Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa
File: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (raw, json)
Hash identifier: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=
Subject key identifier: 26:D4:6F:A6:84:3A:BF:96:C5:77:76:EA:34:7A:7B:D1:19:10:94:4C
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019DF1AF94E653CD001C2225BFE138853D41
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa
Signing time: Mon 04 May 2026 06:31:49 +0000
ROA not before: Mon 04 May 2026 06:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208293
IP address blocks: 78.41.60.0/24 maxlen: 24
194.117.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:af:94:e6:53:cd:00:1c:22:25:bf:e1:38:85:3d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: May 4 06:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26d46fa6843abf96c57776ea347a7bd11910944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:89:c0:d7:31:3d:32:3f:ff:35:21:7a:a4:
93:2a:00:e2:7d:69:e1:b7:33:f4:8f:48:d4:0e:3f:
50:e1:95:b3:a4:07:26:6d:7e:3d:e4:0c:92:e9:e7:
9f:9d:36:e5:28:18:11:c3:f5:72:26:c9:e2:ca:4a:
55:fa:c9:6f:61:bc:6a:d6:bb:92:6e:b2:fe:03:5c:
a3:e3:e3:f3:30:79:e6:93:6d:cf:4d:12:6c:21:9d:
b8:fa:b5:ae:98:ae:42:64:d5:73:55:3c:8a:3b:71:
41:84:87:1b:36:5b:8d:4d:56:76:56:e3:dc:1a:48:
f9:f4:1d:61:33:c6:2f:d3:06:fc:bb:fe:45:3e:64:
96:cb:0a:f3:d7:f9:2e:84:a5:69:5e:ab:3f:18:a4:
5d:a1:cf:a0:5d:a6:d2:d9:c1:54:39:02:91:e9:c8:
10:ff:6b:c8:c0:33:41:49:01:28:48:20:fb:9b:2d:
bc:c9:59:31:94:4d:0d:cc:4a:80:c4:2c:e7:1d:cb:
3f:65:a8:00:fe:88:ba:ba:93:aa:be:92:46:86:b3:
5c:d7:43:96:31:fd:6f:43:ae:9f:0f:a2:6c:0d:5e:
b4:1d:e8:7a:b4:38:bc:3f:90:05:6e:b4:52:9a:28:
2e:71:ac:4b:ce:d9:42:1d:b9:e5:a7:96:f9:60:8a:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D4:6F:A6:84:3A:BF:96:C5:77:76:EA:34:7A:7B:D1:19:10:94:4C
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.60.0/24
194.117.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:64:e0:aa:92:14:21:a5:62:3b:78:13:2c:62:1b:18:9d:45:
ca:60:53:cd:93:df:df:02:b4:53:05:b3:78:09:af:25:fb:c2:
f2:e2:98:d8:0a:4e:54:a7:a2:70:ca:67:63:d9:ab:4b:32:be:
e9:c2:5f:9b:ea:96:58:86:44:f6:56:98:7c:db:95:d9:7d:1f:
1a:7e:e2:ab:d8:4a:2e:03:f5:14:5d:b8:fc:46:b9:f5:45:7f:
f8:da:a3:8d:53:ea:60:19:cf:64:73:45:83:2a:62:22:5e:62:
aa:24:b0:ed:e0:74:fb:70:35:ab:93:db:9d:37:3a:3e:f7:e0:
ad:e2:2a:72:24:76:90:b1:73:6d:7a:cb:54:9b:85:88:4c:aa:
63:e2:af:94:da:8c:04:2b:a6:79:3d:2c:43:55:87:e1:60:94:
cd:79:85:3f:b8:35:4e:61:dc:39:d2:00:ef:26:87:b4:e2:ce:
fc:33:c6:54:45:d6:d2:bb:80:2f:aa:92:d9:af:fd:7d:91:b9:
f0:46:db:45:66:d5:68:ab:75:0a:62:cc:2e:eb:39:78:44:af:
db:3c:0f:14:bd:64:a5:05:9b:66:29:36:10:47:20:dd:9d:31:
fa:f4:3f:5f:3b:98:4b:fa:73:e9:7e:c5:79:53:fb:5d:c0:df:
78:f4:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:07:06 2026 by rpki-client