Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/S5wgrs55mUukAL2woTkoggOUw2s.roa
File: S5wgrs55mUukAL2woTkoggOUw2s.roa (raw, json)
Hash identifier: +sjSrHKEHcONahJ8eq56SxZon63wWpf9HC2Ed/+OC3E=
Subject key identifier: 4B:9C:20:AE:CE:79:99:4B:A4:00:BD:B0:A1:39:28:82:03:94:C3:6B
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019F90272DB400EAF21ABCAE39C161D9FBAE
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/S5wgrs55mUukAL2woTkoggOUw2s.roa
Signing time: Thu 23 Jul 2026 18:05:14 +0000
ROA not before: Thu 23 Jul 2026 18:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42330
IP address blocks: 78.41.136.0/24 maxlen: 24
2a13:3840:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:27:2d:b4:00:ea:f2:1a:bc:ae:39:c1:61:d9:fb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jul 23 18:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b9c20aece79994ba400bdb0a13928820394c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:f1:c1:2d:31:ee:dd:99:40:0c:a9:2b:81:
3b:3a:97:17:c4:a5:6b:21:80:60:ab:2e:02:ee:e0:
5d:6e:33:63:0d:67:2b:7f:11:a3:12:4c:41:b3:cc:
d7:42:d7:d5:af:01:c7:fe:da:91:c0:fc:41:01:d1:
81:ee:9e:10:f2:98:71:be:1a:26:f5:57:f3:65:01:
d7:09:f0:73:04:52:07:71:00:13:36:5b:c2:f0:c3:
5b:80:85:a0:d1:85:30:02:14:71:26:69:25:49:07:
5a:ed:bd:50:6e:93:67:b5:7b:ab:00:1c:5d:60:ef:
77:0a:f6:05:52:69:b4:c8:e0:aa:1b:b1:2c:80:1e:
39:24:78:95:8b:0b:e7:90:a6:dd:91:f1:3e:3e:8b:
ca:be:82:f8:f2:5f:1b:3c:bb:a2:7c:7d:46:ae:c4:
e0:8a:eb:bd:64:20:7f:72:3d:91:b1:4b:3e:81:d3:
eb:f3:ac:43:14:39:60:cc:ff:c9:8b:d7:2e:cd:56:
3d:52:05:c4:40:40:0b:a9:de:c9:ea:07:0b:ca:03:
14:79:38:7a:07:2c:91:9b:bf:65:25:80:d9:89:42:
5d:21:32:3e:05:b2:3a:c2:82:00:65:f2:05:60:13:
f8:fe:e0:a8:b2:4f:aa:fd:62:85:2c:8e:f9:38:67:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:20:AE:CE:79:99:4B:A4:00:BD:B0:A1:39:28:82:03:94:C3:6B
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/S5wgrs55mUukAL2woTkoggOUw2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
IPv6:
2a13:3840:4000::/34
Signature Algorithm: sha256WithRSAEncryption
89:44:52:58:00:0c:ba:83:48:56:48:6f:b4:8a:f0:87:9b:5c:
2d:17:ff:c2:6d:29:58:9b:07:e8:85:0a:0b:c1:0f:ee:6f:85:
bc:b4:6b:1b:98:9a:7e:9a:08:ff:2b:15:4e:fa:c8:2c:75:b3:
1d:2c:83:56:78:63:7f:ae:89:cc:a8:75:77:9c:90:ee:5e:87:
f0:04:14:94:61:10:16:70:aa:64:dc:16:5b:ec:92:48:97:e5:
ea:9d:a4:65:0a:57:1d:94:80:46:37:d4:eb:68:d8:25:57:5d:
67:35:07:61:5b:2e:02:b4:b8:1d:04:37:f7:b2:27:32:2d:a3:
fa:cd:e6:9f:57:63:ea:24:4f:6e:e3:fd:07:98:c5:a0:40:08:
53:ad:88:4c:0e:80:69:ed:5d:5b:17:7f:27:8f:e8:a7:48:a5:
ec:2c:14:c7:27:d0:67:6d:68:ad:ba:5f:5d:58:aa:3f:3a:ae:
d4:5c:a2:5c:e0:3c:14:f9:6f:40:11:4d:e7:69:e2:5a:f0:99:
0e:ea:5c:11:56:35:27:b3:74:d7:6a:2b:52:e2:a8:d4:1c:6a:
42:f0:f0:85:bf:74:43:f3:98:d1:c3:57:40:da:9d:0c:77:34:
94:d2:ce:0d:af:37:c6:f0:0d:44:7d:a0:9e:bf:d4:2b:1b:ce:
87:3f:77:79
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ+QJy20AOryGryuOcFh2fuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjYwNzIzMTgwNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjljMjBhZWNlNzk5OTRiYTQwMGJkYjBhMTM5Mjg4MjAzOTRjMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOvxwS0x7t2ZQAypK4E7OpcXxKVr
IYBgqy4C7uBdbjNjDWcrfxGjEkxBs8zXQtfVrwHH/tqRwPxBAdGB7p4Q8phxvhom
9VfzZQHXCfBzBFIHcQATNlvC8MNbgIWg0YUwAhRxJmklSQda7b1QbpNntXurABxd
YO93CvYFUmm0yOCqG7EsgB45JHiViwvnkKbdkfE+PovKvoL48l8bPLuifH1GrsTg
iuu9ZCB/cj2RsUs+gdPr86xDFDlgzP/Ji9cuzVY9UgXEQEALqd7J6gcLygMUeTh6
ByyRm79lJYDZiUJdITI+BbI6woIAZfIFYBP4/uCosk+q/WKFLI75OGd12QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFEucIK7OeZlLpAC9sKE5KIIDlMNrMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvUzV3Z3JzNTVtVXVrQUwyd29Ua29nZ09VdzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQATimIMA4E
AgACMAgDBgYqEzhAQDANBgkqhkiG9w0BAQsFAAOCAQEAiURSWAAMuoNIVkhvtIrw
h5tcLRf/wm0pWJsH6IUKC8EP7m+FvLRrG5iafpoI/ysVTvrILHWzHSyDVnhjf66J
zKh1d5yQ7l6H8AQUlGEQFnCqZNwWW+ySSJfl6p2kZQpXHZSARjfU62jYJVddZzUH
YVsuArS4HQQ397InMi2j+s3mn1dj6iRPbuP9B5jFoEAIU62ITA6Aae1dWxd/J4/o
p0il7CwUxyfQZ21orbpfXViqPzqu1FyiXOA8FPlvQBFN52niWvCZDupcEVY1J7N0
12orUuKo1BxqQvDwhb90Q/OY0cNXQNqdDHc0lNLODa83xvANRH2gnr/UKxvOhz93
eQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:07 2026 by rpki-client