Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa
File: 3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa (raw, json)
Hash identifier: XNNIE44ge5HMxwFA2gOqxuT00NVaU1du4qDwv9gF7DE=
Subject key identifier: DE:C4:A5:1E:B1:E4:A5:92:FC:75:78:C7:E1:18:44:89:91:6E:F2:75
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019F5BF3ABFC0528601E8C9918644F4B8FB5
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa
Signing time: Mon 13 Jul 2026 14:48:43 +0000
ROA not before: Mon 13 Jul 2026 14:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219335
IP address blocks: 78.108.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:f3:ab:fc:05:28:60:1e:8c:99:18:64:4f:4b:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jul 13 14:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dec4a51eb1e4a592fc7578c7e1184489916ef275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:ec:1e:6c:f4:73:50:48:72:b3:93:04:48:
26:18:d8:62:ec:85:de:8d:86:cb:8c:43:1c:ea:9a:
ba:8c:31:f9:56:05:df:0e:83:44:66:d1:3a:3c:c0:
23:12:1b:d1:de:cf:d7:f7:a6:c6:5b:fd:b6:2c:68:
79:c3:d0:2d:31:0a:41:31:2b:28:6f:fc:97:29:5d:
10:6b:ee:38:46:80:09:39:d3:36:86:fc:25:d6:bb:
a7:e8:91:5f:04:b8:48:80:de:47:1d:bb:ce:04:b0:
b6:09:0f:4b:ce:79:26:d0:9f:7c:39:43:0f:00:a2:
85:9a:28:72:1d:93:28:41:e5:17:a3:56:ad:47:f1:
2e:6d:c6:d1:78:26:a7:bf:26:c3:46:5e:a4:ef:ed:
fc:ab:35:02:8b:76:78:bd:09:4a:f2:10:26:ec:1d:
40:dc:47:58:b3:60:14:4c:06:07:ce:53:2a:5d:77:
54:b7:20:25:0a:ae:2f:52:66:73:22:8f:0e:dc:9d:
b0:94:6e:32:94:19:43:77:58:8e:2b:b3:be:ce:a8:
11:e5:10:df:5c:8a:a3:f5:25:f6:2e:ab:02:72:81:
e0:34:20:5d:7b:eb:5e:8b:de:e2:f4:b6:b5:e5:45:
63:40:1e:35:eb:86:89:98:1b:04:b6:86:f9:ac:75:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:A5:1E:B1:E4:A5:92:FC:75:78:C7:E1:18:44:89:91:6E:F2:75
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3sSlHrHkpZL8dXjH4RhEiZFu8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e7:35:a5:87:d4:f5:3e:ca:53:65:17:31:22:3f:f5:93:6d:
ad:35:ac:36:bf:1b:7c:ec:1c:71:84:b1:b3:c7:79:90:00:4a:
8b:42:df:f1:7b:ab:bd:dc:6b:89:2a:43:72:3e:33:63:18:73:
88:d0:76:02:fa:61:b1:d3:36:2c:58:cf:a7:95:cd:4b:16:21:
c2:41:2e:ff:7b:98:59:04:fd:5c:ac:41:d9:5c:92:4d:2c:11:
62:fc:ba:12:0c:40:df:7f:60:2e:0f:bd:67:bf:0d:ef:28:3e:
2b:11:23:10:18:9a:3a:0e:63:47:2b:8f:53:54:3b:13:bb:7d:
85:f8:58:3e:fc:42:22:a1:89:bc:55:c7:3f:9d:c7:bf:94:18:
cf:a4:77:43:04:56:9f:d5:1f:ef:68:34:5e:a0:fe:1a:7e:95:
ef:7f:80:13:e5:93:ef:a8:8c:80:9a:5b:5b:43:b7:39:c0:e7:
28:62:31:76:ae:ca:84:09:ae:4a:14:58:7d:9f:75:5f:bd:41:
0a:e2:55:a5:b2:d4:be:f7:04:a7:1d:ba:12:49:42:fd:36:a9:
36:04:6f:9d:57:37:48:e0:81:18:8d:aa:93:7c:6f:a5:ac:82:
2b:4b:28:3c:ef:a6:9a:1a:1f:5f:34:1d:02:e5:13:05:51:9d:
cd:1b:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:12:35 2026 by rpki-client