Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa
File: ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa (raw, json)
Hash identifier: gqTbGzgaeb4B0LTSvn8godbTwE4G30IwqmkEqQ/zzHo=
Subject key identifier: 6A:BD:13:B3:4A:F2:CE:F0:C6:39:06:3B:77:88:68:F4:46:3A:B2:2D
Certificate issuer: /CN=63115392ef678fa55080563813fa5b1f8739f1c6
Certificate serial: 019F23684CEFE4E0571444EAC199099B411B
Authority key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34918
IP address blocks: 78.108.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4c:ef:e4:e0:57:14:44:ea:c1:99:09:9b:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6abd13b34af2cef0c639063b778868f4463ab22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:44:2a:2d:9e:71:04:76:35:1a:eb:93:72:
57:5c:ea:05:0e:b8:fe:4a:4c:8b:b1:75:bb:75:61:
39:cb:1d:39:12:a8:e9:29:a3:da:92:a3:b0:ad:17:
90:43:21:42:a2:30:6e:5d:88:e4:9d:46:c3:44:3b:
82:1e:cb:2c:c1:9f:08:ac:36:3c:ae:c7:c6:dd:7b:
2f:3b:9e:11:6b:b8:14:6d:b6:e9:5f:9e:46:f9:4d:
40:0b:e9:b9:bb:1a:58:12:4c:6f:ff:cb:5c:01:36:
b5:d6:5f:b4:2c:c1:00:a8:f3:5f:49:6b:2c:ae:30:
02:22:f1:01:02:14:a0:33:5c:06:2a:cb:71:d5:a9:
9f:e8:0e:26:d5:8e:29:ef:4a:3f:3f:95:aa:60:7f:
59:21:40:b9:71:62:ee:ca:82:c9:f7:dd:1a:1e:0c:
b5:45:ae:30:a8:f8:ee:3c:6c:83:6a:b4:e1:b0:f2:
0b:a6:74:c1:d0:7f:e7:17:6e:4c:68:39:61:cb:08:
74:b9:31:f3:d7:1d:61:70:d6:85:f3:38:8f:04:ef:
c7:c2:7a:b7:d2:66:12:7d:83:5d:65:4b:c3:5d:04:
d7:9a:7c:71:78:08:82:aa:37:28:1b:df:35:68:33:
8b:c5:d5:4a:52:52:8f:56:54:3b:f5:17:01:87:cd:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:13:B3:4A:F2:CE:F0:C6:39:06:3B:77:88:68:F4:46:3A:B2:2D
X509v3 Authority Key Identifier:
keyid:63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:81:63:07:e6:64:b2:d9:b7:5b:50:56:e7:6e:f8:ca:da:3c:
22:e1:b4:37:b6:86:0f:2d:53:52:0b:17:11:57:46:6b:4c:a0:
97:3a:08:7f:dc:f5:61:25:f6:3b:5a:77:0d:95:af:8b:8c:2f:
75:f0:3e:e8:33:c4:4e:f1:bb:02:a9:ce:b8:42:a7:f0:26:57:
a0:22:a6:38:fe:66:72:38:01:b5:bd:8e:74:de:12:82:29:dd:
2b:69:be:00:ca:c6:a7:40:2a:ed:8f:d2:90:55:09:c9:f6:46:
90:85:14:ea:45:6c:75:a8:49:72:19:85:9e:0a:0d:85:04:1b:
89:f0:1c:c4:41:7b:99:91:3b:ab:92:b9:36:4a:d1:9f:7f:91:
36:9a:e9:3f:de:7a:5f:67:b5:09:ee:32:a8:a2:b9:5a:c1:c0:
f6:a0:bc:2e:4f:1e:56:29:1c:5e:17:d6:3c:7e:73:83:19:b5:
6e:e9:c2:b2:0e:df:87:9e:2e:fc:06:0f:03:00:1a:32:62:44:
1d:46:18:79:1a:01:b2:3c:06:2b:33:c5:b4:a4:da:6e:47:ab:
5b:cb:9b:67:32:25:39:2b:91:26:0e:b8:b4:26:d4:0c:8b:67:
54:0d:e6:de:3e:b2:29:d2:11:74:46:6f:e4:3d:cf:78:32:87:
74:69:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:31 2026 by rpki-client