Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/kbLynu4mQGlqu4X3QYEBsUFsAu4.roa
File: kbLynu4mQGlqu4X3QYEBsUFsAu4.roa (raw, json)
Hash identifier: xZ8gHAKSrl/T1WoSM0PbChAbKr0bp3bbKxflPz07Cq0=
Subject key identifier: 91:B2:F2:9E:EE:26:40:69:6A:BB:85:F7:41:81:01:B1:41:6C:02:EE
Certificate issuer: /CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Certificate serial: 019F2368FF2DFA360170B5DEC3262AF79C66
Authority key identifier: A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/kbLynu4mQGlqu4X3QYEBsUFsAu4.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200410
IP address blocks: 78.24.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:2d:fa:36:01:70:b5:de:c3:26:2a:f7:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91b2f29eee2640696abb85f7418101b1416c02ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:18:b7:bb:1b:e8:f8:27:b3:ad:7f:69:87:
fc:2f:3b:53:65:63:ea:76:ac:ca:7a:40:8a:19:ee:
db:c0:bb:8c:dc:31:62:35:c2:15:6b:39:46:8d:62:
94:8e:1d:cd:76:05:19:58:be:a2:f1:fa:4d:2f:4f:
a3:65:d5:e4:e4:f7:8d:9a:1e:7b:e7:97:02:e2:91:
e8:a1:70:07:04:d1:7a:d4:c9:cf:38:c9:a8:d1:c6:
bf:91:ee:b4:4f:32:1c:28:82:51:46:ad:e5:5d:29:
1e:2f:34:a2:28:ee:c9:d9:dc:74:9c:52:16:63:44:
83:b9:42:54:f0:00:6b:a2:34:d8:a7:e1:67:dc:91:
6f:f7:e9:96:ea:30:36:a3:f2:f0:53:86:56:94:5d:
eb:0a:d6:5c:0f:fd:42:fc:9f:61:59:7f:ce:0c:f9:
9d:d6:65:e6:45:ff:96:4e:c6:cd:09:ba:69:13:a2:
f5:36:55:99:55:4b:ea:2a:75:fd:f6:89:30:8d:ff:
45:93:7e:8e:9c:27:3d:a5:66:da:ad:72:d2:f1:23:
da:35:fc:80:79:0d:dc:54:17:91:79:cc:09:0d:2c:
bb:bf:f2:52:15:3e:7c:11:81:66:6f:33:6c:97:d7:
d4:3b:94:ca:f4:06:87:2f:ef:4f:3b:18:ff:63:57:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:F2:9E:EE:26:40:69:6A:BB:85:F7:41:81:01:B1:41:6C:02:EE
X509v3 Authority Key Identifier:
keyid:A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/kbLynu4mQGlqu4X3QYEBsUFsAu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:06:3c:b4:2a:86:a5:24:f0:15:96:4d:10:87:bf:c7:6d:97:
ab:11:b7:b0:5e:1b:cd:b0:e7:d5:9a:2e:3d:d2:ec:96:1b:0e:
d6:0f:b7:b5:97:e2:da:ef:d1:1d:96:71:d9:24:59:c5:68:fc:
8b:3f:bd:af:15:13:21:f0:00:35:7c:df:77:e3:98:a9:2f:87:
fc:b5:f0:3c:82:88:cf:60:61:d6:23:09:af:52:e9:20:4b:6b:
49:26:35:d6:cd:95:5d:ee:60:94:4a:b4:16:c6:f0:54:e0:d4:
88:bc:9f:4e:c8:66:b8:87:83:a9:2b:7d:40:ad:1f:2e:82:ab:
70:28:86:46:53:a7:68:7c:8f:3b:01:e7:01:32:7a:6c:4e:5f:
9a:ef:2c:ea:2d:05:ea:ce:0b:9d:f3:16:b8:49:12:74:10:7e:
29:1a:0c:e0:44:97:9a:6c:17:3c:cc:59:98:4f:de:d9:1a:92:
80:e1:4c:42:1a:a4:d7:f1:fb:d9:b2:d2:a1:68:7f:60:0b:c9:
5f:0f:e3:23:d7:10:ef:9e:f9:08:31:14:13:8a:e7:24:9c:4c:
26:98:f8:89:83:3f:a8:40:19:ad:41:4e:41:0b:2f:c2:11:b2:
28:ae:ed:42:6c:3e:04:64:e2:b8:59:5a:91:bd:b7:11:4e:36:
f8:a3:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:10:44 2026 by rpki-client