Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cSXR2RrJhM332-fyOdZk_Ya78wA.roa
File: cSXR2RrJhM332-fyOdZk_Ya78wA.roa (raw, json)
Hash identifier: pwNVH6e6X7soNPbUn0hjtuNVZ/wKdgGsRqEtBG0oaA0=
Subject key identifier: 71:25:D1:D9:1A:C9:84:CD:F7:DB:E7:F2:39:D6:64:FD:86:BB:F3:00
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D295969F695CB310FD72F24ABA56768D5
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cSXR2RrJhM332-fyOdZk_Ya78wA.roa
Signing time: Thu 26 Mar 2026 08:53:38 +0000
ROA not before: Thu 26 Mar 2026 08:53:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57504
IP address blocks: 188.215.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:59:69:f6:95:cb:31:0f:d7:2f:24:ab:a5:67:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 08:53:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7125d1d91ac984cdf7dbe7f239d664fd86bbf300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:2b:88:1b:c6:5e:b9:e0:ec:5c:55:50:7e:
3c:37:e7:fa:0a:4e:37:c5:57:45:d1:ac:07:be:a7:
9b:e1:87:fe:57:34:fd:92:a1:ab:eb:b8:3c:a4:63:
49:7b:e0:ea:62:de:85:e8:b4:14:78:f7:c6:3d:34:
7e:38:6f:0c:1a:be:a9:57:53:08:d9:b0:a1:de:46:
d7:88:67:42:a3:83:2c:ae:16:ca:e3:f4:a5:54:71:
72:85:57:9c:99:f1:59:ea:57:fa:cf:47:47:32:a6:
e6:bd:04:0e:6e:76:af:aa:2c:11:c8:cb:e1:1f:72:
0d:73:10:75:51:bf:92:6a:55:9f:53:cf:eb:98:7c:
22:f8:54:6b:22:96:e2:30:22:73:cc:57:da:2e:c8:
fc:ff:28:18:8b:a1:5f:1e:4a:1d:05:37:2c:81:bd:
3e:90:a2:76:cf:0f:d0:0b:ae:66:07:25:7b:b3:06:
87:29:d8:88:70:43:87:c9:e5:24:29:1f:6f:a7:2b:
ea:c4:42:61:ab:82:ef:d5:9a:06:27:21:8f:03:66:
56:da:32:c7:15:6d:a8:b8:0e:88:6d:e3:cf:a4:de:
17:aa:e8:00:fe:21:aa:f6:85:9a:7d:60:84:e7:c7:
5f:bf:20:dc:ea:94:af:10:03:73:33:96:42:3c:d5:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:D1:D9:1A:C9:84:CD:F7:DB:E7:F2:39:D6:64:FD:86:BB:F3:00
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cSXR2RrJhM332-fyOdZk_Ya78wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2b:50:e8:55:85:d1:d8:6d:20:15:bb:0b:57:f7:9a:7b:90:
c2:ba:ff:a7:9c:50:08:26:65:e2:cd:7e:be:a1:f1:d4:65:3c:
84:40:9f:98:38:03:99:32:08:65:19:13:79:ce:f9:74:06:e4:
0d:a0:f1:7d:10:c8:04:89:65:64:5a:ae:1c:f7:a9:dd:f6:42:
ae:e7:98:72:71:8f:0b:96:2f:f2:6a:19:a3:ea:64:cb:45:03:
e2:2e:b9:38:dc:54:1c:92:3c:b6:d2:80:06:3f:f6:93:49:a7:
13:d9:5a:41:50:55:98:bc:c2:7f:a9:c3:39:e7:8c:63:48:e2:
ac:19:7a:34:0d:41:65:b2:d7:9f:46:60:26:44:24:46:56:86:
d2:cf:9c:aa:e7:7c:01:73:b7:f8:56:99:35:83:ba:21:28:68:
5b:39:c4:37:8c:91:9d:58:1e:95:d2:df:b3:f8:b3:8e:59:8f:
dc:f9:49:ec:5a:28:c8:ea:c3:72:92:77:38:07:3f:20:a0:04:
c2:89:32:3c:ac:0a:16:57:0f:b1:ec:7b:9e:b4:13:d1:0b:c8:
fd:f6:13:9e:d1:f2:87:69:ec:c9:fd:5a:7e:04:ea:c9:cb:90:
87:3f:88:eb:4b:ea:34:b7:db:94:2b:4e:5e:45:a2:48:b0:ca:
09:9c:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:40:02 2026 by rpki-client