Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/78A7ZX40X9PEI2sIAHMeK5HoKFY.roa
File: 78A7ZX40X9PEI2sIAHMeK5HoKFY.roa (raw, json)
Hash identifier: swhlpKQufE8U+BL4fuo/cIho13Ce4xy+ebg5hBF4uDo=
Subject key identifier: EF:C0:3B:65:7E:34:5F:D3:C4:23:6B:08:00:73:1E:2B:91:E8:28:56
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0199D912E4AD66D71FD520F9881C079747BE
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/78A7ZX40X9PEI2sIAHMeK5HoKFY.roa
Signing time: Sun 12 Oct 2025 15:38:38 +0000
ROA not before: Sun 12 Oct 2025 15:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214111
IP address blocks: 91.208.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:12:e4:ad:66:d7:1f:d5:20:f9:88:1c:07:97:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Oct 12 15:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc03b657e345fd3c4236b0800731e2b91e82856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:08:6b:5b:22:cf:8c:26:c8:bb:62:59:53:
62:07:7d:3a:61:ed:f4:eb:ec:78:4e:fb:1b:a9:b8:
ed:c8:77:bf:b8:c5:74:18:14:ae:9d:7e:7e:c8:bf:
a4:b3:8f:27:fb:30:f3:44:52:65:dc:45:3d:82:ea:
22:52:69:fd:87:60:0d:d8:16:a7:3d:1a:bb:33:1c:
e6:96:ca:cc:0a:0c:53:43:6a:12:81:b3:71:2d:43:
65:b9:40:8a:da:22:06:a9:0e:8b:0a:dd:53:ff:48:
a9:af:84:fb:31:78:d0:31:f1:d5:31:79:bd:e2:e9:
2d:f1:22:8a:4c:59:38:f7:5c:47:8d:90:c0:b7:5e:
3f:0f:5f:7d:4b:66:d9:59:61:39:71:8d:cf:25:0d:
de:d8:51:6e:a4:16:a7:34:22:ce:0b:46:ba:e9:25:
f4:c4:5e:ae:8d:6a:47:38:d9:98:ca:7d:36:df:74:
98:7a:d0:67:bb:f1:67:5e:3f:43:73:20:6f:ea:6b:
6c:8e:ac:48:ac:96:eb:68:5a:64:16:46:0c:8a:44:
26:4b:8c:ce:d5:c1:29:cb:80:bf:17:8b:2d:e2:56:
27:96:47:ea:cd:9f:5f:ba:c4:1b:4c:ec:81:75:e2:
f0:ee:6f:da:4a:a0:20:d3:a3:64:0c:b1:24:73:ee:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C0:3B:65:7E:34:5F:D3:C4:23:6B:08:00:73:1E:2B:91:E8:28:56
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/78A7ZX40X9PEI2sIAHMeK5HoKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.109.0/24
Signature Algorithm: sha256WithRSAEncryption
74:04:e1:67:60:a7:a1:03:86:71:a0:cc:e0:b2:b7:13:39:dd:
4e:2b:53:e8:d8:38:2a:78:d7:65:c1:1b:6a:23:09:d3:b7:95:
af:e6:9f:a5:8e:d8:b6:8f:b8:13:ff:12:6a:46:a0:d0:63:4d:
73:44:af:fc:6b:6f:f3:b3:61:b6:f8:27:c3:7a:50:85:e6:01:
9f:f4:cc:81:6f:45:5f:b6:f5:c1:06:66:21:2e:1a:f2:f4:53:
ec:42:1f:77:1a:da:b2:d4:c1:f8:e4:c3:20:55:c5:4e:d2:79:
67:3a:4f:e1:e4:f1:e1:3b:e4:c0:58:f5:3a:4f:ff:4b:6c:8e:
ae:7a:62:bb:66:00:de:87:a5:27:d4:63:07:aa:86:25:d6:36:
bc:f6:1f:5c:83:0a:a4:d2:cb:5e:ac:5b:7e:5d:29:f1:ad:10:
9f:91:81:b9:72:dc:9a:33:b4:26:9d:10:fd:89:aa:83:99:c4:
73:60:0e:55:48:aa:9a:a1:98:67:b0:b0:20:d9:f3:e5:43:4a:
29:51:b0:7d:02:c0:ca:d1:03:e5:07:0f:f2:f4:fa:73:9d:aa:
19:b2:00:7a:9c:d3:c1:3f:a5:d5:f0:a9:7e:bc:28:b4:ce:26:
c5:5a:cd:eb:cd:28:30:3b:03:58:d2:73:53:ee:40:ee:0b:07:
71:14:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:55:04 2025 by rpki-client