Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/K6psmvZj1dJm7rliy5tYSDkTGdI.roa
File: K6psmvZj1dJm7rliy5tYSDkTGdI.roa (raw, json)
Hash identifier: ZUvNgSUKEBT7X30ekbcvLFsOKUeEximzhtI2xJnlNKI=
Subject key identifier: 2B:AA:6C:9A:F6:63:D5:D2:66:EE:B9:62:CB:9B:58:48:39:13:19:D2
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A08ABC24816640A885F1C14EE5BDCD9BC3
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/K6psmvZj1dJm7rliy5tYSDkTGdI.roa
Signing time: Thu 10 Sep 2026 09:53:00 +0000
ROA not before: Thu 10 Sep 2026 09:53:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58250
IP address blocks: 78.93.10.0/24 maxlen: 24
78.93.42.0/24 maxlen: 24
78.93.82.0/23 maxlen: 23
78.93.96.0/22 maxlen: 22
78.93.107.0/24 maxlen: 24
78.93.108.0/24 maxlen: 24
78.93.109.0/24 maxlen: 24
78.93.117.0/24 maxlen: 24
78.93.160.0/24 maxlen: 24
78.93.161.0/24 maxlen: 24
78.93.178.0/24 maxlen: 24
86.60.32.0/19 maxlen: 19
86.60.56.0/21 maxlen: 21
86.60.107.0/24 maxlen: 24
86.60.109.0/24 maxlen: 24
86.60.127.0/24 maxlen: 24
212.93.203.0/24 maxlen: 24
212.100.223.0/24 maxlen: 24
2a02:df4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:bc:24:81:66:40:a8:85:f1:c1:4e:e5:bd:cd:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 10 09:53:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2baa6c9af663d5d266eeb962cb9b5848391319d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:1f:a6:1e:48:c6:97:42:8f:e9:5d:2d:77:
1c:b5:e4:a3:c1:11:8c:86:8a:b2:ff:4b:62:ac:5c:
17:11:00:84:9c:4e:29:97:ab:49:c4:2f:a9:f8:42:
2a:72:69:2a:85:4e:c4:2a:75:b7:67:c7:fb:69:45:
dd:1d:08:ac:c4:dd:df:da:18:d2:47:e0:6c:6e:5e:
07:83:6a:72:de:56:9c:6d:a0:0b:67:95:34:a5:e5:
8a:7b:ce:e1:6c:74:8a:ac:c8:ec:38:df:8c:67:b3:
bf:1d:66:c4:98:f2:16:dd:90:06:1b:6f:78:a2:27:
cd:b8:c3:21:d8:3f:0d:8c:64:44:c4:49:f1:f6:d6:
b1:a3:24:5f:15:5c:51:cb:26:be:8a:35:42:c6:01:
3b:72:99:29:f9:c1:77:7f:c9:e7:3f:77:92:5e:4e:
2b:2c:15:1b:62:cf:12:18:18:34:5e:41:f4:3a:ea:
6f:b2:71:7b:89:9a:ed:96:6e:30:a4:58:b3:55:c3:
96:dc:6d:63:f3:11:d1:9c:80:4f:0c:46:4c:6f:c4:
77:55:39:7c:03:76:ea:93:e2:67:98:9c:99:c6:a2:
b2:43:b3:1f:6c:e4:f4:ad:7d:33:79:d5:86:5e:6a:
b1:77:09:6e:8f:ee:5c:d3:9d:39:ad:16:0e:d0:14:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:6C:9A:F6:63:D5:D2:66:EE:B9:62:CB:9B:58:48:39:13:19:D2
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/K6psmvZj1dJm7rliy5tYSDkTGdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.93.10.0/24
78.93.42.0/24
78.93.82.0/23
78.93.96.0/22
78.93.107.0-78.93.109.255
78.93.117.0/24
78.93.160.0/23
78.93.178.0/24
86.60.32.0/19
86.60.107.0/24
86.60.109.0/24
86.60.127.0/24
212.93.203.0/24
212.100.223.0/24
IPv6:
2a02:df4::/32
Signature Algorithm: sha256WithRSAEncryption
04:ec:81:4c:9c:62:1f:e5:54:42:59:25:92:7f:0b:fc:59:fd:
ee:4a:30:53:d3:08:cb:19:00:f8:4b:f4:47:3e:c1:1c:13:24:
e9:ea:2e:bd:9b:59:5a:09:5e:4f:e0:9b:2b:68:b7:57:f4:90:
ce:1d:03:30:75:7d:e6:4e:5e:f5:e3:bf:6c:5e:d5:1c:7b:81:
b4:3f:ba:df:98:88:cd:6e:79:34:8f:26:f5:3d:ef:f2:15:25:
fb:d3:82:0e:10:2f:8b:f3:41:46:7e:4e:ff:87:06:c5:dd:47:
d4:30:a3:07:10:f1:f1:1a:dd:9b:2c:db:a4:b7:23:b3:ae:ee:
4b:60:73:58:58:99:5c:f8:08:02:aa:e8:d4:37:78:da:0e:63:
0e:4a:98:12:dd:4e:6a:27:a8:d7:66:ce:2d:56:d1:a8:76:e1:
1f:5b:15:15:e4:36:0e:71:fa:e3:02:37:d7:21:99:9a:6e:0b:
ec:f2:f8:5b:54:0e:b6:f7:f9:e3:eb:02:03:a9:e0:f3:a4:bd:
40:94:7a:02:4a:c3:c8:1f:5d:03:f0:4b:37:ff:7a:19:b6:b2:
66:18:0d:3f:01:aa:5f:b9:3a:74:3e:be:04:e5:17:45:29:74:
e3:34:74:91:52:20:1b:49:85:c9:38:73:1f:e7:7d:71:78:f1:
61:06:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:41 2026 by rpki-client