Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/78S8nE6Tm2eyNILoxKvxde4Vz9M.roa
File: 78S8nE6Tm2eyNILoxKvxde4Vz9M.roa (raw, json)
Hash identifier: De0jNoDO/oGRJ4a6g4u6FT5jq9eDCmf8xJF8vAvJsw8=
Subject key identifier: EF:C4:BC:9C:4E:93:9B:67:B2:34:82:E8:C4:AB:F1:75:EE:15:CF:D3
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019FF00388B36D288B328B66518C07799D72
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/78S8nE6Tm2eyNILoxKvxde4Vz9M.roa
Signing time: Tue 11 Aug 2026 08:49:51 +0000
ROA not before: Tue 11 Aug 2026 08:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62105
IP address blocks: 103.57.40.0/22 maxlen: 22
137.59.8.0/22 maxlen: 22
185.225.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:03:88:b3:6d:28:8b:32:8b:66:51:8c:07:79:9d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Aug 11 08:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc4bc9c4e939b67b23482e8c4abf175ee15cfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:10:72:59:a6:a5:2b:cd:15:6f:b2:83:d9:
27:dc:b0:7c:d0:3e:d9:66:1a:d6:45:3e:16:c2:2d:
7e:38:9e:2d:03:96:31:86:f3:62:87:19:1b:ec:b1:
61:b9:5b:f1:43:39:b2:b0:f4:0e:10:d6:9d:8e:b8:
8c:ac:21:bd:71:da:02:df:ee:12:ac:d2:04:75:37:
8b:ce:41:24:3e:b2:22:ae:f4:48:98:14:a1:7d:de:
e4:13:97:3c:ae:9b:42:36:6b:a4:78:e0:98:3c:28:
03:5a:2b:31:36:66:3b:42:99:8c:62:80:ec:fb:f7:
bc:ee:7f:71:bf:15:f6:1a:51:35:7a:99:63:a3:ec:
22:9b:dd:dd:6e:bd:42:e8:6c:18:b4:d7:68:91:a0:
a2:af:09:7b:b5:7e:57:2c:ac:a4:68:19:17:59:0e:
26:2d:97:20:86:b1:67:bf:b4:8f:2e:f5:23:7f:0b:
77:03:69:13:10:f2:33:5f:c3:d9:f2:72:42:de:60:
6f:79:36:c8:e6:5b:91:ce:dc:63:13:0c:d9:14:4d:
05:36:90:f6:1e:06:07:60:f5:c4:af:8a:b1:75:05:
6c:ba:fe:50:99:7d:6b:2c:09:12:b2:37:84:da:d2:
ec:51:17:19:3a:62:c5:a2:97:fe:1e:02:bf:a3:f2:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:BC:9C:4E:93:9B:67:B2:34:82:E8:C4:AB:F1:75:EE:15:CF:D3
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/78S8nE6Tm2eyNILoxKvxde4Vz9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.40.0/22
137.59.8.0/22
185.225.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:52:3a:97:a4:fa:db:dd:85:ec:e4:f1:eb:02:39:04:cc:2c:
5c:50:4c:21:15:70:1f:d4:75:03:31:dc:19:c7:fd:80:a0:a7:
95:b1:3c:23:53:81:87:a6:c0:f8:ff:89:b2:49:7d:1e:88:78:
8a:dc:84:9a:bc:d0:7c:0a:0a:4e:d2:19:cc:a0:4d:cc:2a:39:
f2:27:eb:0c:b1:f2:b3:28:c5:6d:5e:30:9e:e1:72:c6:0e:2d:
01:b9:cf:4b:8f:41:86:a0:9f:2e:3a:15:2c:64:7c:52:16:f3:
9c:59:37:4b:ac:bd:cb:a0:c8:c3:1d:81:23:57:13:5c:bf:d6:
29:10:3a:78:84:e0:a0:17:2b:20:ae:6b:af:b5:6e:16:c6:0a:
e2:ba:4e:ca:7f:09:9e:3e:71:a9:e2:10:8d:27:b3:50:7d:f3:
4c:44:36:4c:29:71:07:eb:2b:e0:64:b6:e0:87:67:de:cd:97:
6e:40:02:98:30:15:ce:b5:5e:63:7a:a1:30:86:a1:f9:e6:64:
44:66:8e:35:10:17:02:bf:39:37:c7:66:60:45:6c:68:c4:03:
3b:52:d4:c7:70:ef:ea:a0:fd:2e:a5:7f:aa:b8:b7:3c:76:fc:
58:7f:0d:e6:6f:fb:05:80:8a:4f:7a:66:90:8d:07:d3:8f:cc:
d1:ba:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:40 2026 by rpki-client