Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa
File: DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa (raw, json)
Hash identifier: t842HyrQIRVBFuEeUO2AFrcs14Qa/f6iq2PJVi82Skk=
Subject key identifier: 0D:A0:75:2E:EB:A1:69:A0:CA:95:F7:B2:E1:4E:C5:0D:66:61:B6:84
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 01A0C8EC575BC8A07CF8C4F42C50321306E2
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa
Signing time: Tue 22 Sep 2026 11:42:07 +0000
ROA not before: Tue 22 Sep 2026 11:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214171
IP address blocks: 78.41.137.0/24 maxlen: 24
2001:39c0::/29 maxlen: 29
2001:39c0::/30 maxlen: 30
2001:39c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ec:57:5b:c8:a0:7c:f8:c4:f4:2c:50:32:13:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Sep 22 11:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da0752eeba169a0ca95f7b2e14ec50d6661b684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:f1:b9:ca:88:bc:97:8f:e7:6e:85:ff:05:
27:21:30:92:3f:5a:84:c5:ac:13:7c:e2:fb:47:54:
8e:4b:f3:8f:43:f0:ed:4d:b2:d5:ac:b3:78:20:bc:
1a:2c:37:39:92:df:01:6c:8d:db:e7:eb:84:3d:61:
57:18:a3:40:ce:56:0c:c8:96:93:ca:b5:99:89:e2:
e8:4f:e4:00:32:20:6f:32:ad:cc:0e:ec:90:3f:42:
b4:69:aa:e3:6d:98:6a:4a:88:d4:93:f8:8c:85:b7:
c0:52:6f:7a:b6:59:25:cd:c9:26:55:76:02:e1:d8:
2b:8f:c4:69:d2:68:2c:2c:f3:25:e6:98:ff:1d:0a:
44:9e:fc:a8:e8:76:6a:5f:53:51:1d:f8:7d:af:1e:
74:3b:66:ba:75:3d:9b:c9:32:18:6f:f3:bd:f7:67:
85:a2:d6:b1:46:b4:31:f5:d2:26:ac:cb:93:9c:72:
fa:19:fa:91:e4:d3:13:10:b3:36:4e:fa:35:76:dc:
ec:e8:e1:d1:2d:15:6f:69:31:e3:77:c1:2e:24:8f:
4f:ee:90:86:03:32:6f:44:9e:1e:a9:5e:59:fc:e0:
4c:80:47:1f:6b:94:83:cc:c7:da:d5:34:8b:6f:a0:
7e:64:9b:96:28:ac:81:d2:88:fa:36:6e:19:17:cf:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:75:2E:EB:A1:69:A0:CA:95:F7:B2:E1:4E:C5:0D:66:61:B6:84
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.137.0/24
IPv6:
2001:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:0f:0e:1b:6c:a3:e7:93:f8:4f:16:04:38:e1:d1:9d:19:88:
1c:5b:1a:64:b5:ff:fb:8f:16:54:82:c9:60:90:b4:ba:de:dc:
c1:6e:66:5d:1d:83:99:87:d2:e9:a1:6a:f7:de:78:ee:a6:ef:
13:4f:80:d3:c5:c2:4e:52:ab:6c:88:76:e8:68:c7:ce:10:e1:
84:c4:b2:41:29:c4:89:af:df:ef:c3:f9:2e:cd:aa:ba:55:38:
2e:44:1e:cd:a8:7b:2d:5c:aa:3b:7c:3b:26:be:29:a4:40:21:
17:2b:d4:3e:60:7b:2a:95:2c:58:83:11:f6:95:40:49:20:00:
63:a3:c4:ac:13:b4:ca:61:a0:24:51:54:d2:19:68:ef:30:6d:
bd:e0:2d:ad:19:2d:23:50:e1:5d:60:f1:6a:ac:bb:54:84:8f:
8f:bb:70:e7:e7:46:f6:c5:1a:c4:84:9f:d5:34:9b:5e:df:b5:
44:4f:6f:b3:2c:12:54:79:67:1d:fa:78:61:2b:3f:d1:60:5c:
e0:1b:e5:c8:76:17:b0:e9:ef:63:4d:80:f1:1b:60:db:b4:3d:
52:df:e9:a1:11:1f:8f:c2:52:4c:0f:21:a8:82:9d:ea:72:4d:
bd:9b:0e:22:da:48:d9:02:8b:bf:36:1a:4f:2e:e6:76:46:e4:
4f:b5:7d:40
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDI7FdbyKB8+MT0LFAyEwbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjYwOTIyMTE0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGEwNzUyZWViYTE2OWEwY2E5NWY3YjJlMTRlYzUwZDY2NjFiNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHDxucqIvJeP526F/wUnITCSP1qE
xawTfOL7R1SOS/OPQ/DtTbLVrLN4ILwaLDc5kt8BbI3b5+uEPWFXGKNAzlYMyJaT
yrWZieLoT+QAMiBvMq3MDuyQP0K0aarjbZhqSojUk/iMhbfAUm96tlklzckmVXYC
4dgrj8Rp0mgsLPMl5pj/HQpEnvyo6HZqX1NRHfh9rx50O2a6dT2byTIYb/O992eF
otaxRrQx9dImrMuTnHL6GfqR5NMTELM2Tvo1dtzs6OHRLRVvaTHjd8EuJI9P7pCG
AzJvRJ4eqV5Z/OBMgEcfa5SDzMfa1TSLb6B+ZJuWKKyB0oj6Nm4ZF889nwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA2gdS7roWmgypX3suFOxQ1mYbaEMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvRGFCMUx1dWhhYURLbGZleTRVN0ZEV1podG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATimJMA0E
AgACMAcDBQMgATnAMA0GCSqGSIb3DQEBCwUAA4IBAQB9Dw4bbKPnk/hPFgQ44dGd
GYgcWxpktf/7jxZUgslgkLS63tzBbmZdHYOZh9LpoWr33njupu8TT4DTxcJOUqts
iHboaMfOEOGExLJBKcSJr9/vw/kuzaq6VTguRB7NqHstXKo7fDsmvimkQCEXK9Q+
YHsqlSxYgxH2lUBJIABjo8SsE7TKYaAkUVTSGWjvMG294C2tGS0jUOFdYPFqrLtU
hI+Pu3Dn50b2xRrEhJ/VNJte37VET2+zLBJUeWcd+nhhKz/RYFzgG+XIdhew6e9j
TYDxG2DbtD1S3+mhER+PwlJMDyGogp3qck29mw4i2kjZAou/NhpPLuZ2RuRPtX1A
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:59 2026 by rpki-client