Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eY3FnhIkKpSDFJ8LACcSrzFG9qI.roa
File: eY3FnhIkKpSDFJ8LACcSrzFG9qI.roa (raw, json)
Hash identifier: YYblgIO8NqCMheIQ0kzsfMrM0VecE6Ybcg8uaNdYAjA=
Subject key identifier: 79:8D:C5:9E:12:24:2A:94:83:14:9F:0B:00:27:12:AF:31:46:F6:A2
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019D0536CCEC09A36A840A0B6A245CAB1101
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eY3FnhIkKpSDFJ8LACcSrzFG9qI.roa
Signing time: Thu 19 Mar 2026 08:29:30 +0000
ROA not before: Thu 19 Mar 2026 08:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207691
IP address blocks: 78.128.10.0/23 maxlen: 24
78.142.3.0/24 maxlen: 24
185.43.56.0/23 maxlen: 24
185.43.56.0/24 maxlen: 24
185.43.57.0/24 maxlen: 24
217.174.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:36:cc:ec:09:a3:6a:84:0a:0b:6a:24:5c:ab:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Mar 19 08:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=798dc59e12242a9483149f0b002712af3146f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:1c:a2:ad:ce:ba:15:8c:d5:25:29:51:e2:
7f:e8:04:77:ec:cd:29:42:8a:71:e7:d8:db:e2:62:
63:a2:3e:42:08:41:d6:df:6f:f6:17:5d:54:e1:40:
f4:19:e5:59:45:63:27:68:1f:39:5a:66:fc:4c:5d:
28:0e:c6:21:03:b3:a7:63:cb:d6:b7:35:1f:65:7c:
6c:26:f4:5f:05:12:ca:d2:b0:8c:11:1e:fa:be:cd:
e5:8a:6c:bf:61:e0:ca:0b:e5:ed:5b:e0:98:80:ee:
32:6a:5c:b2:7c:2a:a2:e2:b9:f4:ef:3d:62:75:6c:
df:02:25:7c:a1:f2:a7:83:5c:b7:ed:9c:9b:9a:4b:
c9:eb:be:33:cc:a3:c2:e2:63:39:71:f2:b0:4a:2c:
ca:6b:a0:c4:df:eb:f7:8a:7f:09:95:0a:73:fd:27:
c1:d6:22:cc:92:ac:80:27:90:5d:65:fe:43:7e:2d:
bc:15:2f:c4:47:b9:2c:99:9a:ba:19:27:a6:ab:04:
85:6b:39:74:b7:77:76:3a:22:b6:ae:c9:d7:41:e8:
24:6d:f6:65:8a:00:a6:f0:69:c6:f1:ff:17:d1:d2:
57:64:8c:cb:b0:e8:30:f8:35:60:3c:ec:4c:23:d5:
f9:0b:a6:6a:5d:da:62:0f:ac:3a:46:13:ef:5b:4a:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:C5:9E:12:24:2A:94:83:14:9F:0B:00:27:12:AF:31:46:F6:A2
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eY3FnhIkKpSDFJ8LACcSrzFG9qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.10.0/23
78.142.3.0/24
185.43.56.0/23
217.174.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c9:17:98:fe:82:5d:24:56:71:a2:6a:15:36:43:8c:b1:c9:
04:25:42:73:85:b7:a6:3b:da:83:57:6f:6c:37:30:95:aa:25:
39:2e:88:b5:e9:8f:8a:b2:33:fa:d1:8b:60:76:ad:45:4d:3c:
00:0b:ff:a8:9d:86:af:92:eb:83:ac:57:7c:ed:69:de:6e:b3:
4f:66:24:0f:f2:80:04:f3:05:bd:eb:d2:f0:8f:d5:15:f0:19:
3f:62:92:97:43:3f:eb:5c:13:c6:99:2e:47:32:3b:bd:68:94:
f9:fd:21:33:7f:ae:12:69:34:75:c3:75:3e:98:01:88:75:13:
a6:64:40:3c:f5:01:5b:1c:ed:e8:36:38:2f:3e:07:74:35:b2:
86:4f:4b:b4:7d:bf:c5:1a:cf:fb:17:7e:c9:a8:1e:9c:47:64:
0e:f9:dc:da:70:1a:90:51:86:fa:98:25:e4:12:d2:eb:fc:5b:
f9:8d:97:2d:ba:52:8c:2b:9a:49:53:eb:96:16:f0:a6:80:f0:
51:db:1a:f7:d0:51:d8:d2:24:b6:8b:0e:30:40:46:d9:61:06:
d5:ce:8b:89:e5:ac:0d:d6:b7:8e:7c:52:56:94:bd:96:e0:3a:
c6:1b:45:49:1c:1c:5d:b3:42:40:25:88:46:30:23:cb:42:21:
4d:65:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:30 2026 by rpki-client