Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ps5c0q7PpxdMZyAVgaYnCfnVKwc.roa
File: ps5c0q7PpxdMZyAVgaYnCfnVKwc.roa (raw, json)
Hash identifier: 0AHDrmaQmpeMn3TqsMKkLOqkzR/y+BzMgag1L+ve4sI=
Subject key identifier: A6:CE:5C:D2:AE:CF:A7:17:4C:67:20:15:81:A6:27:09:F9:D5:2B:07
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A01522610277A03187D6E41610452A372A
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ps5c0q7PpxdMZyAVgaYnCfnVKwc.roa
Signing time: Tue 18 Aug 2026 13:49:29 +0000
ROA not before: Tue 18 Aug 2026 13:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 78.231.0.0/18 maxlen: 18
78.231.64.0/18 maxlen: 18
78.231.128.0/18 maxlen: 18
78.231.192.0/18 maxlen: 18
78.235.32.0/19 maxlen: 19
78.235.64.0/19 maxlen: 19
78.235.96.0/19 maxlen: 19
78.235.128.0/19 maxlen: 19
78.235.160.0/19 maxlen: 19
78.235.192.0/19 maxlen: 19
78.235.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:22:61:02:77:a0:31:87:d6:e4:16:10:45:2a:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Aug 18 13:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ce5cd2aecfa7174c67201581a62709f9d52b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:b0:f2:00:a9:c8:fd:1a:c2:3c:83:cc:16:
24:9b:e5:77:40:2c:36:cb:bd:50:29:6c:73:46:69:
7b:35:7f:18:b2:3c:d9:17:ae:09:2f:8e:61:dc:20:
f2:94:66:b9:cb:3a:b0:89:8f:1c:cf:c6:6c:fe:34:
a4:5c:bd:da:2c:71:8a:e5:d5:58:fc:2c:0c:50:81:
bd:cf:24:64:a9:c6:a2:48:19:b2:a0:d9:02:26:65:
d9:89:b6:91:6d:fc:f8:91:9b:65:1b:2a:de:94:4b:
f0:f6:39:d3:f0:1e:50:13:4f:35:82:88:3b:fa:d9:
47:79:b2:a5:59:73:b0:84:ac:fc:d9:41:84:04:1f:
d6:37:da:73:d3:1c:b7:b8:40:3c:a8:25:19:cf:6f:
b4:56:74:88:98:5f:70:cf:c1:88:a7:60:0d:e7:cf:
42:a8:d2:9b:47:15:f1:e7:e7:8b:bb:cf:78:68:9f:
8f:fc:16:bc:44:7a:9f:30:73:36:4b:bf:3b:fd:bd:
7e:21:db:06:89:c1:e9:62:71:f8:1d:da:2a:50:26:
eb:c1:dd:ea:b2:81:d0:74:47:bd:c8:d7:ca:9e:9c:
0d:f5:cc:02:64:b9:3a:7e:80:b3:2f:e5:24:fd:72:
1f:b1:3f:1a:6a:95:60:64:2b:2d:71:b9:33:c2:0d:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:5C:D2:AE:CF:A7:17:4C:67:20:15:81:A6:27:09:F9:D5:2B:07
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ps5c0q7PpxdMZyAVgaYnCfnVKwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.231.0.0/16
78.235.32.0-78.235.255.255
Signature Algorithm: sha256WithRSAEncryption
14:9e:a3:c7:74:d1:16:b3:07:21:f1:64:0f:c8:a7:3e:42:16:
63:35:2a:3a:ed:c5:f2:d7:96:e4:16:93:0e:e6:87:17:2e:8c:
7f:b4:b7:c3:5f:df:73:9d:f7:4e:47:b5:14:43:58:e8:c3:25:
9a:4f:62:9c:c3:a2:16:c8:16:f0:6e:4f:56:3e:1b:f7:0e:b2:
98:51:45:e5:bf:f8:5b:80:f0:2d:35:79:c8:6d:f2:22:8e:cb:
6b:ed:ca:d9:41:90:6d:a3:23:e1:fa:6d:39:20:29:ba:ee:d9:
79:56:74:7e:d3:db:36:8b:98:35:fb:3b:5d:e0:aa:c1:58:d3:
79:42:27:92:ac:c7:96:3c:ef:af:7a:ba:c7:a3:4f:dc:3e:71:
fc:84:c8:f2:09:95:01:be:15:47:a3:59:a8:0f:6d:13:95:da:
52:7a:e3:9b:2c:c5:e2:87:53:ad:a0:c2:6c:94:0f:df:75:50:
f9:71:2c:bd:b1:36:c8:09:d7:9e:44:12:b2:c4:11:21:38:4b:
f1:e2:3e:ad:7b:db:5f:7f:7d:77:9a:65:6d:9e:d2:c1:0e:d0:
5b:02:47:7f:ab:7a:dd:70:38:2d:1b:e8:fa:5a:10:67:3f:d7:
f5:f4:04:56:38:b4:25:c9:9b:2b:dd:4f:78:4d:f7:2d:72:29:
5d:7c:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:01:59 2026 by rpki-client