Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/fpbYi3rtMLHttdhXIl5tKygkn9A.roa
File: fpbYi3rtMLHttdhXIl5tKygkn9A.roa (raw, json)
Hash identifier: 6e5xUY60XkL7jAdgf7b6GKl/1XwNQ1TV9RcAiw3kAzc=
Subject key identifier: 7E:96:D8:8B:7A:ED:30:B1:ED:B5:D8:57:22:5E:6D:2B:28:24:9F:D0
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A08AC9C93AE11F9D079502AB247324B2D6
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/fpbYi3rtMLHttdhXIl5tKygkn9A.roa
Signing time: Thu 10 Sep 2026 10:07:55 +0000
ROA not before: Thu 10 Sep 2026 10:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218711
IP address blocks: 78.110.224.0/21 maxlen: 24
78.110.232.0/24 maxlen: 24
78.110.234.0/24 maxlen: 24
78.110.235.0/24 maxlen: 24
78.110.236.0/22 maxlen: 24
2a11:7f80::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c9:c9:3a:e1:1f:9d:07:95:02:ab:24:73:24:b2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Sep 10 10:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e96d88b7aed30b1edb5d857225e6d2b28249fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:8a:9b:76:72:47:c3:b7:64:8e:ff:65:db:
93:fb:06:c2:bb:86:e1:2a:2e:dd:b7:76:68:2d:43:
08:37:cb:e2:78:7e:01:7c:0c:3c:08:9e:0b:45:06:
81:83:d2:2f:5b:4f:2f:9b:61:2a:72:f9:72:f2:00:
69:64:5c:c0:3d:c0:d3:74:e1:ea:16:d1:d4:2d:a8:
8d:8f:c2:23:65:a4:be:66:c9:91:a3:0b:48:1c:86:
ff:19:f2:f9:bf:8d:7d:99:28:d6:17:52:9b:81:fe:
75:4f:c0:9f:bb:ac:9d:a5:6e:81:0f:58:07:ac:b2:
39:d9:f8:dc:71:46:89:29:2c:e0:d8:c1:1b:d7:ff:
cf:97:d9:fc:b6:90:b1:f7:81:5a:98:ae:fe:54:96:
67:b9:ed:3e:73:f0:73:8c:5b:67:22:0a:10:e7:c2:
8a:83:80:93:ec:b0:2e:eb:63:a2:67:60:7f:02:98:
4c:f6:81:05:e2:ce:7e:c4:33:d2:51:a2:81:e8:f5:
9e:20:bb:cb:54:ce:5f:9a:92:50:6d:b4:9d:bb:96:
ad:5d:55:63:b8:72:88:9d:58:0f:b1:85:15:86:91:
4c:ba:14:4a:8e:93:2c:27:36:f8:1d:35:91:90:e5:
ed:d0:c8:4d:8d:ae:46:57:4c:15:02:b5:28:d0:35:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:D8:8B:7A:ED:30:B1:ED:B5:D8:57:22:5E:6D:2B:28:24:9F:D0
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/fpbYi3rtMLHttdhXIl5tKygkn9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.224.0-78.110.232.255
78.110.234.0-78.110.239.255
IPv6:
2a11:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
af:4c:7b:e8:bf:a9:24:47:a3:e9:5b:f6:08:ce:65:c5:0d:5a:
e3:9c:ed:ab:d3:81:de:f5:aa:7a:b2:f8:1e:ae:0e:98:5e:22:
c1:84:e4:0e:92:52:55:79:54:98:ca:f3:37:73:3b:b2:c3:08:
3b:04:60:89:56:49:06:0f:67:d8:57:34:35:72:2b:f9:9a:7b:
25:d2:84:14:4e:80:d8:3f:39:33:32:1a:d1:85:6c:b9:3c:54:
4e:5a:a9:cd:95:5d:8c:12:f2:89:47:7f:94:b7:70:e5:22:1d:
a2:bf:dc:78:04:d6:5f:ca:01:03:bc:fa:f8:bd:5a:72:05:f8:
93:78:82:49:07:7a:6e:ae:7d:93:2b:b8:35:3e:e2:cb:b3:f2:
ea:59:c0:cb:74:b7:94:e4:b6:71:37:9c:8b:14:9f:39:aa:f5:
7e:e5:ac:c6:bd:35:a9:14:08:ff:f1:eb:0c:ae:c7:b2:58:05:
10:7b:7e:f4:eb:e5:e3:ce:7f:08:7e:47:78:35:ae:c4:f9:e6:
23:8d:44:67:93:b2:3a:82:ca:2b:14:e4:47:b4:2f:c8:85:cb:
72:f3:06:98:7d:f8:02:94:cd:c0:b7:df:57:77:65:56:d6:18:
12:43:97:5e:3b:b4:17:66:03:9c:8d:8e:30:02:d7:91:8e:e2:
92:93:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:16:27 2026 by rpki-client