Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/eydVRDgIiSelvPv5lAcU1gNpJ74.roa
File: eydVRDgIiSelvPv5lAcU1gNpJ74.roa (raw, json)
Hash identifier: mZYjWEhiQuDdn4din0AEBcO2hZ+a4Ltba564qkocjiw=
Subject key identifier: 7B:27:55:44:38:08:89:27:A5:BC:FB:F9:94:07:14:D6:03:69:27:BE
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D0FC741C05937431656741C0DD6AD7794
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/eydVRDgIiSelvPv5lAcU1gNpJ74.roa
Signing time: Sat 21 Mar 2026 09:43:29 +0000
ROA not before: Sat 21 Mar 2026 09:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 78.24.123.0/24 maxlen: 24
78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:c7:41:c0:59:37:43:16:56:74:1c:0d:d6:ad:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Mar 21 09:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b27554438088927a5bcfbf9940714d6036927be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:c3:09:fa:2a:ef:72:86:5b:8c:a8:3e:4b:
2e:d7:49:10:60:32:8f:f4:62:43:4c:ed:51:85:95:
df:11:3c:64:f9:f9:a1:1b:6a:b0:fe:2a:1d:90:50:
f8:48:4f:4d:ff:9b:12:10:79:6f:e9:bc:4c:09:2a:
04:74:a7:5d:a9:e2:62:49:5c:58:85:b3:a4:f4:b1:
54:e2:3b:65:2b:2d:59:5e:6a:44:75:e4:80:22:76:
e7:24:21:e2:be:6e:88:0b:5a:89:fe:10:4c:0a:f8:
7e:a1:a6:64:07:70:6b:55:83:0a:49:53:2a:a3:92:
4c:de:23:81:21:2e:95:18:f9:86:3a:a2:12:dc:d5:
e8:b2:3f:98:59:ba:7e:8e:e9:91:70:73:35:8d:54:
86:4d:a5:61:f5:47:f0:31:79:c7:ea:37:18:df:32:
3f:a3:43:12:d9:e7:36:73:c3:9e:b5:4e:72:46:cc:
5d:04:4e:9b:63:82:7b:32:01:85:04:77:bc:96:44:
ca:5a:5f:a3:33:4c:8b:7f:ea:8b:78:df:87:76:d9:
85:f8:44:87:5e:2e:79:e9:4d:4a:c7:00:a7:f0:38:
e2:83:d7:86:f1:c3:ca:d5:05:7a:2f:5d:22:6a:70:
5f:3c:d2:49:3e:1a:f7:49:a5:55:42:9a:8b:08:c7:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:27:55:44:38:08:89:27:A5:BC:FB:F9:94:07:14:D6:03:69:27:BE
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/eydVRDgIiSelvPv5lAcU1gNpJ74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.123.0-78.24.125.255
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:8c:9a:7c:b9:73:c5:e3:7d:9c:6b:ec:a5:9d:a6:c5:35:a4:
a1:da:85:63:01:94:a6:52:8f:07:c1:0f:b7:d9:b1:89:07:f7:
32:13:63:4a:4e:ff:00:d1:72:78:0a:41:34:1c:7e:4a:08:19:
5e:54:ea:d7:2f:57:aa:2f:9f:f0:d6:58:07:c0:2a:2b:7f:c0:
a2:51:2b:0b:62:cd:8e:ce:58:72:8c:30:f4:5c:05:31:ae:32:
8d:1b:7a:d3:77:89:82:ac:43:f3:06:4b:6e:9e:46:c5:bb:cd:
6a:63:a7:45:df:b6:66:56:35:78:cd:54:23:b2:fc:1d:fd:45:
06:74:f9:fd:da:fb:02:66:63:f8:fa:23:a0:e5:81:53:81:d4:
6d:6e:90:97:68:99:36:f6:2a:36:87:12:b3:fa:75:80:ca:85:
7e:20:b2:e4:c0:0e:85:f3:c8:4e:aa:11:70:42:af:fb:31:e4:
d1:dd:7c:5b:7d:3e:80:14:a1:ba:79:c9:b5:f4:d8:1a:06:9b:
9c:6a:30:a7:14:8c:39:fa:2e:55:e5:92:06:6c:16:81:e2:46:
7b:d2:eb:63:5c:67:16:b0:74:93:90:64:9f:2a:48:04:1e:d1:
94:84:ce:0d:f7:af:e8:a6:9d:a8:b8:36:d0:ff:64:7b:bf:91:
10:18:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:53 2026 by rpki-client