Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa
File: qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa (raw, json)
Hash identifier: P+9IofTZBAc1XWPoAjdQhkamibGq6Uq0JX0SkWEsNv8=
Subject key identifier: AA:AB:3A:29:97:34:C5:DA:E0:8A:00:15:20:47:38:0F:65:93:67:6A
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019F1CDB343DD0FC505F7041EE475D0F517E
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa
Signing time: Wed 01 Jul 2026 08:45:55 +0000
ROA not before: Wed 01 Jul 2026 08:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209725
IP address blocks: 78.24.120.0/24 maxlen: 24
93.92.17.0/24 maxlen: 24
93.92.23.0/24 maxlen: 24
2a0f:69c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:db:34:3d:d0:fc:50:5f:70:41:ee:47:5d:0f:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jul 1 08:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaab3a299734c5dae08a00152047380f6593676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:cd:3b:6f:d6:ac:57:78:1f:6c:78:a4:55:
28:85:cb:0a:b3:20:9c:78:04:ea:b7:b6:a3:78:e7:
6d:2b:b7:77:c5:d2:7b:e0:f0:c1:4c:96:19:4c:08:
13:45:58:23:65:ec:01:51:59:73:42:da:57:36:f7:
cf:50:e2:34:47:e9:16:d9:4a:bc:ea:fd:c8:c4:0f:
71:79:a0:9b:e8:06:69:87:cc:97:f9:6f:e4:4a:8c:
b7:e7:23:ca:c4:65:0b:b6:e9:d9:86:97:c5:30:52:
0e:b7:36:27:75:4b:57:b0:06:c8:ab:f1:7e:ad:35:
8e:e3:41:28:1f:ff:58:31:07:f3:b0:8a:6e:78:92:
a0:e0:fa:b6:8e:83:73:a9:7e:6c:57:a0:91:4e:a5:
d4:35:b2:f8:f9:93:77:db:99:57:b4:3a:d8:2e:04:
02:2b:04:8e:8f:2f:b0:d6:b4:b2:2a:b9:3a:fa:0c:
e0:b4:1b:03:a7:47:c6:3a:98:28:89:a9:c6:21:55:
b5:81:63:c4:8b:90:f6:8c:84:d9:2a:df:1e:83:3f:
2c:0b:10:6c:73:12:05:07:d3:45:cd:1b:8d:50:39:
20:be:93:d1:43:8f:fc:a5:06:50:51:7c:a3:3a:95:
d2:83:6b:3a:f1:8d:ec:0a:bb:0d:40:55:9e:f4:1c:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:3A:29:97:34:C5:DA:E0:8A:00:15:20:47:38:0F:65:93:67:6A
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.120.0/24
93.92.17.0/24
93.92.23.0/24
IPv6:
2a0f:69c0::/32
Signature Algorithm: sha256WithRSAEncryption
88:fd:80:f3:c5:01:96:5d:4a:60:d6:0c:ed:f9:a5:d9:aa:9e:
cf:1a:b0:a2:93:3a:84:ee:4a:36:6c:69:d9:9c:c6:12:3e:f6:
76:38:94:2e:73:9f:3d:98:a8:15:23:40:32:61:33:c8:f8:45:
d2:f6:5f:cb:8f:c2:29:8a:83:be:2b:0c:21:23:4d:74:4c:91:
31:6b:2d:b2:08:1a:5e:7b:78:ab:0e:bf:f9:e7:4b:a6:24:39:
4f:92:71:ab:35:9b:aa:ef:c6:89:12:90:de:10:0e:e3:a6:e6:
34:0d:2d:0c:e5:04:d3:6e:ed:ed:0c:18:c2:04:ae:7e:0c:f4:
50:ce:a5:0c:c7:e6:18:a7:05:70:dc:c5:53:61:6b:3b:6c:cd:
d8:2b:90:9c:9a:b7:39:d7:2e:6d:f9:54:79:01:4f:ef:c4:08:
6e:a3:d2:21:b3:48:ed:7a:e8:02:97:58:ca:61:7d:d5:7b:ac:
f1:67:1f:78:33:48:ac:1a:af:bd:56:88:b7:68:56:6b:87:77:
5a:3b:b0:13:83:78:57:c9:7e:0e:cd:6b:78:21:10:5c:0c:f8:
23:dd:2c:4c:1f:d7:72:c3:ed:27:5f:8f:4f:f3:3b:34:94:47:
a9:c2:93:00:25:d2:4f:0b:43:ff:d8:08:73:6b:c5:ce:90:46:
ee:35:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:59 2026 by rpki-client