Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa
File: 1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa (raw, json)
Hash identifier: U5KKsQZXnB3f4SiABQNbnkHpt5N7LJeYR33Tw+W5RJ4=
Subject key identifier: FB:FF:BA:48:5D:0E:79:4D:1A:50:AE:4E:1F:94:D2:AB:6C:7C:88:95
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A14657638D922BA99ABF7CAB668E0DCE9C
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa
Signing time: Fri 16 Oct 2026 20:11:34 +0000
ROA not before: Fri 16 Oct 2026 20:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201256
IP address blocks: 78.236.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:57:63:8d:92:2b:a9:9a:bf:7c:ab:66:8e:0d:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Oct 16 20:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbffba485d0e794d1a50ae4e1f94d2ab6c7c8895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:36:18:03:58:dd:91:74:04:f0:78:48:bc:
f9:ea:0f:5e:93:da:6b:12:7c:da:8e:64:a8:2b:42:
7e:00:e6:20:99:50:bd:7a:96:67:17:f2:57:33:ce:
f7:4a:a3:44:d2:a5:63:52:22:2e:4b:1f:00:81:29:
ef:5c:60:ae:f0:05:1d:58:96:c7:2e:73:73:70:80:
2d:07:4b:91:db:26:f4:ff:93:be:be:02:13:54:d3:
3a:1b:1e:52:ea:28:d3:02:3c:8f:1d:81:1c:17:f8:
e0:b6:68:4c:5c:00:6c:e3:36:1c:0e:6c:4c:63:f9:
32:ce:da:14:e8:9b:cd:f1:74:e7:58:90:b8:56:3d:
16:76:73:ef:7e:1b:96:f8:4c:6a:20:04:98:33:1c:
88:b7:57:80:2f:43:98:fd:35:a3:38:c3:83:25:6a:
eb:b4:dd:ff:dd:c1:86:a1:4a:c5:0c:71:bb:23:0c:
0e:c1:34:5d:bb:ae:4a:86:98:6b:46:4f:0c:12:18:
6e:a0:4d:ae:5a:5d:39:24:99:41:0c:a0:fd:f0:78:
86:44:13:81:e5:fd:b0:47:58:c6:ae:93:48:fc:be:
d9:7c:d7:b1:b7:64:57:25:2e:aa:3a:60:90:11:48:
b1:d7:b0:7f:c7:96:df:51:8b:63:17:e6:25:03:85:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:BA:48:5D:0E:79:4D:1A:50:AE:4E:1F:94:D2:AB:6C:7C:88:95
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/1-_-6SF0OeU0aUK5OH5TSq2x8iJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.236.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:c8:b8:9b:d0:c1:4d:9f:0e:0d:f8:8d:71:84:10:39:50:d9:
e5:5b:11:68:9d:4e:dc:68:84:5c:61:59:7f:b4:97:8c:ae:24:
da:41:c9:20:3e:4b:df:26:66:bb:a4:d2:b5:35:42:16:e1:74:
a2:c6:47:fe:f0:96:30:a5:5a:9c:c2:f2:b3:d4:93:4b:18:e5:
a7:1e:4d:a8:58:16:f0:82:b4:d7:d1:dd:bb:a8:2f:fa:71:72:
d2:f1:dc:59:61:6a:39:e5:44:94:b7:ef:cb:a9:9c:b3:53:38:
43:17:5c:b1:41:82:11:8a:00:e2:c7:51:a9:7e:13:31:54:d8:
49:5a:32:96:93:ed:50:25:af:3d:4d:a2:46:21:f1:8e:21:c6:
27:a8:45:f3:81:c1:ac:c6:ea:7e:e1:28:db:2b:d9:94:8d:5a:
46:fc:f3:8d:ed:cf:81:88:96:cb:4d:5d:03:50:c4:d3:c9:2d:
23:cb:96:e1:91:8e:13:fb:4b:27:93:53:54:eb:29:f4:f4:9c:
31:a6:a3:cc:ad:8a:b3:19:63:b2:cc:28:8e:74:6e:17:ca:e6:
0a:88:88:e1:99:5f:94:65:35:d8:8e:27:c1:a8:1c:8f:0e:7d:
aa:d4:9f:39:1e:2e:5b:dd:82:9e:05:41:ca:80:14:58:b4:5f:
f9:91:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:43 2026 by rpki-client