Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Peaumdb25XazmcYjplBOCOqSedU.roa
File: Peaumdb25XazmcYjplBOCOqSedU.roa (raw, json)
Hash identifier: 7P6L/I/q7iUz/t5OMdmE6REoUiJWumkQMuqFIztH5Bg=
Subject key identifier: 3D:E6:AE:99:D6:F6:E5:76:B3:99:C6:23:A6:50:4E:08:EA:92:79:D5
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D0A13E6EEFD4ADAD2A0BDE5397F49A022
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Peaumdb25XazmcYjplBOCOqSedU.roa
Signing time: Fri 20 Mar 2026 07:09:29 +0000
ROA not before: Fri 20 Mar 2026 07:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 78.24.122.0/24 maxlen: 24
78.24.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:13:e6:ee:fd:4a:da:d2:a0:bd:e5:39:7f:49:a0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Mar 20 07:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de6ae99d6f6e576b399c623a6504e08ea9279d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:fb:b4:f5:ae:d3:c4:1c:bc:a9:83:9a:ef:
e1:25:b2:e6:86:db:65:d3:2e:fc:37:af:9b:ce:1a:
63:62:7b:b7:04:2e:50:1b:9b:89:0d:59:57:e2:64:
c5:19:92:87:70:c9:55:19:5b:64:17:5a:d6:50:46:
6d:72:cb:7a:0d:c6:9f:f1:ae:e5:ba:52:94:68:93:
85:7d:12:3f:41:91:3a:25:27:df:8c:70:15:4e:f5:
a1:c1:49:1d:9f:bc:66:d8:1d:eb:6f:18:8c:18:61:
45:58:13:25:db:76:11:95:f1:d1:c6:8e:51:7a:73:
b8:b1:d4:4c:de:51:ab:5c:7e:2c:79:2e:fa:5a:00:
c5:a4:54:69:96:e3:2a:bf:39:16:98:e3:20:3f:bf:
55:9a:8a:14:ba:d9:a2:e8:25:84:f2:85:8b:ba:0e:
2e:74:d8:86:ba:7f:f0:bb:96:33:2b:76:55:8c:b2:
43:28:8e:8c:06:db:12:e0:82:88:8f:3f:6e:5e:53:
05:c0:6c:01:7b:b8:1b:7e:c9:9e:6f:7e:f5:2b:43:
dd:b0:9b:c0:a0:65:b9:1e:ad:fb:23:ed:c0:a4:25:
a4:f1:a8:d5:70:28:70:a2:1c:c6:18:d4:d1:f4:6b:
d4:4d:9d:8c:db:3b:7c:d1:05:28:6d:73:bf:66:be:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:AE:99:D6:F6:E5:76:B3:99:C6:23:A6:50:4E:08:EA:92:79:D5
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/Peaumdb25XazmcYjplBOCOqSedU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:69:3d:be:a7:0c:10:b9:f9:95:42:24:94:38:41:ea:13:fb:
bf:e3:ab:84:cd:55:fa:9b:65:33:8a:8d:f3:53:fb:90:1d:21:
bb:fb:2f:6e:45:74:67:23:1c:9b:76:de:eb:3d:c2:35:18:23:
e4:ef:9e:d0:91:f5:d4:16:29:25:61:3d:94:43:84:3e:80:63:
e2:59:07:fc:5f:f6:94:d2:6e:ab:d9:15:5e:5f:f3:ae:4f:52:
bf:e4:5b:6d:55:3a:5d:06:d9:08:0d:1e:67:26:27:be:a6:9c:
22:ba:d4:d6:d5:eb:2a:c0:6c:68:f5:6b:85:4b:82:33:f5:eb:
44:22:7e:e8:4c:22:da:2c:37:d2:22:2e:ec:05:c9:29:05:41:
dd:ec:6a:01:7b:40:20:0b:9c:8c:80:92:9c:07:36:7a:1f:55:
9f:b6:68:d3:2c:1f:a5:d7:22:95:de:21:a2:6e:77:77:04:c3:
c9:3c:5b:49:fd:9d:23:ca:40:cb:0c:97:20:cf:02:d8:79:85:
ad:a0:3c:45:7f:7f:5e:c5:f3:e7:6e:db:74:96:35:b0:03:8f:
b3:3e:09:e6:78:66:c2:d6:1d:86:3b:a8:98:5d:2c:d6:08:68:
4b:f5:10:5c:21:b6:3b:46:59:77:68:50:33:29:e9:23:37:68:
29:5b:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:19 2026 by rpki-client