Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa
File: 9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa (raw, json)
Hash identifier: n0OesgJjlawYzjCz9VRVHbTYEYTlkAqbiCq2tcO+Y9I=
Subject key identifier: F7:25:9D:E9:74:49:A4:F6:D7:53:A0:6D:43:86:F8:C9:C0:6A:B7:46
Certificate issuer: /CN=2649edb777d844f62df39829ff7b6675524c197c
Certificate serial: 019F753C00C674E6F59994540859FA643D17
Authority key identifier: 26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa
Signing time: Sat 18 Jul 2026 12:38:14 +0000
ROA not before: Sat 18 Jul 2026 12:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.108.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:3c:00:c6:74:e6:f5:99:94:54:08:59:fa:64:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2649edb777d844f62df39829ff7b6675524c197c
Validity
Not Before: Jul 18 12:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7259de97449a4f6d753a06d4386f8c9c06ab746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:63:b4:94:e7:fc:28:75:3e:d8:37:5a:8b:
3f:56:e2:70:23:a6:36:cc:8c:43:14:0a:6b:ff:95:
79:bb:56:9f:9e:3d:0e:bb:d0:bf:5d:a4:49:87:f8:
7e:4c:ef:58:1b:1d:8b:63:52:8f:7b:3c:12:ea:75:
81:f5:4e:dd:45:9b:72:91:25:57:64:38:27:19:16:
4f:fd:dc:47:33:81:ed:1a:f7:93:fe:eb:bc:81:46:
ef:d8:81:5f:25:9a:ae:a2:46:3c:a5:ba:38:62:e6:
4c:c9:af:29:b3:72:d2:fd:60:70:ba:25:db:29:86:
85:a7:e5:43:11:cf:32:1d:68:7c:ea:c1:ef:14:c8:
2a:c0:e9:62:04:64:f5:4f:08:5f:f9:d8:64:78:85:
e6:09:f9:04:86:ad:65:9f:c8:f3:b9:45:f7:78:56:
3c:c8:c7:c4:e7:5e:a1:6d:31:c4:74:5b:95:93:8a:
41:48:0b:7e:7d:dc:8d:8b:a8:fd:3a:f9:e6:74:20:
3b:5f:22:5b:88:e8:03:40:ac:df:d6:a8:f2:2c:63:
5b:d6:52:f5:f2:e7:56:e8:b0:91:e0:50:21:a8:84:
e2:9e:e5:a5:2d:f7:63:e8:e1:ac:4b:40:9a:1f:25:
cd:e6:fb:5a:bb:bc:32:30:89:77:08:ca:39:9e:46:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:9D:E9:74:49:A4:F6:D7:53:A0:6D:43:86:F8:C9:C0:6A:B7:46
X509v3 Authority Key Identifier:
keyid:26:49:ED:B7:77:D8:44:F6:2D:F3:98:29:FF:7B:66:75:52:4C:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkntt3fYRPYt85gp_3tmdVJMGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/9yWd6XRJpPbXU6BtQ4b4ycBqt0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e62df-26b5-4ed9-99d6-c70f72336622/1/Jkntt3fYRPYt85gp_3tmdVJMGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.126.0/24
Signature Algorithm: sha256WithRSAEncryption
69:53:e6:89:1d:50:6c:e6:15:98:5d:e4:fe:14:e7:c9:6a:9f:
05:b1:95:31:8a:3f:87:a5:c0:1b:93:7b:97:c4:a8:88:99:54:
f8:47:ee:7c:4b:55:ce:4f:a9:c2:48:00:a4:33:3f:06:dd:b7:
86:96:d0:94:f4:86:fc:4a:ce:7a:bb:02:6c:07:07:4a:d2:b8:
7e:5b:d0:c8:cd:04:42:1a:af:aa:43:76:c2:cd:b8:cd:e0:9f:
0c:58:ec:92:7e:39:18:0b:4c:55:e8:fd:71:ff:e4:c6:bf:47:
ed:19:c7:a0:06:54:57:f1:9a:6d:2f:c0:a3:6a:8c:bd:81:20:
2f:94:11:ae:e8:27:3b:96:d5:53:9d:f8:66:03:cd:4d:38:ec:
b5:6a:91:0d:a8:53:83:e8:44:f1:da:35:dd:34:82:be:67:b3:
80:ab:3a:df:d4:56:be:f6:d6:3f:95:5b:6c:d2:dc:de:35:85:
4e:4d:1b:98:5c:d6:65:0c:61:0a:b6:91:a4:1c:28:ff:62:9c:
18:16:9b:c0:3c:ea:f3:3f:59:7b:54:aa:50:dd:fc:17:9a:95:
39:bb:12:78:60:82:31:53:ea:46:f4:51:ae:85:a1:72:e1:00:
f4:be:13:71:12:fc:6f:04:ad:dd:a9:1c:be:9d:a0:4d:2c:9d:
3a:6d:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:41 2026 by rpki-client