Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/78RtptxQshjOEl7mQ83jXiDnEK8.roa
File: 78RtptxQshjOEl7mQ83jXiDnEK8.roa (raw, json)
Hash identifier: jPAJWe9QhBUPp52He04OGfKDbfHrvmfWpIDF+I2JeKw=
Subject key identifier: EF:C4:6D:A6:DC:50:B2:18:CE:12:5E:E6:43:CD:E3:5E:20:E7:10:AF
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01A0F821CABB801509ABCB94774F455B5470
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/78RtptxQshjOEl7mQ83jXiDnEK8.roa
Signing time: Thu 01 Oct 2026 15:42:39 +0000
ROA not before: Thu 01 Oct 2026 15:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 176.124.222.0/24 maxlen: 24
176.124.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:21:ca:bb:80:15:09:ab:cb:94:77:4f:45:5b:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Oct 1 15:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc46da6dc50b218ce125ee643cde35e20e710af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:3a:f4:44:f4:65:6e:91:f4:55:3b:a6:15:
1b:2f:3e:ee:db:4e:c8:b1:c5:69:45:1b:89:5a:ad:
fc:f2:43:a4:fb:7e:85:c3:9a:9d:87:5d:53:d5:da:
0f:c9:0b:3a:42:c3:63:55:be:41:7f:30:a3:09:46:
58:f3:70:25:47:e8:8b:32:4e:bd:76:c9:4e:15:62:
18:ea:bc:c2:be:f1:ce:b7:85:6b:f3:2c:fe:0a:40:
09:a4:1d:a8:6c:27:f4:13:16:24:44:d4:b2:05:4d:
86:d3:1d:5f:55:a3:d5:48:3c:5c:05:9d:63:e7:c6:
c8:e8:5b:aa:74:41:24:24:cc:72:e3:94:05:5a:85:
d1:af:85:5c:a1:af:88:24:f5:c3:fb:32:6c:90:07:
c1:ac:93:5e:59:05:74:92:9c:c3:82:ab:6b:e8:f3:
4a:e7:66:0e:52:c6:85:f1:9c:3f:c6:c8:f9:59:2e:
3d:cc:02:95:89:e5:80:56:7a:be:f6:8f:af:e8:8d:
65:76:42:1e:48:4a:7f:64:c3:dc:c1:c3:ae:83:c9:
70:a8:6a:77:c1:12:81:d9:66:58:07:25:c0:5d:9a:
cf:84:fc:84:3b:cd:c4:1d:f6:96:c3:34:b4:1d:e4:
53:d0:71:1f:a5:5e:45:0b:d5:27:2e:9e:44:3c:c2:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:6D:A6:DC:50:B2:18:CE:12:5E:E6:43:CD:E3:5E:20:E7:10:AF
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/78RtptxQshjOEl7mQ83jXiDnEK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:9b:a4:a2:35:7b:d4:55:82:4f:44:8e:aa:66:28:e1:ea:94:
27:37:f1:83:69:6d:ad:11:ab:92:a2:6b:22:3a:ac:77:cc:95:
75:fb:87:9b:41:cf:ca:c9:d3:46:0c:34:e8:22:9c:6c:0b:f3:
53:c4:b7:c3:34:51:0b:4c:f0:b5:6d:a3:c9:a3:ab:d7:86:57:
65:43:3d:15:71:61:81:99:56:35:b1:a3:85:06:61:79:6d:29:
7e:5b:c3:f4:2c:04:af:cc:50:49:fb:f4:f1:bb:e2:9a:18:93:
bf:97:e6:88:9e:c8:d0:fc:23:98:05:af:c9:6d:73:89:ed:64:
60:dc:f4:6d:b6:04:70:44:a1:6f:70:c9:8d:b8:d2:8d:64:ac:
19:03:fe:c2:7c:8f:24:82:c4:d7:0c:1a:3f:5a:02:b9:33:b5:
6e:cf:d5:36:a3:aa:7f:ac:87:af:0f:fa:3e:d2:cd:c2:41:59:
56:99:0d:7b:b0:60:a3:8a:18:d3:b1:28:0e:69:af:31:e0:08:
a4:a9:13:90:65:b4:e7:79:94:2d:c8:01:3e:bd:16:ba:22:ee:
94:3b:cb:15:d3:2b:6e:fd:20:39:39:56:e9:86:dc:6f:eb:5c:
13:36:31:a6:6b:56:4b:c0:15:f1:cc:e8:49:ec:c4:04:93:89:
b3:5b:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:34:41 2026 by rpki-client