Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/cbVChPNP4-DIWiKkOfkWP8doixc.roa
File: cbVChPNP4-DIWiKkOfkWP8doixc.roa (raw, json)
Hash identifier: kIXewO7P0d1ssZnGCLQfIk8MUG+ijdkQqTo/a3x7pAg=
Subject key identifier: 71:B5:42:84:F3:4F:E3:E0:C8:5A:22:A4:39:F9:16:3F:C7:68:8B:17
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019F93D8EBBA538E7C12D2B9C742CA93D0E0
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/cbVChPNP4-DIWiKkOfkWP8doixc.roa
Signing time: Fri 24 Jul 2026 11:18:14 +0000
ROA not before: Fri 24 Jul 2026 11:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207217
IP address blocks: 78.159.93.0/24 maxlen: 24
185.46.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:d8:eb:ba:53:8e:7c:12:d2:b9:c7:42:ca:93:d0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jul 24 11:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71b54284f34fe3e0c85a22a439f9163fc7688b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:80:a7:be:54:31:c8:8f:b6:4a:75:4e:5b:
d6:13:61:75:6a:29:fd:15:72:fb:6b:0a:f0:4d:5b:
bf:08:cc:4a:96:12:f0:84:26:64:5c:92:27:e5:54:
5d:af:94:52:3d:25:a0:92:92:05:c6:10:75:f0:f7:
ae:53:82:e0:b5:9a:7c:02:5a:2e:bb:c7:76:9b:f5:
0a:87:2d:17:9b:16:10:92:5a:e9:5e:28:d7:fe:57:
1a:17:4d:be:fb:c7:08:6a:67:91:74:e3:84:68:d0:
c3:ba:a9:1d:e5:d8:45:e9:22:0b:24:5d:8d:6c:84:
64:2f:ad:86:29:ba:bb:e6:2d:ab:1b:3c:07:2e:05:
36:d8:3e:a2:1b:74:15:ac:ea:4d:dd:4b:c7:d8:19:
c4:69:fa:dd:6c:11:b4:83:ee:f5:1c:09:19:8d:0e:
c2:7e:97:d1:ee:21:48:7a:f1:a3:37:1a:bf:69:2d:
67:cb:27:ed:14:e8:5a:13:65:e1:19:7c:15:c9:25:
ca:b6:1d:a6:33:e4:87:e1:8b:b3:20:d2:9d:a2:d2:
09:a4:ef:7d:52:87:f8:06:ec:67:12:79:fd:6d:a4:
8d:c8:6a:cc:1c:91:e7:a2:87:ea:42:fd:26:4e:c3:
d7:76:b0:ef:88:ba:cc:4e:5d:07:05:47:68:b0:99:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:42:84:F3:4F:E3:E0:C8:5A:22:A4:39:F9:16:3F:C7:68:8B:17
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/cbVChPNP4-DIWiKkOfkWP8doixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.93.0/24
185.46.93.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:15:59:11:c7:76:3e:56:4d:f6:f6:88:26:5f:f3:63:6f:
d5:14:38:1c:23:4a:b7:3e:fc:0f:18:a7:13:58:56:b8:9b:bf:
1b:df:63:7b:1a:76:56:9d:8c:2a:0b:89:89:b0:4f:7f:25:ca:
69:b0:93:e1:ef:4a:7d:23:c5:3b:69:52:fe:c4:c6:ee:7e:1b:
7f:46:02:5e:78:b5:89:9d:74:4a:35:4e:fb:48:48:f7:cc:6b:
81:e7:fd:4c:a3:e3:e5:02:6e:56:28:5b:a0:72:fa:70:22:8d:
c2:dd:57:68:40:c6:59:bc:54:0d:09:aa:02:8f:b4:d9:ce:93:
08:32:cc:3c:22:6c:00:38:a6:c1:ff:15:91:51:aa:bd:2c:32:
03:5a:55:f8:6a:64:7f:82:c6:a3:f4:13:d1:2a:a4:d0:aa:c8:
0f:16:29:e7:d8:f1:b9:f6:1e:f5:e2:e5:eb:0b:1b:93:08:76:
ec:c6:c8:b6:59:92:9c:22:bb:25:20:f8:62:28:c5:03:75:ca:
e9:fb:cf:28:92:84:05:1f:2d:60:c3:61:1c:1f:13:26:89:30:
45:01:f1:ca:06:2d:f4:2f:4f:d9:94:f6:35:65:92:cd:90:75:
9b:46:a4:8f:de:3a:f7:9b:40:49:fa:15:4c:d8:50:0c:15:2d:
9a:b6:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:05 2026 by rpki-client