Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/jPHYOj_6LWYOivdVvMKC2HFIT4M.roa
File: jPHYOj_6LWYOivdVvMKC2HFIT4M.roa (raw, json)
Hash identifier: WNAYcfnTCYvXJjSjaYW8AjeZqY76pySAXbuH7yNIDFc=
Subject key identifier: 8C:F1:D8:3A:3F:FA:2D:66:0E:8A:F7:55:BC:C2:82:D8:71:48:4F:83
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A03554D7746509EECA295FD071F06BBE5D
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/jPHYOj_6LWYOivdVvMKC2HFIT4M.roa
Signing time: Mon 24 Aug 2026 19:52:27 +0000
ROA not before: Mon 24 Aug 2026 19:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218891
IP address blocks: 130.78.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:54:d7:74:65:09:ee:ca:29:5f:d0:71:f0:6b:be:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 24 19:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cf1d83a3ffa2d660e8af755bcc282d871484f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:79:22:d5:82:28:37:af:b3:39:3c:dd:9f:
65:2c:c0:b3:8a:db:d9:fd:43:35:d7:43:08:a6:9d:
02:0f:67:c1:3d:61:b8:22:79:09:1f:0e:d2:8f:bf:
3e:24:a9:d7:d4:c1:99:ec:8b:ad:67:56:8e:68:5c:
4c:12:1d:4d:9e:0d:c6:a8:f3:91:c3:ef:eb:5a:58:
6a:c9:54:e3:fd:af:2b:66:62:01:62:36:9c:d8:1c:
00:8b:26:0c:85:9c:d2:72:a7:75:9e:93:b7:90:5c:
2e:e0:d2:b0:26:1f:f3:26:ec:9e:dd:50:09:c3:94:
4c:39:ef:4c:ed:07:5b:e2:d2:ca:20:c4:0a:29:4b:
d9:a8:ea:a0:f3:de:bf:33:c7:16:ce:47:ec:66:58:
12:87:d0:0d:9a:0c:bd:7d:23:fb:50:6b:fb:7b:27:
a8:ed:0d:a7:78:d4:c4:f2:af:4f:70:33:5c:29:2f:
dc:25:bf:fd:4b:a6:41:81:56:7a:5b:15:f7:43:f1:
7d:c4:e6:c2:da:c0:91:1c:61:23:d9:6e:17:4d:df:
a1:cd:19:d8:95:1f:8d:60:c2:bf:df:0c:e0:f0:60:
0f:88:03:20:61:50:ac:ad:04:a5:8e:bf:15:3e:99:
96:79:3f:bf:5e:61:37:ac:5e:d5:3f:8c:1e:38:a6:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:D8:3A:3F:FA:2D:66:0E:8A:F7:55:BC:C2:82:D8:71:48:4F:83
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/jPHYOj_6LWYOivdVvMKC2HFIT4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.189.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b9:cf:c5:cf:a3:c4:33:a2:06:f9:24:b9:92:66:99:c7:11:
09:3e:9c:de:39:78:e7:48:45:29:e9:bb:5d:d2:4b:4e:8a:ce:
be:aa:07:89:c9:e1:2c:18:60:ae:8e:9a:94:e5:51:46:a4:a4:
72:30:5e:77:50:3f:8e:b6:c3:33:c3:f6:84:c0:0a:eb:cd:96:
1a:fe:71:82:df:cb:db:9b:bc:ae:30:d5:71:93:35:0f:c4:90:
ed:8e:4e:06:f5:16:bc:e9:37:bc:91:33:2c:30:25:82:49:71:
f4:5f:70:cc:d4:bd:c7:3d:fe:bb:83:30:a0:64:86:2f:c4:14:
be:fc:f2:1f:1d:f6:42:9b:05:2a:8e:eb:93:7f:b8:b6:38:8b:
ee:61:9b:8e:b3:6b:58:f8:0c:d8:65:dd:9e:1f:d8:92:e2:e2:
81:ae:92:3a:6e:22:4c:d8:e0:67:e3:7e:03:5b:0d:10:8e:a7:
00:11:d6:b1:70:0c:7a:46:49:4e:36:2b:bb:e9:e6:40:13:3a:
9c:61:08:30:80:db:a0:4e:dc:be:51:23:f0:5f:bc:ab:08:a8:
6d:a1:b0:83:46:59:db:56:b6:42:d6:bc:58:84:e3:d2:7b:46:
a8:7b:da:bf:c3:f2:c5:ea:ab:25:ca:75:38:b5:7f:f2:fb:9e:
f3:dc:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:25 2026 by rpki-client