Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa
File: AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa (raw, json)
Hash identifier: S6JRpy3bmHsrx74qGhjcEZtWymHQGnV4C16UhCDLJQw=
Subject key identifier: 01:81:45:6C:36:F7:03:62:1D:D9:06:66:71:0C:F8:FF:96:C0:1D:9B
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A0F2868EE3EAE60CFE664BC07D9F9B2D80
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa
Signing time: Wed 30 Sep 2026 13:34:59 +0000
ROA not before: Wed 30 Sep 2026 13:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30781
IP address blocks: 78.236.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:86:8e:e3:ea:e6:0c:fe:66:4b:c0:7d:9f:9b:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 30 13:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0181456c36f703621dd90666710cf8ff96c01d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:97:04:99:a8:2c:34:2c:25:35:17:73:93:
69:3a:ad:f8:0b:00:ec:6a:8c:26:36:7f:25:47:59:
8f:d0:97:e7:4f:48:cd:0a:1c:bd:d1:fc:a7:3f:ce:
59:70:22:00:9d:52:7c:69:3d:ba:4b:f0:62:ef:f3:
c9:a4:a0:19:cd:28:fb:e5:95:34:6a:e3:3a:65:30:
4c:24:db:b6:ee:1d:c0:f5:c0:11:20:8f:d7:d1:b5:
61:56:3b:06:13:f7:40:da:53:27:8f:f7:10:eb:7a:
47:7d:75:fc:be:e8:3a:64:8e:f1:5f:96:82:35:8b:
5d:e3:da:7f:9e:6b:18:25:6c:56:37:e9:8a:2c:c7:
8f:35:68:d8:86:48:30:6b:e9:b4:ca:54:3b:dc:33:
b1:10:3d:88:cb:d7:8a:7d:1d:67:78:e4:23:f2:15:
e6:0f:ed:66:ee:b4:a8:35:e7:eb:33:21:69:7c:58:
77:29:0c:2d:2e:45:82:b9:b3:06:a0:cd:ad:0f:90:
3d:c5:75:db:77:a9:e8:25:90:ce:db:52:e6:12:f2:
2c:19:e9:f9:f7:2c:b6:d8:8a:fe:1e:7e:31:51:67:
6c:ca:a2:00:b0:03:ff:aa:e4:74:74:22:fb:9e:1a:
2d:93:bd:ee:1a:1f:7c:9e:58:c5:45:21:3b:fe:24:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:45:6C:36:F7:03:62:1D:D9:06:66:71:0C:F8:FF:96:C0:1D:9B
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/AYFFbDb3A2Id2QZmcQz4_5bAHZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.236.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:ac:ff:9e:88:6c:33:47:10:2d:ab:d7:6d:58:41:f5:db:91:
d0:63:48:60:7c:0c:46:43:5b:d4:06:8d:cc:08:79:65:9c:9b:
59:34:50:09:14:f7:57:ad:dc:66:b8:1a:19:02:36:e1:a6:f8:
0a:c6:3a:04:09:c0:51:82:83:b0:bb:7f:88:66:5d:2e:40:74:
ef:7c:da:5f:c6:18:08:84:7f:44:46:8e:88:d0:e5:03:e7:c6:
31:c5:c1:da:a4:14:8f:b4:01:ee:4f:b1:d8:4c:2b:ab:04:58:
4a:df:3a:f5:6e:ed:80:2a:7e:39:87:35:4f:92:c5:cc:75:80:
4c:9e:02:7f:e1:b8:f0:dc:d3:11:29:46:95:f2:e5:ba:75:6a:
14:5e:09:cb:22:23:c7:45:1d:80:8f:d8:c8:b8:15:99:3a:31:
ad:f0:fc:1a:6f:bf:bc:ff:36:0f:7d:fa:8e:87:52:52:67:15:
ce:9b:91:1e:23:7e:f5:76:f3:ad:a2:bc:37:9a:b8:17:23:70:
92:50:23:5f:3f:bd:ac:26:eb:64:94:71:92:a9:15:1f:c8:58:
5c:21:5c:e8:a0:21:2b:ce:a2:6e:05:58:c8:8c:93:d2:76:07:
43:53:fe:75:2f:4e:a2:55:8e:04:b8:88:41:1f:7b:70:c0:45:
50:62:79:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDyho7j6uYM/mZLwH2fmy2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwOTMwMTMzNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTgxNDU2YzM2ZjcwMzYyMWRkOTA2NjY3MTBjZjhmZjk2YzAxZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GiXBJmoLDQsJTUXc5NpOq34CwDs
aowmNn8lR1mP0JfnT0jNChy90fynP85ZcCIAnVJ8aT26S/Bi7/PJpKAZzSj75ZU0
auM6ZTBMJNu27h3A9cARII/X0bVhVjsGE/dA2lMnj/cQ63pHfXX8vug6ZI7xX5aC
NYtd49p/nmsYJWxWN+mKLMePNWjYhkgwa+m0ylQ73DOxED2Iy9eKfR1neOQj8hXm
D+1m7rSoNefrMyFpfFh3KQwtLkWCubMGoM2tD5A9xXXbd6noJZDO21LmEvIsGen5
9yy22Ir+Hn4xUWdsyqIAsAP/quR0dCL7nhotk73uGh98nljFRSE7/iSC9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGBRWw29wNiHdkGZnEM+P+WwB2bMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvQVlGRmJEYjNBMklkMlFabWNRejRfNWJBSFpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTuwAMA0G
CSqGSIb3DQEBCwUAA4IBAQA7rP+eiGwzRxAtq9dtWEH125HQY0hgfAxGQ1vUBo3M
CHllnJtZNFAJFPdXrdxmuBoZAjbhpvgKxjoECcBRgoOwu3+IZl0uQHTvfNpfxhgI
hH9ERo6I0OUD58YxxcHapBSPtAHuT7HYTCurBFhK3zr1bu2AKn45hzVPksXMdYBM
ngJ/4bjw3NMRKUaV8uW6dWoUXgnLIiPHRR2Aj9jIuBWZOjGt8Pwab7+8/zYPffqO
h1JSZxXOm5EeI371dvOtorw3mrgXI3CSUCNfP72sJutklHGSqRUfyFhcIVzooCEr
zqJuBVjIjJPSdgdDU/51L06iVY4EuIhBH3twwEVQYnlz
-----END CERTIFICATE-----
Generated at Fri Oct 9 09:21:59 2026 by rpki-client