Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/YZ34ohn7UHU7vWLuHkxIWGq6VME.roa
File: YZ34ohn7UHU7vWLuHkxIWGq6VME.roa (raw, json)
Hash identifier: 0GMkUY1h4araSisikiq5dkNU327B8IVoamMuZRli6ao=
Subject key identifier: 61:9D:F8:A2:19:FB:50:75:3B:BD:62:EE:1E:4C:48:58:6A:BA:54:C1
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0199F82D8D9908BFD08FE1FA8788CA04D615
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/YZ34ohn7UHU7vWLuHkxIWGq6VME.roa
Signing time: Sat 18 Oct 2025 16:35:58 +0000
ROA not before: Sat 18 Oct 2025 16:35:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 78.108.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:2d:8d:99:08:bf:d0:8f:e1:fa:87:88:ca:04:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 18 16:35:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=619df8a219fb50753bbd62ee1e4c48586aba54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:96:95:07:04:51:64:50:91:06:d8:ad:79:
dd:34:9f:1c:7b:42:a6:6a:06:9e:e9:09:a0:24:d1:
2c:9a:aa:8a:e1:5e:36:f6:e5:74:ca:0f:b5:6d:c8:
bb:3d:7e:53:53:5f:9d:fd:05:70:c1:b4:48:bb:36:
70:b2:77:f5:fa:d6:55:e6:73:a5:a9:20:ef:a0:dc:
45:c1:2f:d9:f7:23:1d:f6:49:f8:1a:41:9d:d7:39:
0a:bb:65:37:29:81:57:8c:e8:c0:1b:75:2f:de:cd:
78:9c:d0:9b:55:7a:ab:d6:d7:91:1e:3a:78:14:a6:
79:ef:a2:a2:30:1f:7f:af:ef:38:1b:0a:c8:27:a8:
6e:8d:3a:aa:46:b8:5d:7d:34:c5:b0:ac:06:69:e3:
23:90:34:13:68:ba:c5:53:b6:3a:34:6f:44:8d:2f:
79:ec:d6:19:94:13:e2:d3:1d:d3:c5:a6:64:a6:fd:
ac:ff:7a:e2:db:b0:ba:a2:14:b1:6d:47:fc:7b:38:
6e:bc:92:6b:47:9d:6e:a1:4c:6a:28:d8:84:62:dc:
88:c9:ac:4e:63:df:dc:3d:0d:43:fb:1e:38:15:e6:
6d:c6:9c:4b:b2:85:29:52:c4:03:54:e5:78:de:b2:
23:1a:bf:ae:29:57:a0:53:1c:54:d8:6c:37:8c:86:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:F8:A2:19:FB:50:75:3B:BD:62:EE:1E:4C:48:58:6A:BA:54:C1
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/YZ34ohn7UHU7vWLuHkxIWGq6VME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:29:77:2a:41:22:fc:fb:24:e5:2b:e1:fb:59:e3:0c:99:7e:
58:a1:db:d1:67:47:94:90:a5:1c:81:32:ad:02:46:4c:41:68:
5f:5c:01:85:e2:9e:6c:e9:ff:34:7e:2c:3d:88:f4:14:e3:f0:
2a:5c:37:4e:37:df:11:98:1d:5e:fc:61:c9:cf:2a:55:ed:2e:
e9:f9:44:ea:04:1d:18:6e:d8:60:aa:53:24:23:c9:83:1a:2a:
9f:dc:0b:63:b5:e8:75:71:35:ae:ae:f7:8b:b0:81:90:fc:b3:
f3:a7:f7:70:4e:2d:f6:ff:8c:58:9f:eb:67:5c:d4:5b:a5:65:
e1:9e:96:3b:30:fa:93:cc:0a:fc:ad:fc:2e:3d:a5:93:a3:7e:
ac:b8:66:71:9f:d4:9f:11:20:dd:9f:a6:6f:fc:ac:ce:24:32:
b3:c0:41:38:6e:f1:c8:a3:5c:6c:92:40:c6:65:63:57:d2:5a:
11:70:7f:14:39:aa:bf:01:6e:da:05:43:71:0c:65:d9:79:67:
f9:76:36:8c:9c:9f:71:af:6e:a1:5f:73:ee:d1:b3:20:37:a1:
91:5e:98:7c:12:f8:ff:d9:af:22:76:ae:77:49:b5:e5:68:54:
bf:fa:3b:4c:85:c5:a1:bd:d0:9e:0c:92:f5:3f:32:d5:3e:8e:
c2:5c:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:15 2025 by rpki-client