Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa
File: UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa (raw, json)
Hash identifier: kjmvN7g9NCX/FlWfDB0I3iBUPCm9EjnhIQSPXHhQftQ=
Subject key identifier: 50:2E:2D:67:98:64:25:43:A9:02:7C:31:69:BA:53:83:24:36:10:4F
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019F7EE217A53D2610EA08507AB9672AC1BD
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa
Signing time: Mon 20 Jul 2026 09:36:14 +0000
ROA not before: Mon 20 Jul 2026 09:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197173
IP address blocks: 78.108.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:e2:17:a5:3d:26:10:ea:08:50:7a:b9:67:2a:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jul 20 09:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=502e2d6798642543a9027c3169ba53832436104f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:34:48:df:ca:06:52:b1:4a:c5:bf:60:e7:
75:94:92:2b:7b:b9:27:3c:52:8a:f8:6a:26:35:ef:
e9:98:52:6b:43:f0:b6:e6:99:4c:1b:af:3e:bc:8b:
7e:cd:a7:54:cf:64:b7:b8:70:f8:1c:a3:fa:16:61:
cb:e7:91:2f:d9:d1:22:51:c3:5e:e8:23:79:00:2a:
96:61:93:52:6e:a7:8f:de:57:40:b0:98:6d:6e:6f:
82:cf:90:bd:a3:be:ba:14:cb:a3:47:99:a4:2e:b5:
6f:b4:43:d8:a0:1d:7d:09:59:bb:0c:33:07:52:b5:
09:ca:19:5b:b7:72:90:d8:f6:96:f4:df:0e:56:21:
c4:20:61:7d:1f:23:51:36:3a:2b:42:33:a9:4e:ac:
81:8f:54:df:97:61:ae:2e:01:53:54:67:fa:33:90:
ba:46:7e:79:c2:78:47:7a:93:39:9f:35:cf:8e:de:
f8:d2:5b:f1:59:4e:b9:ce:e0:10:0b:4a:07:fd:e3:
2d:2c:93:a0:de:a0:3b:72:97:06:3f:07:ca:a2:59:
2e:65:9c:a4:40:e6:dd:15:09:eb:e6:07:79:5a:d6:
55:9b:12:1c:f3:be:61:57:09:a6:f8:27:4d:13:64:
1a:91:65:2c:ec:6f:05:0c:81:01:d0:a2:6e:ba:36:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2E:2D:67:98:64:25:43:A9:02:7C:31:69:BA:53:83:24:36:10:4F
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/UC4tZ5hkJUOpAnwxabpTgyQ2EE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ee:c2:22:5e:92:ef:e4:75:95:cd:d9:93:77:c5:38:dd:84:
ec:5a:2f:a0:16:70:64:38:f8:33:4d:66:61:04:20:6b:34:2a:
79:44:75:e0:3e:27:e3:4a:a6:22:47:25:bc:ca:ca:cd:c0:19:
b4:05:43:c5:a4:19:ae:09:38:d0:3c:61:d8:ca:6e:5f:76:d4:
36:d9:c4:09:84:30:a7:23:47:fd:29:61:c8:bf:6f:ef:8c:13:
0e:e4:00:aa:b3:6f:3f:3b:17:c6:9d:32:fb:cb:f5:0a:95:a7:
9c:04:4b:78:70:43:62:be:1e:c9:b8:4b:c0:8d:35:21:e4:57:
b7:ec:63:f1:d0:96:38:25:9c:ee:52:a0:50:17:55:28:3d:fc:
8b:9b:0e:4d:09:f2:d5:c7:61:88:90:d0:42:55:6f:88:fe:3f:
41:8b:b3:4b:85:3e:ec:02:b3:3d:98:ea:62:82:52:7c:93:8c:
20:e4:0e:ab:ba:89:a0:59:47:cd:2e:00:9a:63:8e:1d:49:dd:
2b:5b:1c:3a:75:3b:a2:67:b2:0d:39:79:dd:fa:d6:2e:59:f2:
0c:ec:35:ba:4f:e7:ec:f8:0e:b3:d0:3d:42:38:a1:94:62:82:
70:30:48:ee:82:7d:d6:7f:de:0e:14:d7:f2:92:fd:44:02:08:
d8:40:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:22 2026 by rpki-client