Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/It-qSuqg1nORN9qz8qJhvVHh0Tc.roa
File: It-qSuqg1nORN9qz8qJhvVHh0Tc.roa (raw, json)
Hash identifier: KxdlqZXgyK58HjjchXGa22KcxK8WWRG2Djtkh0Q+II4=
Subject key identifier: 22:DF:AA:4A:EA:A0:D6:73:91:37:DA:B3:F2:A2:61:BD:51:E1:D1:37
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0F637A0823B45735E6F2CBA2951E0ED70
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/It-qSuqg1nORN9qz8qJhvVHh0Tc.roa
Signing time: Thu 01 Oct 2026 06:47:15 +0000
ROA not before: Thu 01 Oct 2026 06:47:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.122.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:37:a0:82:3b:45:73:5e:6f:2c:ba:29:51:e0:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Oct 1 06:47:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22dfaa4aeaa0d6739137dab3f2a261bd51e1d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:54:6e:e4:6a:8d:04:03:37:7d:84:20:9e:
ec:a2:4b:48:f1:33:e7:06:dc:43:4a:0e:b6:9a:e2:
8c:f1:b8:91:a3:9a:9d:22:9b:46:b7:86:80:12:4d:
04:24:33:8e:02:20:11:b3:dd:e9:3d:04:1f:bc:05:
59:f2:14:a2:70:fe:da:1f:c4:59:3f:d4:cd:c0:3f:
5b:a7:7f:b6:51:1e:79:22:47:4b:b2:b5:5a:b6:c1:
2a:1d:73:56:ba:2b:e6:8f:dc:ec:14:a6:d7:1f:d0:
c1:04:d4:5c:a8:09:eb:c9:90:1f:71:47:a4:ab:fa:
fd:f4:e0:48:36:24:bf:28:76:e3:00:2d:e3:42:44:
52:09:c2:0a:f2:89:f2:ea:1e:6b:f5:0b:48:17:e7:
61:ea:4c:3b:f2:19:7c:78:31:c5:88:0e:16:7e:43:
01:8d:a2:ed:87:9b:51:14:6d:12:1a:06:9a:47:cd:
ce:91:da:6b:e3:21:35:4d:08:17:34:1f:92:0c:e8:
c2:1a:bc:a4:7a:e5:f2:c2:f2:f6:70:39:0d:85:d2:
51:3d:13:75:75:17:a7:32:3e:b6:86:ca:3a:dd:06:
2e:23:ea:55:b1:31:3d:1d:07:e5:01:25:bf:c9:cf:
88:5b:df:80:25:90:bc:6d:76:52:fe:7d:3b:da:bc:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:AA:4A:EA:A0:D6:73:91:37:DA:B3:F2:A2:61:BD:51:E1:D1:37
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/It-qSuqg1nORN9qz8qJhvVHh0Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
78.24.125.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
24:04:39:1f:fb:c8:1a:c2:4f:12:c0:36:32:2f:c3:26:18:c9:
ac:d2:ad:2c:2e:50:51:6c:59:f8:39:45:37:5d:63:80:4d:5c:
0f:72:7d:f9:1c:9a:28:09:cf:65:88:7d:7d:6a:62:66:dd:38:
20:d5:eb:29:fc:c3:65:84:ca:ba:98:60:bd:8e:45:51:5c:5d:
98:8b:c2:2a:de:82:2c:75:39:d3:47:f7:5f:68:df:c6:ba:61:
39:48:7e:e3:e1:fd:31:89:f4:30:91:ba:c4:62:9c:63:27:4f:
f3:07:07:f6:9f:b5:34:5a:0a:50:ba:59:d3:1d:1c:45:7e:85:
c9:2f:5f:a3:13:b5:05:55:d1:08:cc:58:d9:ad:ba:c2:b0:f1:
a3:b7:3e:34:91:25:9d:02:7c:8c:79:d8:0d:aa:d1:95:17:1a:
24:6f:31:03:77:bf:c8:d3:7c:f4:11:55:32:ac:16:a3:6d:2c:
aa:35:d9:6a:39:0d:ce:77:d2:38:be:3e:cb:d9:d4:37:0e:c8:
66:16:d8:05:83:43:b8:7a:f1:81:b6:97:95:cf:12:74:00:cb:
e4:57:de:fe:98:b2:3a:f4:c4:25:1a:5b:9b:f6:cd:6f:35:7a:
dc:43:94:ba:36:83:4d:8e:61:06:42:92:41:ab:83:91:1d:56:
17:2e:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:46:06 2026 by rpki-client