Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/bkA78DFxqmOLOkSPosbEBR9aUb0.roa
File: bkA78DFxqmOLOkSPosbEBR9aUb0.roa (raw, json)
Hash identifier: zZiBA+YmnG6ug2sZ/HbPi3/Kr9Bbay5kkw4lUaHiN84=
Subject key identifier: 6E:40:3B:F0:31:71:AA:63:8B:3A:44:8F:A2:C6:C4:05:1F:5A:51:BD
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F7A44274CA967908F974DF03D04AD2B3A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/bkA78DFxqmOLOkSPosbEBR9aUb0.roa
Signing time: Sun 19 Jul 2026 12:05:14 +0000
ROA not before: Sun 19 Jul 2026 12:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:44:27:4c:a9:67:90:8f:97:4d:f0:3d:04:ad:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 19 12:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e403bf03171aa638b3a448fa2c6c4051f5a51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:1a:3c:db:36:d8:87:4b:18:6c:dd:6a:ee:
04:69:47:99:26:2b:b1:0b:ff:18:d3:38:36:8c:75:
b2:a1:2f:3f:56:3f:71:c8:f6:8e:e0:ac:13:37:b7:
a9:15:c5:10:7e:a9:ae:6e:01:78:0d:22:da:52:5a:
67:9a:06:25:35:76:f2:37:5e:6e:6b:d9:27:c2:a0:
bc:71:28:8d:cc:be:e4:3f:2a:64:01:e9:2f:26:86:
f5:6f:3b:0f:5c:8b:a0:fe:45:0a:af:de:8e:74:4f:
1b:b3:f7:08:b3:65:60:ea:7b:15:22:d5:e0:9c:58:
da:09:ff:73:f6:a8:3a:4e:36:c0:7e:40:69:ab:d4:
37:ab:28:5e:65:2f:bb:c0:6d:b7:64:dd:03:17:3e:
8d:79:4e:2a:cf:39:09:0d:21:44:0a:01:a2:12:d0:
33:11:44:64:72:a8:21:b8:f0:49:fd:6f:7f:30:d1:
9d:d6:a2:cc:68:4c:a2:19:46:d9:7b:03:00:5a:9f:
3d:c2:e5:c3:d9:14:0c:10:82:24:87:82:0f:a2:95:
4e:1b:78:92:9d:c3:aa:b7:8b:05:09:e3:73:d7:66:
c2:7b:ae:d4:57:53:91:fd:f1:f0:b8:0e:a7:a2:64:
a1:29:20:21:21:7d:e3:5b:3f:e7:f0:83:01:b4:d6:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:3B:F0:31:71:AA:63:8B:3A:44:8F:A2:C6:C4:05:1F:5A:51:BD
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/bkA78DFxqmOLOkSPosbEBR9aUb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3a:6a:89:90:40:29:82:55:72:20:e7:d6:19:d0:29:76:e8:
34:23:12:ca:f2:44:69:60:b3:92:b8:51:d8:49:0c:f9:9e:7a:
ae:6a:4a:ad:3e:7a:c2:9f:38:fc:d5:69:87:a8:48:ac:0f:c6:
86:4f:57:b1:ee:c1:75:90:12:65:1a:75:20:03:19:89:39:f2:
70:d9:f8:17:58:b9:56:7b:9e:63:c5:97:ec:f6:0f:f7:9d:f5:
6c:6c:58:c9:48:9d:eb:19:f0:c0:0f:6b:5c:a8:80:86:f0:57:
10:81:ea:ec:70:3c:e6:68:14:c0:41:ac:ce:ef:01:c1:7b:dc:
3a:21:94:eb:64:b3:61:50:9c:7a:e9:64:e0:67:6d:4f:fe:ef:
36:67:e8:67:bc:6c:5f:93:b0:d7:45:c9:c6:24:26:c7:09:83:
4e:28:74:76:14:ae:c9:29:08:8a:71:36:64:c1:81:c7:30:18:
4e:05:22:7e:5a:b3:01:94:84:2e:50:8f:84:d4:0c:7b:7f:eb:
42:eb:bd:2f:bd:72:63:5f:7b:de:c6:3a:75:6f:85:18:05:b8:
6c:64:0d:08:34:cd:e6:b9:9b:87:c6:a7:7e:42:1b:0d:30:e2:
97:9a:4d:27:69:b6:a7:bd:a6:02:a8:66:17:e9:2b:26:5a:92:
37:59:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:34 2026 by rpki-client