Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0PNNJSyJ0wPA31PYleSlFpT7N-s.roa
File: 0PNNJSyJ0wPA31PYleSlFpT7N-s.roa (raw, json)
Hash identifier: HmWyLzP2r/zqsv+ZvZhPS3WfEMiDosKLvFdV2iSTVag=
Subject key identifier: D0:F3:4D:25:2C:89:D3:03:C0:DF:53:D8:95:E4:A5:16:94:FB:37:EB
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019F1C8A0000BC77BFE30261A9F66FFF5489
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0PNNJSyJ0wPA31PYleSlFpT7N-s.roa
Signing time: Wed 01 Jul 2026 07:17:13 +0000
ROA not before: Wed 01 Jul 2026 07:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.122.0/24 maxlen: 24
78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:8a:00:00:bc:77:bf:e3:02:61:a9:f6:6f:ff:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jul 1 07:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f34d252c89d303c0df53d895e4a51694fb37eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:8f:b1:4d:c9:36:79:65:42:22:fd:c2:f0:
37:22:26:09:f1:d9:22:90:4b:8f:80:79:d3:9d:c9:
ac:e7:fe:c6:71:93:f6:2e:f2:e2:7b:9b:87:1e:4c:
75:13:a0:f4:5c:ea:7c:35:af:42:8e:4e:bb:a8:13:
40:3e:b7:07:2c:9f:fe:04:f9:b8:99:95:47:42:9e:
38:eb:01:34:4b:87:6a:90:a6:db:fe:0a:f8:63:7d:
eb:4c:c5:c2:89:e5:fa:10:f4:ea:17:7f:fd:d0:a7:
ab:b2:55:73:ac:22:c4:78:cb:2e:70:a4:a6:aa:c3:
26:d8:7a:e8:6d:73:a5:ec:fa:95:5b:09:11:26:56:
04:5a:41:59:90:97:0e:83:ee:98:5a:71:bd:39:5b:
bb:46:9f:16:ee:34:87:ce:5a:39:5a:22:6d:68:c4:
df:3f:02:c7:79:92:32:d8:e4:13:04:b2:a2:bb:e1:
98:1a:f3:6d:a0:05:54:f2:aa:7e:7e:93:1e:6b:04:
cb:dd:5d:b6:9c:73:09:95:89:ce:78:ad:ad:9a:7c:
0b:c2:23:80:96:c7:51:0b:4f:9d:85:1c:02:d6:cf:
64:6a:01:22:91:86:4c:5f:30:19:e6:59:c5:49:56:
c4:c9:d9:1c:8d:5d:68:5e:a1:d9:17:63:8f:81:70:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:4D:25:2C:89:D3:03:C0:DF:53:D8:95:E4:A5:16:94:FB:37:EB
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/0PNNJSyJ0wPA31PYleSlFpT7N-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
78.24.124.0/23
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
51:3d:4e:60:d2:c7:72:0a:99:64:0e:36:24:53:3a:9a:e3:70:
6a:13:41:3e:91:a5:d6:2d:ec:16:b8:7a:d5:0f:83:23:31:c1:
89:47:05:00:65:2e:9b:9f:c1:fe:e0:62:72:62:58:0d:f0:7e:
70:7c:65:8a:91:a2:53:91:f6:79:74:5d:a9:77:3d:1a:5c:5d:
97:b9:07:7a:b1:49:7e:34:81:fd:d6:71:80:28:74:e9:e4:a2:
9f:05:a7:89:0b:c8:6d:c4:e6:9c:89:a8:b2:8f:7b:47:79:a7:
8e:9a:67:42:aa:43:00:a5:b7:e0:a5:26:ff:9b:9c:e3:7a:ff:
69:5c:df:16:d1:ab:20:bc:89:01:0e:80:29:62:4a:73:99:88:
5f:f1:71:13:8e:d6:4b:38:1c:95:72:4e:5b:ab:cf:d5:1b:8b:
70:bc:3c:b2:3b:93:2b:39:5c:b5:ca:0d:63:09:bb:69:c3:73:
f5:40:21:2d:54:fd:fb:9b:69:2f:a6:88:54:97:af:22:30:78:
b4:db:21:3c:79:45:32:69:c9:7a:0c:d4:84:af:2a:50:84:d1:
de:3c:0a:11:e4:4a:59:e3:99:cc:e1:7d:56:c8:62:71:fb:2c:
06:15:1c:1d:66:97:e0:00:be:52:a0:82:fd:f9:fc:ed:99:15:
96:f3:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:00 2026 by rpki-client