Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wG6BQgHMTn0--XunzFihDLos2bk.roa
File: wG6BQgHMTn0--XunzFihDLos2bk.roa (raw, json)
Hash identifier: 59UkldsJA24k7TTFy5rY/tlpAosZqBzdVf+tpGFl5+U=
Subject key identifier: C0:6E:81:42:01:CC:4E:7D:3E:F9:7B:A7:CC:58:A1:0C:BA:2C:D9:B9
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A117679464DF67DA9546B45B3A161AE29E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wG6BQgHMTn0--XunzFihDLos2bk.roa
Signing time: Wed 07 Oct 2026 17:27:06 +0000
ROA not before: Wed 07 Oct 2026 17:27:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58079
IP address blocks: 78.128.56.0/22 maxlen: 24
78.128.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:67:94:64:df:67:da:95:46:b4:5b:3a:16:1a:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 7 17:27:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c06e814201cc4e7d3ef97ba7cc58a10cba2cd9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:46:52:dd:52:f2:d2:58:7f:32:d8:b4:fb:
d4:d0:db:ad:12:82:b9:b6:86:8e:83:ad:0e:86:db:
07:c9:8b:61:9e:75:3f:e8:b1:3c:dc:5c:48:0e:cc:
db:3e:db:12:0a:15:25:07:07:1f:26:bc:65:29:a6:
07:55:20:3d:6a:cf:b2:32:3f:89:21:c8:6a:8d:92:
9a:ba:d7:80:34:f7:75:e2:07:cc:86:6a:cf:a4:c0:
d1:b6:df:e0:28:f5:3f:79:77:1a:47:b0:d8:1c:ad:
1e:0a:61:ea:87:a8:98:a1:23:a5:a9:a7:df:16:1b:
21:62:a5:fa:b4:08:eb:35:0b:82:72:19:02:8b:47:
99:94:1d:8c:be:b0:c1:3f:64:3a:20:28:55:12:db:
83:c7:68:48:05:f1:02:1a:f8:59:49:5b:0a:47:8f:
b3:e6:16:a4:c6:f9:45:2c:74:8c:ee:be:01:27:6a:
64:1f:32:29:1b:01:b5:d6:51:be:d0:49:0e:ec:32:
13:3e:e2:3d:7f:ec:bb:e0:3a:fd:93:21:2f:89:61:
29:89:dd:2c:e1:fd:f5:1d:36:84:38:23:7e:e3:87:
a7:79:73:f1:b7:5f:5a:14:8e:6f:77:a3:81:d5:98:
fb:98:51:e1:9a:43:78:ea:80:c8:9f:13:67:45:96:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:81:42:01:CC:4E:7D:3E:F9:7B:A7:CC:58:A1:0C:BA:2C:D9:B9
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wG6BQgHMTn0--XunzFihDLos2bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.56.0/22
78.128.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4f:11:e7:5b:a4:bb:fb:a5:8d:fa:8b:db:ef:db:36:2d:e8:
2e:8a:5f:5c:68:7c:d5:06:ea:70:4c:f0:32:b5:6f:ea:73:64:
0c:ad:2b:72:88:f7:7b:1d:30:c5:be:4a:65:74:cd:d4:56:38:
69:f8:2a:8e:80:76:43:f4:f7:0a:5a:bb:33:c6:f8:cb:cd:11:
ab:c8:2b:89:10:78:d6:76:28:ab:c0:1c:27:04:64:83:b8:a5:
d6:a4:eb:d6:59:27:65:b2:93:86:cd:ab:29:d5:53:1e:c0:c4:
91:eb:f4:ec:3f:0b:c3:46:c8:cf:24:e3:bd:cb:11:7a:b4:eb:
1c:a5:fa:b6:40:56:b2:ab:84:aa:95:17:e8:f3:1d:e6:69:53:
b1:75:e8:ee:42:d1:ba:3a:8c:55:ad:28:59:3e:0d:9f:37:07:
8f:9a:c8:c4:31:9a:ed:77:e1:1a:44:21:99:b5:6e:05:ee:48:
04:5d:df:2f:ac:a9:26:65:ee:12:c8:5c:f5:5a:0d:51:71:ae:
2a:50:c0:5c:d7:d9:62:78:f6:22:96:4b:98:6f:92:60:ee:fd:
85:52:c4:03:67:e2:69:58:e5:c3:ce:28:3c:bb:48:bc:cd:66:
e8:8a:e4:f5:e9:70:60:0b:cb:74:6f:78:73:17:00:2e:66:0b:
2a:b2:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:55:48 2026 by rpki-client