Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa
File: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (raw, json)
Hash identifier: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=
Subject key identifier: CF:D0:96:F0:43:53:E2:6B:3C:A9:28:27:46:F5:0B:EB:FB:C3:8C:F6
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019E2AEF276D84D9528D54E47A1AE40B90D9
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa
Signing time: Fri 15 May 2026 09:19:36 +0000
ROA not before: Fri 15 May 2026 09:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 78.153.131.0/24 maxlen: 24
78.153.139.0/24 maxlen: 24
78.153.144.0/24 maxlen: 24
78.153.150.0/24 maxlen: 24
78.153.151.0/24 maxlen: 24
78.153.155.0/24 maxlen: 24
109.237.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:ef:27:6d:84:d9:52:8d:54:e4:7a:1a:e4:0b:90:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: May 15 09:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfd096f04353e26b3ca9282746f50bebfbc38cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:76:15:14:fc:fd:fc:8e:64:03:44:d5:2f:
fb:d6:aa:9e:89:36:3e:6c:6e:f5:59:5c:2c:6f:9d:
93:07:8a:a2:95:46:70:90:59:26:8d:b4:b8:54:ad:
84:87:08:d1:12:4a:4a:81:4a:27:c9:c3:4c:8b:a0:
a2:91:5f:b5:c4:b9:ce:82:1e:48:a6:42:c5:d4:2b:
cf:41:e8:c6:f1:39:4b:be:57:af:6f:a2:73:be:51:
67:ce:34:8d:cc:8a:00:a7:af:bf:d6:68:d0:5d:95:
86:05:bb:9f:2c:76:31:e1:a7:ae:2b:e2:ba:b1:ae:
0c:6b:04:92:c2:00:49:3b:cc:a3:6d:19:8d:58:10:
53:db:c8:2c:6d:e2:a1:ae:09:bb:e7:0c:96:78:02:
75:64:aa:a4:e6:51:bb:33:22:e4:d8:02:ef:9f:5c:
92:05:ce:9b:c1:d5:b3:04:cc:9b:49:ac:05:56:52:
09:86:9a:00:42:7a:70:69:bc:a3:53:ca:b1:01:46:
db:52:43:64:19:d4:b8:1c:60:65:09:29:d0:25:6b:
b8:37:f3:3e:da:08:28:76:eb:f0:e9:9a:3c:51:6c:
6a:a6:cf:9e:0a:0b:40:31:b7:8e:11:03:21:10:d3:
07:3d:9b:72:c2:7c:df:40:8b:1e:1a:8b:e2:4f:91:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:96:F0:43:53:E2:6B:3C:A9:28:27:46:F5:0B:EB:FB:C3:8C:F6
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.131.0/24
78.153.139.0/24
78.153.144.0/24
78.153.150.0/23
78.153.155.0/24
109.237.99.0/24
Signature Algorithm: sha256WithRSAEncryption
52:73:2e:83:f4:e8:82:82:ed:d1:73:3e:29:5b:37:9a:c4:7b:
0a:c0:27:f3:81:27:4e:25:25:90:f7:a9:b8:51:cf:41:18:60:
3e:5f:64:2a:f7:a2:5e:08:fa:e9:7a:21:ac:08:7c:6d:77:1a:
24:4b:35:13:e4:ec:e9:01:57:a2:2c:95:44:b0:48:b2:c5:74:
3d:59:92:69:81:d1:7f:25:d7:f0:c8:a9:90:24:28:c7:92:fd:
3b:16:b5:ad:8c:47:03:d1:67:8f:89:65:d7:2f:b9:16:60:b3:
fa:cb:4a:6b:16:54:a3:27:02:86:25:68:c0:4c:a9:cc:b9:2d:
15:1a:d8:e8:c7:07:8c:ff:8a:b8:b6:b4:76:be:0a:18:9e:e6:
bb:ab:a5:5b:7e:ec:ff:65:24:99:16:bc:08:51:cc:cd:b4:7d:
b3:23:a3:54:1a:cc:10:a9:2f:a1:c6:a8:a8:cb:4e:f6:32:57:
e4:b0:c1:23:33:9a:7e:b9:f9:5c:04:b3:b8:6e:9b:43:9b:e4:
c9:2f:70:c1:4a:c6:40:e0:cd:a9:5f:7b:13:ec:8f:69:eb:28:
c9:13:ee:07:8c:1d:b7:56:9c:64:5b:52:0f:2f:4f:e0:ca:19:
49:49:9a:25:53:29:68:8a:58:20:88:46:2d:69:bc:80:38:8a:
6c:17:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:11:26 2026 by rpki-client