Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/PSQdpoLiETwhLIiwRzcRCOr_Fb0.roa
File: PSQdpoLiETwhLIiwRzcRCOr_Fb0.roa (raw, json)
Hash identifier: tuAEjJ4XYgDE7lOfOo0bA6wxb7Jjg9/rWfHmk6M2VQM=
Subject key identifier: 3D:24:1D:A6:82:E2:11:3C:21:2C:88:B0:47:37:11:08:EA:FF:15:BD
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A01522616FBE10FD0F0F22F20ED5506DF7
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/PSQdpoLiETwhLIiwRzcRCOr_Fb0.roa
Signing time: Tue 18 Aug 2026 13:49:29 +0000
ROA not before: Tue 18 Aug 2026 13:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 78.231.0.0/18 maxlen: 18
78.231.64.0/18 maxlen: 18
78.231.128.0/18 maxlen: 18
78.231.192.0/18 maxlen: 18
78.235.32.0/19 maxlen: 19
78.235.64.0/19 maxlen: 19
78.235.96.0/19 maxlen: 19
78.235.128.0/19 maxlen: 19
78.235.160.0/19 maxlen: 19
78.235.192.0/19 maxlen: 19
78.235.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:22:61:6f:be:10:fd:0f:0f:22:f2:0e:d5:50:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Aug 18 13:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d241da682e2113c212c88b047371108eaff15bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:39:27:85:bb:00:9b:1e:84:b9:85:37:3e:
1d:df:61:d1:49:ae:cb:80:49:a4:0f:21:72:17:51:
34:cc:be:ad:54:78:62:a6:2a:99:5d:91:76:11:e1:
57:72:4d:39:33:b8:9d:a9:92:ba:84:eb:8b:2c:3f:
aa:6d:85:d7:a1:15:09:5a:9b:35:e9:13:5c:b6:11:
3c:e0:b5:c5:8b:3e:5c:73:de:38:71:a3:78:9c:72:
0c:08:d2:72:cb:ba:f0:72:2c:7b:dc:26:4f:b3:dd:
6b:13:61:c3:e0:35:04:6d:13:1d:a8:9a:97:d8:30:
8f:dc:10:4f:3f:3f:df:14:c0:7d:ce:d8:20:45:91:
9b:75:07:9b:41:60:8e:b2:31:0d:2b:0a:61:a7:fc:
c8:d3:09:4f:8a:ce:c2:12:7e:15:fb:1c:51:4a:3a:
cf:8a:e7:fb:aa:cb:d7:49:97:67:2b:23:66:ec:69:
09:ed:71:2c:1c:22:f4:2e:c3:47:84:18:d9:68:42:
be:b6:5b:af:f6:ca:ec:50:2b:f2:7c:ca:b5:6e:c4:
b9:8a:59:a9:c2:ad:ce:0c:f3:4a:bc:87:ab:b4:3b:
a4:6b:57:ef:29:c2:cb:4e:d5:91:91:0b:de:07:b3:
8e:59:26:f6:07:98:36:17:52:e6:87:a8:ee:53:b0:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:1D:A6:82:E2:11:3C:21:2C:88:B0:47:37:11:08:EA:FF:15:BD
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/PSQdpoLiETwhLIiwRzcRCOr_Fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.231.0.0/16
78.235.32.0-78.235.255.255
Signature Algorithm: sha256WithRSAEncryption
33:17:1f:f7:a3:67:93:95:f7:0c:20:6f:f8:6a:77:8f:fb:d4:
89:9e:2e:cc:6e:0b:0e:7a:d2:72:99:c1:50:1a:ef:d5:9b:9a:
32:e2:82:d8:d9:07:9e:85:96:4a:de:08:0b:fc:14:ec:25:46:
ab:4a:69:85:25:df:7e:ee:b9:27:77:1c:a5:4d:ed:b6:71:82:
0e:47:47:b2:2f:ac:9b:fe:ca:15:dc:51:11:ef:a3:16:08:9e:
e1:5b:33:5b:09:e0:6d:c0:55:46:6e:6d:59:55:71:ec:61:ec:
f9:ed:56:59:b5:73:65:89:aa:47:a9:0d:49:b8:68:4a:b5:28:
a9:76:94:d6:b9:b0:73:b9:cf:89:b3:ae:0f:67:f8:06:b5:cb:
ec:88:e7:a9:1d:90:49:3f:9b:2b:5c:ef:bb:3d:a5:12:c6:bc:
d8:49:bb:e5:39:b2:8c:1d:f1:27:6e:39:07:c3:00:e2:cd:0a:
8e:33:8a:b4:3a:e2:7b:dd:eb:f4:43:be:e6:5f:bb:fb:f0:cc:
e9:9d:8f:a6:0b:fa:df:ad:92:a9:f8:dc:05:72:ff:b7:23:cc:
3d:9a:d8:41:d4:0f:61:97:8b:07:a5:1e:3e:52:0a:1f:42:01:
0f:aa:74:79:be:85:e6:41:4a:7e:af:ed:3c:2d:b1:2c:58:63:
57:79:ea:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAVImFvvhD9Dw8i8g7VUG33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwODE4MTM0OTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDI0MWRhNjgyZTIxMTNjMjEyYzg4YjA0NzM3MTEwOGVhZmYxNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYY5J4W7AJsehLmFNz4d32HRSa7L
gEmkDyFyF1E0zL6tVHhipiqZXZF2EeFXck05M7idqZK6hOuLLD+qbYXXoRUJWps1
6RNcthE84LXFiz5cc944caN4nHIMCNJyy7rwcix73CZPs91rE2HD4DUEbRMdqJqX
2DCP3BBPPz/fFMB9ztggRZGbdQebQWCOsjENKwphp/zI0wlPis7CEn4V+xxRSjrP
iuf7qsvXSZdnKyNm7GkJ7XEsHCL0LsNHhBjZaEK+tluv9srsUCvyfMq1bsS5ilmp
wq3ODPNKvIertDuka1fvKcLLTtWRkQveB7OOWSb2B5g2F1Lmh6juU7B+KQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD0kHaaC4hE8ISyIsEc3EQjq/xW9MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvUFNRZHBvTGlFVHdoTElpd1J6Y1JDT3JfRmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMATucwCwME
BU7rIAMDAk7oMA0GCSqGSIb3DQEBCwUAA4IBAQAzFx/3o2eTlfcMIG/4aneP+9SJ
ni7MbgsOetJymcFQGu/Vm5oy4oLY2QeehZZK3ggL/BTsJUarSmmFJd9+7rkndxyl
Te22cYIOR0eyL6yb/soV3FER76MWCJ7hWzNbCeBtwFVGbm1ZVXHsYez57VZZtXNl
iapHqQ1JuGhKtSipdpTWubBzuc+Js64PZ/gGtcvsiOepHZBJP5srXO+7PaUSxrzY
SbvlObKMHfEnbjkHwwDizQqOM4q0OuJ73ev0Q77mX7v78MzpnY+mC/rfrZKp+NwF
cv+3I8w9mthB1A9hl4sHpR4+UgofQgEPqnR5voXmQUp+r+08LbEsWGNXeeqc
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:43 2026 by rpki-client