Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/6as5WEbBHVftxoYno52EYXpZJiI.roa
File: 6as5WEbBHVftxoYno52EYXpZJiI.roa (raw, json)
Hash identifier: v8PZ1y8/898BpzA4Z9n4//Ktbh68yLyotavSi4xBa6U=
Subject key identifier: E9:AB:39:58:46:C1:1D:57:ED:C6:86:27:A3:9D:84:61:7A:59:26:22
Certificate issuer: /CN=63115392ef678fa55080563813fa5b1f8739f1c6
Certificate serial: 019F23684F7928FB4571B2EA3EA63346DBED
Authority key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/6as5WEbBHVftxoYno52EYXpZJiI.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214824
IP address blocks: 78.108.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:79:28:fb:45:71:b2:ea:3e:a6:33:46:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9ab395846c11d57edc68627a39d84617a592622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:cf:dc:a3:e9:1e:8b:cc:96:c1:cd:be:1f:
d9:ca:8f:fa:b1:03:5e:72:aa:49:4c:23:2a:0a:b1:
9c:4b:22:e6:dd:ae:20:8c:43:67:b2:f0:65:3a:9f:
fa:13:a7:9e:a5:ad:b0:8f:1f:6b:d2:1e:50:5e:b6:
ee:09:63:d5:cc:bb:de:33:3e:dd:77:76:0d:7b:03:
70:9f:60:01:9b:20:76:f7:02:72:fb:f8:44:33:03:
00:8f:e4:6b:c0:bb:ae:11:14:6f:eb:38:84:45:d6:
9f:2d:a8:86:52:d0:ea:4c:95:e0:5e:56:02:19:24:
b0:e2:06:f4:d2:a5:b5:a5:42:64:9d:49:52:2a:7e:
d5:6c:6a:12:37:64:3c:d6:e5:f1:87:8b:57:c7:81:
90:8f:d9:d4:81:87:af:01:91:08:e9:81:d7:1d:54:
12:b4:60:b4:f8:8e:81:27:9f:dc:25:84:e2:14:4c:
ca:0e:cc:71:61:cf:9d:60:1e:36:d9:f1:2e:16:16:
ae:49:d3:fe:b7:89:cc:79:3d:f9:e9:c1:b4:24:84:
72:f3:84:7c:77:65:1a:e8:62:01:6d:95:ca:d3:6f:
85:38:8f:63:ec:9c:3e:a0:d3:54:85:d5:f6:3f:05:
e3:64:4b:4e:54:89:63:fc:99:77:6a:86:e4:7a:34:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AB:39:58:46:C1:1D:57:ED:C6:86:27:A3:9D:84:61:7A:59:26:22
X509v3 Authority Key Identifier:
keyid:63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/6as5WEbBHVftxoYno52EYXpZJiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:23:e7:36:17:b0:e0:d2:57:b9:2d:71:d2:12:c3:b2:3e:9d:
75:eb:c6:45:09:17:e8:0e:97:59:de:0c:f2:73:e7:36:17:a7:
16:43:d2:78:d9:c7:46:81:d6:6e:1c:ee:73:85:34:f2:f6:e1:
dc:bd:92:3c:b7:2c:7b:96:0c:ea:a0:67:47:ad:81:7e:f6:3e:
62:de:4b:10:72:42:05:ba:94:00:04:0e:60:da:56:05:46:0f:
8e:76:0a:19:6b:8f:56:68:a4:2a:a8:62:5a:15:f5:2b:c4:a4:
dd:67:82:4f:6b:86:06:9f:fd:2e:2b:cb:88:d8:ff:be:6d:2a:
7a:0f:45:7d:0a:54:94:73:77:11:0a:70:23:61:de:62:70:50:
35:ef:4d:82:b9:ac:2c:57:db:0b:a4:e0:98:90:13:a7:09:49:
7a:9f:db:4c:2f:f1:15:8f:30:20:61:93:5a:ab:e1:31:3b:17:
5a:12:e3:07:47:7e:8e:cc:b0:7d:f7:31:2a:3c:aa:a1:ce:a5:
0a:ef:92:21:34:6e:c0:81:49:b7:45:8e:f9:b7:23:2d:f6:9e:
a8:0e:14:a3:5c:77:e9:2c:94:ae:16:2b:0f:a4:04:78:87:d7:
c0:34:d4:59:41:49:6f:43:1d:67:fd:c7:ab:e3:96:41:39:40:
c0:18:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:09 2026 by rpki-client