Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0FTYIMja5aQE0OIdiJTq1vG-oys.roa
File: 0FTYIMja5aQE0OIdiJTq1vG-oys.roa (raw, json)
Hash identifier: VxRjbwkV2ugtBBT5YBuTtO+IaavxLNNXVDUijy3iCP4=
Subject key identifier: D0:54:D8:20:C8:DA:E5:A4:04:D0:E2:1D:88:94:EA:D6:F1:BE:A3:2B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019EDFB0B69C02E52D9549578B1B458A4198
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0FTYIMja5aQE0OIdiJTq1vG-oys.roa
Signing time: Fri 19 Jun 2026 11:42:40 +0000
ROA not before: Fri 19 Jun 2026 11:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202968
IP address blocks: 78.128.7.0/24 maxlen: 24
78.128.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:b0:b6:9c:02:e5:2d:95:49:57:8b:1b:45:8a:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 19 11:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d054d820c8dae5a404d0e21d8894ead6f1bea32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:08:b6:93:8c:f9:0c:0a:04:e8:b0:ac:64:
9e:73:0e:02:92:6e:8f:80:93:ef:da:55:0c:c9:25:
5d:32:f6:28:c1:05:1a:ba:8e:ac:5e:38:2a:54:9e:
10:d6:a5:67:2e:c1:34:f0:fa:f1:aa:7a:94:ac:8b:
85:8f:c8:55:1c:74:23:93:d2:37:55:d2:ea:fc:34:
db:ab:dc:6a:16:cc:7c:c7:c3:ed:71:3c:9c:3c:34:
f6:72:45:cf:54:57:db:b7:85:54:22:df:a5:97:5f:
84:2d:ba:7c:b4:e3:b5:7a:43:a8:28:fa:33:17:1e:
7d:c4:e3:d6:db:24:6e:08:cf:41:a3:9b:d1:9e:97:
ea:b7:3e:e2:d2:ca:b0:5e:a4:1c:12:cc:d5:78:5b:
1b:b7:c4:03:01:bf:26:67:1e:8d:e4:03:4b:06:b9:
2a:58:ec:a7:9d:0c:d6:c7:75:0b:41:81:89:c7:9d:
31:47:46:1e:e2:a1:f0:68:6f:2f:80:5e:fa:f7:8c:
32:13:3b:f1:fe:49:22:8a:8d:af:5f:24:e6:4e:e4:
1e:d0:e6:28:96:6b:b7:99:45:80:3e:82:97:03:79:
1c:cf:ac:85:ff:ee:70:58:bc:6f:88:6e:58:44:a1:
4e:0a:07:2d:82:e5:54:c6:85:c1:57:b3:9a:0d:0e:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:D8:20:C8:DA:E5:A4:04:D0:E2:1D:88:94:EA:D6:F1:BE:A3:2B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0FTYIMja5aQE0OIdiJTq1vG-oys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.7.0/24
78.128.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f4:2d:61:29:0b:31:64:36:81:d0:38:52:8d:b6:fc:5b:38:
d0:8c:24:ac:77:ad:15:fb:87:b1:72:64:b4:15:58:07:a9:65:
32:a8:c2:cc:70:da:2f:8c:24:c0:ad:b2:96:d8:0c:be:61:68:
9c:5a:b5:e2:5e:e1:e5:69:98:58:92:e4:d9:67:cd:95:82:ec:
d8:d1:2f:5a:81:79:60:d5:cc:13:0a:b2:f2:c6:a1:8e:c0:54:
0a:ad:d5:c3:2f:f7:c7:ed:25:34:53:fe:c8:2f:5c:ca:9e:17:
67:42:08:63:88:7d:78:79:7a:3e:45:ec:2b:70:7e:da:b4:11:
cc:88:dc:ea:7b:47:f2:9b:46:64:f3:5d:b5:b9:10:51:b6:b0:
ac:1e:08:51:9a:a2:c8:5a:09:e1:3f:7b:47:4c:05:2a:fd:78:
e3:ca:c5:7b:90:2b:d2:80:b2:3f:f4:e2:11:d7:f5:8d:8a:c3:
70:20:d6:26:2c:a4:2c:fd:bf:10:aa:9f:5c:59:35:ac:cc:1c:
65:f5:a8:73:18:20:ff:31:bc:f5:f1:ef:66:71:d2:23:f3:32:
72:d9:3d:f9:54:84:33:21:2d:f6:85:55:8d:56:a5:f8:31:84:
b3:02:73:e6:b9:23:f2:82:d8:ec:58:21:45:41:a2:e7:11:b9:
0b:8c:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:23 2026 by rpki-client