Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/zoiA9GOl58HURHRI6-GRtkRSEfA.roa
File: zoiA9GOl58HURHRI6-GRtkRSEfA.roa (raw, json)
Hash identifier: oLHIfegomnibpy5nfP5FLa3cn06nEqDH56LteMyYgZQ=
Subject key identifier: CE:88:80:F4:63:A5:E7:C1:D4:44:74:48:EB:E1:91:B6:44:52:11:F0
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019B7FF13A810FCCA4FEAA373C76E21C4E2D
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/zoiA9GOl58HURHRI6-GRtkRSEfA.roa
Signing time: Fri 02 Jan 2026 18:21:14 +0000
ROA not before: Fri 02 Jan 2026 18:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34146
IP address blocks: 78.40.72.0/24 maxlen: 24
78.40.73.0/24 maxlen: 24
78.40.74.0/24 maxlen: 24
78.40.75.0/24 maxlen: 24
78.40.76.0/24 maxlen: 24
78.40.79.0/24 maxlen: 24
185.200.220.0/24 maxlen: 24
185.200.221.0/24 maxlen: 24
185.200.222.0/24 maxlen: 24
185.200.223.0/24 maxlen: 24
2a02:449::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:3a:81:0f:cc:a4:fe:aa:37:3c:76:e2:1c:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jan 2 18:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8880f463a5e7c1d4447448ebe191b6445211f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:bf:d7:81:75:2e:30:69:5e:f2:10:20:6f:
df:1d:c8:35:d5:8d:6e:a8:c4:58:b1:6f:21:d5:7d:
ce:40:7b:c8:31:96:72:27:cd:b4:6f:e0:d0:31:73:
45:28:66:6d:d2:b8:b9:2e:07:fa:22:42:d4:93:f6:
68:f3:df:fe:02:04:b2:33:6b:07:de:47:ec:3c:e6:
f2:55:ed:7b:c5:b2:87:a5:3a:76:0f:d2:c5:07:07:
ed:20:90:be:a5:11:33:81:0b:fd:f0:6e:77:f4:f0:
01:b2:6d:c3:10:4b:13:79:df:9e:43:39:3d:57:43:
02:04:66:fe:8a:41:cb:a9:4b:9b:f1:c8:66:f6:a3:
23:e2:56:23:16:d9:eb:7b:7a:37:c5:8c:4e:df:68:
2c:fd:43:f3:c8:20:23:ba:9a:8f:97:98:ff:e2:91:
93:f2:52:f4:47:2b:7c:68:93:a1:f3:5c:f4:d8:9c:
3c:56:05:d1:14:21:78:38:89:01:d0:d6:cc:c4:db:
97:79:28:43:fd:96:26:c0:23:88:a1:00:e1:a4:a0:
82:4e:0c:44:38:e8:b2:b6:ad:8a:7f:f5:ba:95:d9:
ce:69:3c:da:92:a0:14:36:8d:18:02:7b:05:35:09:
f7:12:e1:26:ca:9f:85:b0:ff:5b:b7:1b:28:86:bf:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:80:F4:63:A5:E7:C1:D4:44:74:48:EB:E1:91:B6:44:52:11:F0
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/zoiA9GOl58HURHRI6-GRtkRSEfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.72.0-78.40.76.255
78.40.79.0/24
185.200.220.0/22
IPv6:
2a02:449::/32
Signature Algorithm: sha256WithRSAEncryption
0d:14:e1:5e:34:4f:c6:2f:63:b5:d3:09:66:fd:d7:79:44:39:
08:e7:b9:4f:6c:8c:70:39:62:15:7c:28:78:c6:0e:d7:67:8e:
0b:dc:7b:66:73:48:e1:cd:8e:3f:f1:a9:6a:29:94:5b:78:43:
7d:62:68:f7:55:2c:18:5e:1a:04:82:34:6e:3d:1d:5f:b9:70:
e7:a3:ea:6c:ab:86:8e:84:6f:13:59:0d:55:e1:c6:42:88:e8:
c0:cf:a8:08:a2:9f:e7:49:91:08:e7:05:75:74:94:e0:ce:44:
e0:dc:57:75:c7:14:ae:5a:93:52:5a:1f:e3:4d:40:13:d0:52:
14:89:7c:9e:c7:52:e4:33:9e:8f:57:b1:cc:ee:ac:9d:2b:4b:
c6:11:a5:fb:ec:47:60:98:31:c0:28:88:df:cc:b9:53:5e:97:
67:6b:65:b9:7b:b1:24:8d:f8:f0:c6:0e:75:45:49:f3:5d:fd:
b4:ed:80:31:8f:e4:34:9b:9d:12:ae:1b:4d:33:73:17:1c:5e:
9f:9c:8d:73:47:09:fe:cb:d3:3c:79:a2:71:8a:79:51:9f:77:
79:c1:b1:58:9a:3d:79:12:3b:0a:54:d0:f6:ea:9e:37:f8:a5:
51:d4:d1:32:1c:76:bf:36:c4:18:dd:a9:5b:17:74:67:e3:14:
30:0b:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:34 2026 by rpki-client