Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/IPWrOvsWgguYWB7Nl_gTONIzrpI.roa
File: IPWrOvsWgguYWB7Nl_gTONIzrpI.roa (raw, json)
Hash identifier: K/fllT4qGMJT3KoDnyrWIczoizT4y2FZ0kvxUQY8R7c=
Subject key identifier: 20:F5:AB:3A:FB:16:82:0B:98:58:1E:CD:97:F8:13:38:D2:33:AE:92
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019F8F2A7D355B79D0653CEBE9C698B00C85
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/IPWrOvsWgguYWB7Nl_gTONIzrpI.roa
Signing time: Thu 23 Jul 2026 13:29:14 +0000
ROA not before: Thu 23 Jul 2026 13:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56665
IP address blocks: 78.111.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:2a:7d:35:5b:79:d0:65:3c:eb:e9:c6:98:b0:0c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jul 23 13:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20f5ab3afb16820b98581ecd97f81338d233ae92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:b3:be:d0:12:b7:67:e4:a9:c1:9c:27:8b:
5a:58:05:6e:fb:b9:c5:61:b4:82:75:e5:29:5e:ad:
1c:ac:cc:2e:89:b5:76:b0:b3:af:12:b8:98:bd:58:
82:59:ad:b7:b9:d3:6e:e8:f4:c8:43:d5:ab:de:45:
2d:53:f5:18:10:a9:1f:47:4f:c0:b8:e6:41:8d:69:
91:f9:41:ec:3e:f2:9b:b0:32:6c:a6:82:cf:2d:f6:
56:93:71:56:47:31:08:59:1c:94:de:f2:14:fe:84:
fd:5a:ec:0b:e1:68:49:0a:c7:fb:00:8b:67:fe:e3:
78:03:31:02:6d:b0:b1:b2:b3:bb:68:99:da:d8:79:
29:ef:cd:c6:b7:6c:5a:b7:83:40:2a:97:9e:cf:cb:
13:ba:6e:20:82:d1:00:5e:eb:ae:a0:a2:a2:32:23:
48:a2:8a:54:3a:73:d1:22:fd:6d:4d:7b:f8:21:af:
1a:98:6f:2d:ff:3d:2b:c8:3a:04:d0:a0:08:19:0d:
0e:10:0b:ff:24:0a:8e:63:29:74:8e:c0:45:a6:97:
99:6d:9e:e6:c6:01:fe:1f:d0:59:a6:0a:0d:b6:68:
bd:a9:73:fb:b5:77:50:e6:55:9c:32:5a:b1:7e:95:
ed:79:0b:fb:16:5b:31:ca:58:22:1c:e1:ec:7c:12:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:AB:3A:FB:16:82:0B:98:58:1E:CD:97:F8:13:38:D2:33:AE:92
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/IPWrOvsWgguYWB7Nl_gTONIzrpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.137.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f8:70:0a:3a:4d:e7:3d:a8:6c:b9:a6:ff:14:ef:14:ba:78:
c4:e0:9b:94:0f:43:90:85:d9:80:aa:02:56:db:5f:7e:9f:fe:
37:96:08:90:3b:4a:9b:9b:cd:b3:4a:2b:df:07:f0:07:f6:c6:
b1:47:be:49:7f:d0:3b:ba:9b:94:2a:f4:90:23:eb:42:cb:48:
ee:c5:14:3b:d1:50:6b:b4:bd:08:94:e4:3b:18:6a:0d:29:f6:
f3:68:e5:d8:4c:84:8f:e7:ab:8b:f1:e5:ca:b9:9c:dd:88:c7:
9d:8b:75:82:d2:bb:93:16:dc:a0:e8:78:cc:5b:70:86:59:2c:
55:d3:5b:8a:56:60:d2:26:cb:11:72:63:40:ad:f9:ad:ab:8c:
7b:a2:39:32:67:68:fa:02:78:eb:66:5a:bb:d3:d6:f6:bc:7c:
e7:b0:68:49:ca:82:ac:9f:17:06:96:6c:7d:ce:9d:96:87:d7:
3e:e2:9d:85:15:72:af:f8:94:8b:3d:31:39:97:97:14:db:57:
7a:d9:94:41:12:4a:b5:3f:c6:bc:ac:a2:aa:02:e8:87:39:42:
50:9d:17:48:88:b2:5c:47:da:4f:24:c3:ff:73:d6:f3:12:ce:
69:2d:dc:c2:fe:37:cd:96:0f:d4:6a:02:bc:df:71:8a:b0:2a:
7c:fd:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client