Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/DXccqbGebS1oWRZWwtuGkEM6mrE.roa
File: DXccqbGebS1oWRZWwtuGkEM6mrE.roa (raw, json)
Hash identifier: sAlKBAN/NVbEzYwknbZfL2yJYktB8VaTsi+xqD0lVdY=
Subject key identifier: 0D:77:1C:A9:B1:9E:6D:2D:68:59:16:56:C2:DB:86:90:43:3A:9A:B1
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019F5AE104D8D982F2205B49022735B4CA52
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/DXccqbGebS1oWRZWwtuGkEM6mrE.roa
Signing time: Mon 13 Jul 2026 09:48:43 +0000
ROA not before: Mon 13 Jul 2026 09:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56817
IP address blocks: 78.24.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:e1:04:d8:d9:82:f2:20:5b:49:02:27:35:b4:ca:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jul 13 09:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d771ca9b19e6d2d68591656c2db8690433a9ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:ae:29:f7:12:58:6c:b8:14:e4:bf:48:7d:
dc:3e:7c:34:35:69:d9:20:52:0a:68:68:f7:0b:09:
da:e4:c2:64:68:76:50:73:25:f0:b6:6d:fb:62:5c:
0c:b5:7a:31:5a:5a:87:4b:3c:52:11:4d:aa:d8:1d:
e3:eb:66:80:b6:15:b6:31:f1:c0:19:49:6e:5d:87:
58:38:02:f5:b0:e7:4e:36:2e:e4:68:ef:21:43:d8:
8f:8f:da:e4:50:ee:24:82:d6:74:1f:74:0c:d4:90:
fc:a3:6c:da:fa:07:37:d4:a6:13:f4:d3:d9:8f:1d:
2b:f4:f4:00:a5:32:60:81:c9:c5:49:02:6e:57:8e:
0d:8a:f6:f1:49:ac:ed:b4:db:0c:fe:c3:90:96:6b:
46:f2:ae:d7:51:07:0e:13:b2:ee:8a:de:45:be:ac:
65:43:b8:bc:f6:29:e8:e9:df:24:f6:b0:1a:84:db:
0e:ee:f0:91:d2:9c:07:d6:f0:d8:c1:61:8a:a9:37:
1c:1c:02:ff:7f:a1:20:c3:9e:ce:0e:ba:dd:3a:ff:
ec:1c:52:21:cd:70:72:d4:e9:34:47:ef:95:02:ac:
4e:26:ad:59:ab:49:34:ef:79:87:24:da:3b:bd:2d:
30:25:e9:61:29:85:8c:68:98:4f:30:31:17:9b:15:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:1C:A9:B1:9E:6D:2D:68:59:16:56:C2:DB:86:90:43:3A:9A:B1
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/DXccqbGebS1oWRZWwtuGkEM6mrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.125.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3f:de:e1:15:f3:3a:a1:aa:ec:78:d3:d1:ec:a8:77:2c:82:
09:fb:89:6f:3c:d6:6b:20:4f:5f:0c:57:15:74:cd:bb:00:16:
dc:ec:7d:e3:81:43:d1:c3:65:06:26:38:2c:07:9e:e4:43:4f:
5a:4f:d2:11:7d:77:3a:54:2c:9f:d5:b6:11:e2:c9:ed:bc:22:
59:9c:f2:54:de:54:24:69:3c:88:dc:ec:18:05:15:80:c3:ad:
e2:2c:21:4f:f2:79:7a:ed:f0:32:a8:aa:fe:bb:20:ef:2a:31:
67:ee:a7:01:61:bd:11:39:1f:49:82:ae:c7:aa:95:43:82:ae:
bb:9d:c1:7a:33:44:63:a8:16:59:f4:99:4a:f0:9c:4f:2f:8b:
90:54:62:5f:5d:95:09:c3:60:10:28:9a:8a:85:d5:1e:02:97:
4e:16:9d:4a:9d:77:3a:76:21:e1:d3:5f:ab:72:7e:4c:65:47:
77:c3:aa:4f:fd:5f:15:81:da:64:b6:c9:3c:c1:9e:96:20:e8:
b9:c2:17:08:f7:a8:af:52:e8:13:0a:71:32:d9:ed:cf:2c:e6:
f5:1c:37:a5:b5:cf:87:5f:61:04:e4:e9:e3:35:57:93:15:5e:
40:83:37:44:73:b0:d3:15:32:c3:82:4c:bd:ad:fc:cb:c8:1a:
3a:75:42:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9a4QTY2YLyIFtJAic1tMpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYwNzEzMDk0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDc3MWNhOWIxOWU2ZDJkNjg1OTE2NTZjMmRiODY5MDQzM2E5YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvyuKfcSWGy4FOS/SH3cPnw0NWnZ
IFIKaGj3Cwna5MJkaHZQcyXwtm37YlwMtXoxWlqHSzxSEU2q2B3j62aAthW2MfHA
GUluXYdYOAL1sOdONi7kaO8hQ9iPj9rkUO4kgtZ0H3QM1JD8o2za+gc31KYT9NPZ
jx0r9PQApTJggcnFSQJuV44NivbxSazttNsM/sOQlmtG8q7XUQcOE7Luit5Fvqxl
Q7i89ino6d8k9rAahNsO7vCR0pwH1vDYwWGKqTccHAL/f6Egw57ODrrdOv/sHFIh
zXBy1Ok0R++VAqxOJq1Zq0k073mHJNo7vS0wJelhKYWMaJhPMDEXmxVrrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA13HKmxnm0taFkWVsLbhpBDOpqxMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvRFhjY3FiR2ViUzFvV1JaV3d0dUdrRU02bXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThh9MA0G
CSqGSIb3DQEBCwUAA4IBAQAJP97hFfM6oarseNPR7Kh3LIIJ+4lvPNZrIE9fDFcV
dM27ABbc7H3jgUPRw2UGJjgsB57kQ09aT9IRfXc6VCyf1bYR4sntvCJZnPJU3lQk
aTyI3OwYBRWAw63iLCFP8nl67fAyqKr+uyDvKjFn7qcBYb0ROR9Jgq7HqpVDgq67
ncF6M0RjqBZZ9JlK8JxPL4uQVGJfXZUJw2AQKJqKhdUeApdOFp1KnXc6diHh01+r
cn5MZUd3w6pP/V8Vgdpktsk8wZ6WIOi5whcI96ivUugTCnEy2e3PLOb1HDeltc+H
X2EE5OnjNVeTFV5AgzdEc7DTFTLDgky9rfzLyBo6dUL+
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:00 2026 by rpki-client