Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/gOWhlD4flmCqVNqrUfRkQgbrXvY.roa
File: gOWhlD4flmCqVNqrUfRkQgbrXvY.roa (raw, json)
Hash identifier: NjZCgy4EoXmOKeh/FX9RxRHEK0H8bIjz8ZtU03nzXJY=
Subject key identifier: 80:E5:A1:94:3E:1F:96:60:AA:54:DA:AB:51:F4:64:42:06:EB:5E:F6
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A177BC34106243D69A9533DDD94586C385
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/gOWhlD4flmCqVNqrUfRkQgbrXvY.roa
Signing time: Mon 26 Oct 2026 10:23:05 +0000
ROA not before: Mon 26 Oct 2026 10:23:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 78.108.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:bc:34:10:62:43:d6:9a:95:33:dd:d9:45:86:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Oct 26 10:23:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e5a1943e1f9660aa54daab51f4644206eb5ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:b4:c6:9d:a9:1e:ad:35:da:85:d9:7d:55:
15:19:f2:89:eb:3f:b2:d3:63:49:c9:aa:3c:92:fd:
0e:63:27:9f:fa:fa:db:ce:cc:04:82:6c:54:91:81:
87:9e:06:67:44:7a:9c:88:8a:71:0d:02:ad:ac:31:
d3:87:7f:7d:2e:25:db:9a:a4:9f:58:77:37:76:73:
82:e1:fe:f1:56:9a:58:c5:6d:96:ff:fd:bc:c9:17:
14:1c:fd:61:f9:fe:f2:22:63:ae:02:6b:2a:a0:84:
3f:b7:cb:71:32:37:ca:a3:68:a5:60:83:3b:dc:cc:
22:50:c7:af:94:cb:fd:1a:1a:5a:85:76:00:02:70:
72:8c:8b:fc:cf:b4:c3:76:0e:c3:2b:ca:f0:de:1d:
2a:98:5a:eb:70:51:68:90:e5:3a:be:88:fd:83:e7:
5c:63:cb:d8:fc:f0:d8:ce:69:3e:6d:2a:c6:f9:2a:
a3:34:4e:c0:3b:30:13:4d:cb:80:29:50:e2:b3:f7:
51:0f:ed:dc:2d:54:f4:b9:ac:b0:e4:35:72:ef:81:
5e:e8:0a:9e:b7:25:e6:3d:0c:ef:f5:29:a9:f9:86:
8b:4d:c9:30:7a:5b:38:5b:bb:c7:67:4e:82:0b:9e:
c6:a4:0d:b3:ec:24:48:c6:a6:41:1a:03:31:b5:7d:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:A1:94:3E:1F:96:60:AA:54:DA:AB:51:F4:64:42:06:EB:5E:F6
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/gOWhlD4flmCqVNqrUfRkQgbrXvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2b:cd:0d:17:03:a3:f7:5b:47:6e:fb:c8:86:7e:c7:02:4a:
18:59:d1:fb:12:05:f8:a3:6e:01:aa:52:05:51:b7:dd:3d:3e:
00:0a:a9:08:38:5f:fb:fa:55:40:98:9c:2b:59:92:34:bf:18:
ae:9b:75:54:03:f8:d4:cb:c1:8e:ae:d6:19:31:98:e5:d8:f7:
ce:22:58:95:b6:65:f4:44:98:18:19:83:de:9d:b1:8c:f2:a9:
d1:36:32:eb:8a:f8:a9:77:15:b7:0d:3f:f9:3f:b4:ce:35:16:
72:c5:2d:32:d3:e3:52:fe:0c:23:64:6d:23:c1:19:d8:81:e7:
e8:f4:45:e3:ba:d7:ae:f6:4c:6f:27:d2:2a:06:73:fc:d6:b9:
84:fb:bd:a1:d9:6a:02:92:cf:a3:3b:62:a6:a2:47:c5:59:69:
cb:5f:25:c1:4c:e6:96:ae:58:f9:bb:27:6c:9b:af:3d:0e:39:
31:8f:d4:0c:8c:92:76:13:2c:42:e5:06:46:7a:1d:98:3f:38:
d6:85:b7:16:4b:3e:b7:7d:95:44:55:4e:d5:b8:74:aa:6f:27:
60:98:be:9d:13:0b:d2:75:18:ad:e5:04:37:4b:87:52:a6:5d:
32:6b:28:7b:66:04:d7:05:86:31:95:c2:f3:76:2a:15:49:4e:
ed:30:92:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF3vDQQYkPWmpUz3dlFhsOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh
MThjZWUwHhcNMjYxMDI2MTAyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGU1YTE5NDNlMWY5NjYwYWE1NGRhYWI1MWY0NjQ0MjA2ZWI1ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gq0xp2pHq012oXZfVUVGfKJ6z+y
02NJyao8kv0OYyef+vrbzswEgmxUkYGHngZnRHqciIpxDQKtrDHTh399LiXbmqSf
WHc3dnOC4f7xVppYxW2W//28yRcUHP1h+f7yImOuAmsqoIQ/t8txMjfKo2ilYIM7
3MwiUMevlMv9GhpahXYAAnByjIv8z7TDdg7DK8rw3h0qmFrrcFFokOU6voj9g+dc
Y8vY/PDYzmk+bSrG+SqjNE7AOzATTcuAKVDis/dRD+3cLVT0uayw5DVy74Fe6Aqe
tyXmPQzv9Smp+YaLTckwels4W7vHZ06CC57GpA2z7CRIxqZBGgMxtX3nAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIDloZQ+H5ZgqlTaq1H0ZEIG6172MB8GA1UdIwQY
MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt
YzU5ODI1YmJjYjMyLzEvZ09XaGxENGZsbUNxVk5xclVmUmtRZ2JyWHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy
LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmx8MA0G
CSqGSIb3DQEBCwUAA4IBAQAUK80NFwOj91tHbvvIhn7HAkoYWdH7EgX4o24BqlIF
UbfdPT4ACqkIOF/7+lVAmJwrWZI0vxium3VUA/jUy8GOrtYZMZjl2PfOIliVtmX0
RJgYGYPenbGM8qnRNjLrivipdxW3DT/5P7TONRZyxS0y0+NS/gwjZG0jwRnYgefo
9EXjuteu9kxvJ9IqBnP81rmE+72h2WoCks+jO2KmokfFWWnLXyXBTOaWrlj5uyds
m689Djkxj9QMjJJ2EyxC5QZGeh2YPzjWhbcWSz63fZVEVU7VuHSqbydgmL6dEwvS
dRit5QQ3S4dSpl0yayh7ZgTXBYYxlcLzdioVSU7tMJJt
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:08:17 2026 by rpki-client