Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eO2WuWE-bLtc4uxtizRDoFV8bUc.roa
File: eO2WuWE-bLtc4uxtizRDoFV8bUc.roa (raw, json)
Hash identifier: z6UC5xVe5++fvc0Y1Cv2YwGPl9x3MbJTYte/Bk1SAl0=
Subject key identifier: 78:ED:96:B9:61:3E:6C:BB:5C:E2:EC:6D:8B:34:43:A0:55:7C:6D:47
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A11A9DB9057B82EB75CEADCF8537235EA9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eO2WuWE-bLtc4uxtizRDoFV8bUc.roa
Signing time: Thu 08 Oct 2026 08:25:06 +0000
ROA not before: Thu 08 Oct 2026 08:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197897
IP address blocks: 78.128.12.0/22 maxlen: 24
78.128.16.0/20 maxlen: 24
78.128.52.0/22 maxlen: 24
78.142.22.0/23 maxlen: 24
79.124.80.0/23 maxlen: 24
91.92.59.0/24 maxlen: 24
91.148.150.0/23 maxlen: 24
91.148.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:9d:b9:05:7b:82:eb:75:ce:ad:cf:85:37:23:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 8 08:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ed96b9613e6cbb5ce2ec6d8b3443a0557c6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:d3:f0:15:10:55:f0:5e:6d:d5:3f:b3:97:
e4:46:fc:4d:61:57:67:fb:01:0e:3b:33:dc:2f:6f:
03:5c:94:ff:f5:04:21:6e:12:59:16:b8:63:7c:07:
d2:2a:16:de:e7:9d:f4:ac:8c:33:48:8c:29:62:d8:
3f:93:1a:81:df:77:bb:47:03:9c:d7:a5:80:4f:c3:
3f:8e:75:56:6e:f7:f5:e6:98:d0:d7:77:40:5f:4c:
e2:4e:aa:69:07:12:97:0a:8f:ed:ed:56:c0:31:a0:
55:c0:6a:42:3b:34:b1:80:a1:23:2d:7e:10:71:89:
f5:22:d4:b0:6e:bb:93:b6:62:fd:83:8c:15:bb:80:
4c:b3:e3:67:d9:8f:ff:d9:08:49:d5:be:b3:8b:84:
de:a4:14:33:7c:04:fa:e5:81:12:1e:ce:ea:7c:5c:
c0:2e:1c:ff:f7:0d:4c:56:4d:7b:ef:45:f6:a0:2c:
37:07:b4:cf:2c:ae:05:2a:67:66:13:fa:39:99:dd:
86:ba:34:07:7d:d7:c7:87:d0:46:d8:8f:3b:ca:94:
6d:99:a3:f2:83:c0:c6:1e:18:90:46:94:cd:c8:ff:
2e:99:c6:89:87:8b:66:68:20:63:36:ef:e9:b6:f5:
f8:eb:a6:1a:87:e7:01:c9:b0:97:9a:53:7b:a4:e6:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:96:B9:61:3E:6C:BB:5C:E2:EC:6D:8B:34:43:A0:55:7C:6D:47
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eO2WuWE-bLtc4uxtizRDoFV8bUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.12.0-78.128.31.255
78.128.52.0/22
78.142.22.0/23
79.124.80.0/23
91.92.59.0/24
91.148.150.0-91.148.159.255
Signature Algorithm: sha256WithRSAEncryption
95:58:db:1b:64:c5:b4:50:25:32:5b:6d:b7:2e:75:43:18:bc:
5e:2a:24:f6:73:36:3d:f2:62:e2:23:95:e9:ce:a9:3a:3e:ef:
06:9a:97:13:15:d8:c4:20:8d:94:af:96:00:f5:2d:ff:00:d8:
d3:06:2d:cf:98:2f:2b:58:d8:94:de:50:b4:d2:67:56:3c:b7:
e0:03:a7:6c:69:ae:ab:09:7a:af:55:47:68:49:19:53:82:49:
85:31:45:c7:02:27:d2:f1:fe:19:fb:96:63:39:22:9f:b7:81:
ec:43:74:eb:22:7a:0f:ba:cd:00:d3:82:75:d3:c5:e2:70:53:
61:d2:62:b9:0c:4e:e5:73:48:3a:75:24:7f:c9:61:5e:e7:7a:
b4:09:0e:50:f8:70:7c:54:2c:03:69:b6:ff:29:04:0a:5b:74:
26:8f:7d:99:b3:8a:e2:29:33:a7:c3:c2:69:86:64:93:53:61:
8c:3e:1a:c9:ff:d7:87:11:fd:97:44:ac:c4:fd:89:b7:1b:df:
bc:3d:cb:c3:72:c3:6b:62:09:74:0d:3b:5a:fd:2b:cc:26:94:
65:84:18:7a:00:f9:c0:e0:b8:5f:eb:38:30:19:e6:63:8f:e3:
e2:25:72:99:f2:56:ce:7d:00:2d:a7:7c:1f:a4:62:eb:17:7b:
02:fd:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:53:09 2026 by rpki-client