Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/X-SEnu-ynMclRtN2HktF246DYzI.roa
File: X-SEnu-ynMclRtN2HktF246DYzI.roa (raw, json)
Hash identifier: AKw9KoULoyhdutpJCQCwClZamivuew9b5ZyAy07A8JU=
Subject key identifier: 5F:E4:84:9E:EF:B2:9C:C7:25:46:D3:76:1E:4B:45:DB:8E:83:63:32
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01A18DD938B85A42ECAEC34C935DF5FAF828
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/X-SEnu-ynMclRtN2HktF246DYzI.roa
Signing time: Fri 30 Oct 2026 17:26:25 +0000
ROA not before: Fri 30 Oct 2026 17:26:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 78.153.143.0/24 maxlen: 24
78.153.145.0/24 maxlen: 24
78.153.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:d9:38:b8:5a:42:ec:ae:c3:4c:93:5d:f5:fa:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Oct 30 17:26:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe4849eefb29cc72546d3761e4b45db8e836332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:ed:02:56:9f:1b:d7:a7:63:e6:59:21:80:
91:7f:d7:65:bb:ee:55:45:ee:21:85:e8:8b:8f:49:
1b:e1:87:c7:42:f1:1d:6a:15:d1:e1:0e:5c:79:61:
96:b0:dd:0c:6f:b9:c7:b2:e0:1d:38:99:57:30:19:
fd:77:9e:a0:fb:d5:86:11:8b:c3:9f:9f:2d:37:54:
48:f2:e5:69:60:1b:a4:b5:36:94:54:8f:da:82:06:
52:5b:62:cf:c4:34:21:3d:cf:d2:40:f0:2f:cb:6d:
6a:54:9a:d6:ca:6b:34:98:f5:0f:0e:99:9b:0b:9d:
80:16:6a:4c:89:8f:22:75:50:f1:10:1a:d0:b1:b4:
3d:7f:4e:ba:bf:48:14:f2:11:0f:d6:2f:59:4a:11:
4b:8d:e9:01:12:de:49:fa:2a:a2:ef:89:b8:f4:2e:
89:23:53:2e:75:2e:b1:16:c8:8e:33:60:6c:27:fa:
8b:3a:37:b3:ae:f5:18:fe:5a:00:5a:dc:50:53:7f:
a5:af:c1:29:15:d2:a8:da:bf:2f:b8:0a:c6:5e:46:
b4:fa:55:3e:10:ec:8e:af:7b:44:d2:24:bf:3d:1c:
4c:5c:21:e3:32:f8:bf:f4:f0:5a:89:c3:13:5d:a3:
6a:c2:46:e3:93:ea:d8:52:4c:1b:87:19:35:02:0d:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:84:9E:EF:B2:9C:C7:25:46:D3:76:1E:4B:45:DB:8E:83:63:32
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/X-SEnu-ynMclRtN2HktF246DYzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.143.0/24
78.153.145.0/24
78.153.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:cd:a3:0c:01:0d:a4:2f:87:4f:2e:d4:b1:0a:b8:20:64:a6:
51:44:2b:cf:1e:09:85:59:1a:86:d7:fc:bc:a7:b0:9b:70:8a:
af:af:a6:95:98:c7:39:25:38:9f:20:c5:ae:9e:c7:3e:d0:bc:
f4:c9:d1:40:c5:97:8e:74:1e:ce:d9:98:6c:98:e5:0c:8d:a1:
0f:c2:8e:4f:4e:eb:04:4c:66:3c:52:d5:42:6f:45:fd:75:ac:
d1:30:56:ac:23:51:fe:ec:41:87:fc:5c:97:b5:c3:d8:ae:e4:
2e:1d:24:f0:51:2c:4b:ca:f7:fd:07:e1:d8:e5:e6:64:0f:3b:
c5:79:70:ec:4f:9f:d4:bc:10:7e:70:bd:9e:fc:d8:72:ba:ad:
48:43:e3:44:48:b7:8a:f4:a4:71:51:93:e5:26:cb:b3:e5:94:
7a:bc:01:5d:16:8d:31:9c:91:21:1f:4e:3b:87:70:9e:fd:77:
9a:6f:8a:05:a4:47:06:ec:58:84:2a:a2:ba:0c:8f:a7:96:42:
68:a1:28:58:96:4f:49:f5:bc:8f:2c:29:16:8a:8e:57:56:5d:
9f:29:94:1b:4b:24:bc:0c:d0:75:df:b0:51:22:11:f5:56:ba:
37:c0:f2:12:6e:bc:c8:fa:41:bc:e9:1f:63:dd:7d:f0:be:aa:
0e:1e:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:02 2026 by rpki-client