Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lh9y2z8BjPboXQB7En0Art145ss.roa
File: lh9y2z8BjPboXQB7En0Art145ss.roa (raw, json)
Hash identifier: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=
Subject key identifier: 96:1F:72:DB:3F:01:8C:F6:E8:5D:00:7B:12:7D:00:AE:DD:78:E6:CB
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D05FC8A1C2DE5AFFE74F64DC72AF8B8E0
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lh9y2z8BjPboXQB7En0Art145ss.roa
Signing time: Thu 19 Mar 2026 12:05:29 +0000
ROA not before: Thu 19 Mar 2026 12:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54339
IP address blocks: 78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:fc:8a:1c:2d:e5:af:fe:74:f6:4d:c7:2a:f8:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Mar 19 12:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=961f72db3f018cf6e85d007b127d00aedd78e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:4a:90:2d:11:6d:9c:c1:f7:6c:ca:f3:04:
5e:6d:75:ac:9e:55:51:87:ad:12:c8:eb:f1:8a:09:
e8:dc:cb:20:b3:0f:c0:17:23:2b:96:48:8d:d9:c6:
bf:52:af:25:8e:e3:e6:27:1f:cf:b3:dd:ad:d1:71:
49:fb:28:6e:52:6c:f8:4d:81:71:e2:bc:e9:9a:77:
7f:3f:d6:47:99:eb:46:2d:95:66:02:75:f7:24:aa:
e4:cd:3f:cd:cc:51:a4:6c:ab:56:86:ec:5f:b4:a5:
c8:64:f6:eb:ce:d1:37:05:16:d0:82:c1:58:65:02:
74:f6:c5:1a:ce:91:54:0a:62:43:a8:c3:ef:96:88:
be:55:dc:78:4b:8a:16:93:df:e4:c6:77:39:37:9e:
48:79:7b:63:44:b7:53:49:21:f7:68:f5:d6:db:c1:
f5:75:9d:ed:a0:ea:ad:fd:af:12:9a:1b:e5:07:88:
ee:a0:c7:bd:79:b5:63:85:f8:57:86:5a:d0:11:3b:
ae:bd:6f:09:ca:b4:ea:a4:c0:b3:55:07:6d:98:7e:
5e:c0:f3:c1:6b:39:d9:1e:55:28:c2:d6:77:02:5a:
16:6c:86:ec:1c:3d:f9:71:87:db:64:47:19:dc:57:
9e:ee:9d:6e:1d:23:19:71:2d:cd:1c:73:e5:0e:5e:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:72:DB:3F:01:8C:F6:E8:5D:00:7B:12:7D:00:AE:DD:78:E6:CB
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lh9y2z8BjPboXQB7En0Art145ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/23
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:e7:ba:9b:83:a4:6b:32:cc:e7:a4:5d:26:8f:c9:6a:a8:93:
d9:53:ce:b5:aa:8b:90:51:fe:81:43:78:de:f0:f9:c7:3e:bf:
d7:68:4b:37:f1:fd:7e:03:8e:59:f6:cb:9a:d3:08:7c:0b:13:
7b:4b:ce:40:2d:ae:29:d6:76:22:c4:88:fe:aa:34:52:72:b2:
ef:07:db:d0:8c:89:9a:38:d0:76:bb:d9:f0:e5:a2:f7:c0:77:
ce:3b:02:7f:31:9f:f8:db:b7:9d:f2:69:83:e8:07:b0:2f:cc:
4f:5a:ce:6d:93:f8:d5:6d:ee:9f:e6:61:ae:b5:e0:4c:f3:1a:
61:d0:b9:d1:08:27:0c:52:a2:aa:1b:0a:10:da:ae:b1:34:9f:
3a:e6:00:75:e3:d0:1b:1c:5b:17:fe:15:39:9c:d1:05:cd:a7:
17:88:84:1d:61:ca:dc:ee:11:59:f1:6b:ac:a3:74:9c:b8:49:
63:b1:1d:b5:5f:53:1b:72:f7:6d:b4:f1:3f:10:15:fa:d2:cb:
f1:ff:ae:4d:44:50:53:7e:87:a7:42:b5:61:78:10:6f:6a:05:
15:43:25:9c:56:94:27:69:1e:83:17:3c:13:43:3a:14:eb:12:
2f:5b:f2:2e:4b:91:91:e7:a9:d6:b0:04:3c:6a:2f:8d:9f:da:
a9:26:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:26 2026 by rpki-client