Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/giyDRFlMshEX2mtXW8ycxEHuiE4.roa
File: giyDRFlMshEX2mtXW8ycxEHuiE4.roa (raw, json)
Hash identifier: GsxXhWgqxP7o620A/bgtO9saQ52eqvJn9bjuxq3cp7I=
Subject key identifier: 82:2C:83:44:59:4C:B2:11:17:DA:6B:57:5B:CC:9C:C4:41:EE:88:4E
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A13EBAD590228644825BC034FA70D033E1
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/giyDRFlMshEX2mtXW8ycxEHuiE4.roa
Signing time: Thu 15 Oct 2026 08:43:14 +0000
ROA not before: Thu 15 Oct 2026 08:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12876
IP address blocks: 78.232.0.0/16 maxlen: 17
78.232.0.0/17 maxlen: 21
78.232.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:ba:d5:90:22:86:44:82:5b:c0:34:fa:70:d0:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Oct 15 08:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=822c8344594cb21117da6b575bcc9cc441ee884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:32:1c:7f:a9:43:39:9d:03:1f:4c:39:2e:
20:85:17:b2:50:0f:c9:bc:61:c5:36:1e:e1:76:95:
59:82:c0:1a:28:0f:20:14:22:9a:ed:ab:a1:11:a0:
d0:24:9d:90:57:20:e5:5f:db:34:84:b3:c3:5d:f6:
4f:84:d7:1f:3d:5a:0a:6b:c9:5f:7d:d6:73:13:67:
fa:93:a4:95:03:e5:70:af:7a:65:20:18:f4:cf:f3:
c0:0f:52:6f:5d:d2:67:6a:d4:9d:98:2c:ec:98:9f:
46:9e:3b:cc:70:08:e7:c4:6c:e9:fe:ab:f9:2c:fb:
3b:fe:3b:77:17:38:e2:a2:06:3e:13:02:be:fa:b7:
d7:9c:c3:6c:03:33:f6:34:de:de:cb:5a:b6:74:f6:
c1:38:f4:d1:77:c4:a7:07:fe:04:7e:74:70:59:fe:
93:81:77:95:86:60:5e:0f:f7:89:9c:7b:b3:ce:16:
97:8d:ce:97:ad:b3:43:5a:f5:82:fe:f7:c9:21:9a:
09:ad:1d:0b:45:c3:1f:90:f5:8d:78:74:24:a2:8f:
c1:3d:c6:22:eb:09:d4:c5:56:a5:a1:7f:ea:92:c6:
57:49:3c:74:eb:8f:2e:d0:33:60:d5:7a:36:9a:64:
f0:19:e9:60:4f:98:17:bf:0b:5b:7c:68:f9:1e:84:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:83:44:59:4C:B2:11:17:DA:6B:57:5B:CC:9C:C4:41:EE:88:4E
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/giyDRFlMshEX2mtXW8ycxEHuiE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:2a:99:ed:52:cd:28:34:49:08:31:ce:b3:0e:8b:8b:a8:25:
31:56:89:00:be:93:5f:f9:c3:ed:bb:b8:c9:ba:aa:fd:55:00:
aa:e9:4e:76:8e:47:93:86:27:07:0b:8f:7a:2c:e3:83:31:9e:
8c:7c:4f:97:08:ad:23:d1:22:38:9f:c7:66:4e:4c:58:80:02:
59:4f:ea:32:a9:5d:2a:15:08:69:3a:4d:d1:b0:cf:f3:aa:73:
c4:89:e7:46:7c:45:d7:1c:b8:8e:50:f7:e9:f3:d9:44:cb:9d:
aa:97:80:f0:c0:a9:b3:78:e0:4c:ec:eb:8f:7e:3e:55:f2:88:
6c:d8:d6:8a:8a:2c:8a:37:27:37:2f:19:5d:83:c8:da:48:d2:
f1:06:6e:45:0c:79:9a:7c:93:ca:60:ef:63:e4:02:4e:42:f6:
8b:38:b3:10:af:d6:a2:b8:80:bc:5b:f6:1e:c7:40:fd:8d:32:
44:e5:08:d2:58:09:ef:2b:ee:62:3b:4d:0a:fb:69:52:97:06:
2b:05:b0:98:e2:be:a9:ed:f2:a6:50:e7:7f:43:86:d3:05:cf:
89:2c:48:a0:80:1b:ee:cc:55:f0:0a:d3:ac:31:ab:f7:10:b4:
8e:fa:60:3e:5c:fc:37:4e:f0:da:55:fe:1e:36:12:8d:09:b0:
96:aa:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:27:20 2026 by rpki-client