Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jAf3LeMT9rZ7WL_sBK5MXE0umaI.roa
File: jAf3LeMT9rZ7WL_sBK5MXE0umaI.roa (raw, json)
Hash identifier: XwCizSVlhw8PEjQVZ+S3QGg1LsUuousdTRM7VkQs/GE=
Subject key identifier: 8C:07:F7:2D:E3:13:F6:B6:7B:58:BF:EC:04:AE:4C:5C:4D:2E:99:A2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019FC69BA010B706CA462602BCCD8679AC7F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jAf3LeMT9rZ7WL_sBK5MXE0umaI.roa
Signing time: Mon 03 Aug 2026 07:51:55 +0000
ROA not before: Mon 03 Aug 2026 07:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219080
IP address blocks: 78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:9b:a0:10:b7:06:ca:46:26:02:bc:cd:86:79:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 3 07:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c07f72de313f6b67b58bfec04ae4c5c4d2e99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:51:05:e3:e6:ee:76:31:a3:82:2f:e2:08:
7b:6f:a1:19:ba:b6:78:54:41:68:ae:60:2f:62:c9:
81:d6:b7:27:44:32:93:97:f3:0a:7c:35:25:5d:3a:
87:46:01:97:10:8e:9f:77:2f:af:bb:a5:94:a2:83:
ef:3d:ef:7b:b2:98:d6:72:c5:7e:48:9f:3d:24:7f:
d9:72:d4:b4:b6:cd:64:b7:8b:0a:1b:3b:4f:6c:06:
13:57:43:4e:22:05:e7:0c:e9:07:eb:29:5a:e6:c1:
dc:7e:df:e1:3a:1c:e7:0f:e1:7f:53:47:4d:48:c2:
d0:fe:e0:61:35:f3:a9:2e:c5:b9:3f:12:07:c7:70:
ee:b0:f5:10:13:30:60:85:78:e1:8e:d7:60:a8:55:
8a:c1:4e:35:4e:50:fb:a8:f8:d0:cd:bc:f3:61:71:
90:67:30:64:c5:0f:ea:bb:a5:ec:fe:a8:39:b0:56:
23:a6:9d:51:fc:47:3d:1e:39:c4:34:7d:75:70:d7:
0f:8a:a0:c0:8e:63:ec:c9:c3:d6:cf:84:51:39:45:
bf:28:56:0b:80:d1:92:9a:c0:43:03:79:d7:df:13:
a0:ec:15:82:7e:11:75:05:ec:13:34:1b:d3:5c:61:
8f:fa:ef:23:45:c9:75:08:af:d1:66:95:84:f6:91:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:F7:2D:E3:13:F6:B6:7B:58:BF:EC:04:AE:4C:5C:4D:2E:99:A2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jAf3LeMT9rZ7WL_sBK5MXE0umaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.106.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:f8:f0:a8:4a:02:48:b3:f2:58:68:0c:fd:2a:23:57:f1:c1:
97:37:92:28:00:c8:b8:42:d3:1f:b2:17:e3:36:83:b3:ed:e2:
1a:4f:3d:d7:9e:68:26:a5:06:d8:73:ce:ff:7e:08:28:e8:02:
67:2a:0c:80:4f:37:b0:d8:44:6e:c2:0e:69:80:1e:d7:db:c0:
4c:d4:fd:c8:7f:f9:26:9e:70:30:57:c1:ac:37:0c:16:3a:18:
f5:46:60:7e:1f:ae:78:d6:0e:61:b7:e2:9c:81:e9:9b:6b:0e:
41:a3:1a:79:02:08:1a:30:32:58:44:11:55:da:2b:62:65:dd:
15:05:12:a0:6e:73:b3:78:b8:fc:c5:c7:39:50:fc:7c:b3:e0:
09:38:aa:04:85:89:2c:7d:83:dd:94:c7:a1:90:48:4f:2a:63:
7d:50:c8:e0:53:f7:a4:77:82:45:1b:6e:77:72:51:23:1a:7a:
38:aa:1b:18:ea:50:8c:f6:99:10:2e:6a:80:fe:7f:a3:a9:a2:
e2:88:81:59:fd:02:ce:47:fb:f7:1d:0b:40:36:ba:c1:f7:a9:
28:99:84:61:8a:cc:80:21:6c:3e:15:1a:cb:18:5e:79:51:cc:
6e:e6:1c:90:82:49:6c:16:4c:bf:67:62:77:fb:b0:8a:c8:41:
6e:bd:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:32 2026 by rpki-client