Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8tbwcDTEWxf0dgERaTp1edZPByo.roa
File: 8tbwcDTEWxf0dgERaTp1edZPByo.roa (raw, json)
Hash identifier: aXZAfMJklLbbNeNG0FdJjvjAVdaoK3lAXPVc0ZbcDJo=
Subject key identifier: F2:D6:F0:70:34:C4:5B:17:F4:76:01:11:69:3A:75:79:D6:4F:07:2A
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019D17320E6EBB079AF8605144D197DC0A58
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8tbwcDTEWxf0dgERaTp1edZPByo.roa
Signing time: Sun 22 Mar 2026 20:17:29 +0000
ROA not before: Sun 22 Mar 2026 20:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 78.108.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:17:32:0e:6e:bb:07:9a:f8:60:51:44:d1:97:dc:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 22 20:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d6f07034c45b17f4760111693a7579d64f072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:e5:3c:ad:85:27:7e:f6:64:fc:32:b2:2b:
55:7c:94:5b:f7:5d:a9:da:e3:4a:32:21:3d:d0:3f:
b6:cd:72:c1:2f:d0:0e:5f:e7:47:eb:ca:ac:9e:1b:
44:9f:40:29:e3:b7:ad:69:ea:9a:c1:3c:04:d2:32:
eb:b3:3e:a9:dd:90:85:e8:f1:f7:b7:9b:1c:dc:e5:
b5:6d:36:71:d2:80:25:f3:34:f6:ca:f2:b0:63:0f:
0d:46:15:d2:60:2a:fc:d9:44:dd:6d:ea:01:86:83:
5e:56:66:92:a9:5f:2c:e3:82:ff:9d:cf:b5:c2:e4:
fc:9d:37:f7:57:a0:bc:6a:a0:80:45:57:f4:b8:88:
1b:74:ce:bc:65:8e:e2:5c:5f:82:30:90:df:0a:1e:
8d:ed:9b:55:04:15:f9:1a:35:ad:3a:fb:f0:d1:8d:
dc:45:b3:a5:7d:49:6d:ba:b1:c6:93:f8:ea:e8:17:
ce:f7:04:8a:0c:18:e8:5d:83:f1:bb:43:36:88:97:
17:17:94:3b:ec:67:40:10:ae:31:6b:bf:9f:c2:f9:
6d:89:19:45:a9:ac:33:9c:94:56:f2:1d:5f:41:e1:
d3:52:07:36:c2:cc:74:81:42:b2:d0:f6:8f:0f:77:
21:bb:09:48:47:b4:44:c3:e4:1e:c5:a8:f5:96:ad:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:F0:70:34:C4:5B:17:F4:76:01:11:69:3A:75:79:D6:4F:07:2A
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8tbwcDTEWxf0dgERaTp1edZPByo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0f:71:91:a9:6b:b4:11:e8:e4:26:a4:6f:0e:c7:a0:da:57:
22:7b:7f:37:f5:c0:e4:1a:65:24:db:1b:db:cd:c2:51:3e:53:
5b:2e:ea:5e:2b:72:cd:75:e0:7b:d1:b3:e7:62:28:46:f4:35:
a2:d0:a5:c3:84:bb:fe:63:f3:66:6d:8c:65:f8:ca:1f:ac:e8:
e8:ef:d7:c8:2c:f8:8b:59:a8:6a:37:f2:fb:0a:ea:53:1c:72:
99:69:4a:17:5a:50:b3:62:5b:73:bf:15:92:a8:71:dd:58:37:
da:2c:ed:8c:91:5f:86:6f:38:fb:9b:ce:3b:69:ab:7e:35:c0:
26:57:8a:df:ab:18:4f:0a:b9:63:90:6b:db:0d:01:dc:64:d9:
df:05:4e:90:cf:c3:7d:dd:3a:bf:2d:21:6f:ff:c9:27:47:74:
1d:4a:b9:e3:d1:f2:ef:38:0b:eb:c0:d9:b9:f7:08:15:d2:0e:
77:7e:7d:12:78:40:68:b9:77:6d:e1:73:1f:c6:33:e0:46:0d:
d0:79:b5:24:3a:a1:4c:ee:06:a0:88:f8:1a:73:aa:59:b5:11:
8d:64:fd:0b:14:12:e8:26:bb:60:eb:c1:1d:a0:b1:ad:22:f5:
3b:9b:73:39:0a:5c:f5:24:4a:20:97:9f:b2:ba:d9:ff:bb:bb:
31:4f:f5:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0XMg5uuwea+GBRRNGX3ApYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwMzIyMjAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmQ2ZjA3MDM0YzQ1YjE3ZjQ3NjAxMTE2OTNhNzU3OWQ2NGYwNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLjlPK2FJ372ZPwysitVfJRb912p
2uNKMiE90D+2zXLBL9AOX+dH68qsnhtEn0Ap47etaeqawTwE0jLrsz6p3ZCF6PH3
t5sc3OW1bTZx0oAl8zT2yvKwYw8NRhXSYCr82UTdbeoBhoNeVmaSqV8s44L/nc+1
wuT8nTf3V6C8aqCARVf0uIgbdM68ZY7iXF+CMJDfCh6N7ZtVBBX5GjWtOvvw0Y3c
RbOlfUlturHGk/jq6BfO9wSKDBjoXYPxu0M2iJcXF5Q77GdAEK4xa7+fwvltiRlF
qawznJRW8h1fQeHTUgc2wsx0gUKy0PaPD3chuwlIR7REw+Qexaj1lq3yzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLW8HA0xFsX9HYBEWk6dXnWTwcqMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvOHRid2NEVEVXeGYwZGdFUmFUcDFlZFpQQnlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw4MA0G
CSqGSIb3DQEBCwUAA4IBAQBwD3GRqWu0EejkJqRvDseg2lcie3839cDkGmUk2xvb
zcJRPlNbLupeK3LNdeB70bPnYihG9DWi0KXDhLv+Y/NmbYxl+MofrOjo79fILPiL
WahqN/L7CupTHHKZaUoXWlCzYltzvxWSqHHdWDfaLO2MkV+Gbzj7m847aat+NcAm
V4rfqxhPCrljkGvbDQHcZNnfBU6Qz8N93Tq/LSFv/8knR3QdSrnj0fLvOAvrwNm5
9wgV0g53fn0SeEBouXdt4XMfxjPgRg3QebUkOqFM7gagiPgac6pZtRGNZP0LFBLo
Jrtg68EdoLGtIvU7m3M5Clz1JEogl5+yutn/u7sxT/UA
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:03 2026 by rpki-client