd:1a:2c:74:45:e4:eb:
3f:25:0f:5d:4b:9a:0d:46:a0:11:76:1f:c3:59:59:6d:dd:90:
13:f0:99:9b:cc:13:06:7e:33:91:c1:de:77:8d:04:16:19:8e:
d6:08:a9:85:12:79:aa:fb:c6:75:01:a5:75:b2:8f:03:a5:a8:
00:ce:f3:82:34:5a:24:f3:9a:09:90:56:16:78:95:b7:ab:11:
fb:f1:20:5c:46:0c:a5:9e:ae:c5:f7:9c:7e:1d:c7:6f:42:7d:
41:82:00:95:ea:aa:37:fd:54:0f:f1:c4:af:1d:7c:ba:8b:a6:
b3:24:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:06 2026 by rpki-client