Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1bVEiWo1K_bx6ZYnKGEf5KMCOnY.roa
File: 1bVEiWo1K_bx6ZYnKGEf5KMCOnY.roa (raw, json)
Hash identifier: rc1skMR8TuH6aN659llJU8EWcqeyRnx8GSPlgOomlPc=
Subject key identifier: D5:B5:44:89:6A:35:2B:F6:F1:E9:96:27:28:61:1F:E4:A3:02:3A:76
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019F09DD766F300470E36347A561486259DF
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1bVEiWo1K_bx6ZYnKGEf5KMCOnY.roa
Signing time: Sat 27 Jun 2026 16:15:36 +0000
ROA not before: Sat 27 Jun 2026 16:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:dd:76:6f:30:04:70:e3:63:47:a5:61:48:62:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jun 27 16:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b544896a352bf6f1e9962728611fe4a3023a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:14:9e:8b:ba:8f:1a:72:02:c4:c4:65:9e:
9b:f9:b1:bd:90:67:1a:eb:18:92:ca:9f:e0:c5:a1:
cb:30:9b:de:84:d2:61:ae:f3:9e:bf:01:d4:40:f6:
9c:92:f9:83:68:1f:9e:68:8e:6c:15:a7:e0:b4:87:
05:f1:aa:ec:a1:15:34:be:b6:70:46:0d:4b:4c:c8:
56:c9:12:4f:64:b1:32:b5:04:47:89:ea:df:4b:90:
ca:99:bf:08:17:7c:00:2a:a6:8c:18:5c:34:21:4d:
8a:60:2b:cb:d0:cb:d5:63:a8:42:ff:92:98:a5:f7:
57:1a:ee:e2:3c:d1:e4:4e:a1:e8:ac:bb:57:0a:f4:
6a:64:58:d1:1d:ac:70:f8:c3:5a:92:00:31:94:a4:
a8:e6:2a:61:f4:cb:c8:70:35:7e:bc:ba:1b:34:84:
2f:13:9e:7f:f3:8f:60:bc:5a:31:29:a3:13:56:85:
ec:09:10:33:15:d0:99:e9:e4:81:ca:e4:9e:04:6f:
92:2b:a9:be:5c:84:69:64:3f:dc:df:63:f6:db:2c:
6b:3b:ee:e7:2f:ac:a5:5d:41:7b:e0:a2:9b:af:5b:
94:98:76:ee:e7:a6:04:44:9d:bb:d7:d3:85:c7:29:
0b:48:87:98:8f:3d:7b:13:42:c8:ae:6e:72:3d:6c:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:44:89:6A:35:2B:F6:F1:E9:96:27:28:61:1F:E4:A3:02:3A:76
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/1bVEiWo1K_bx6ZYnKGEf5KMCOnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/23
93.92.18.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:93:63:be:87:1b:87:48:8e:3f:a1:bc:7e:c8:70:48:19:2a:
8b:76:87:33:dd:f0:0d:ab:b9:50:c9:01:8f:a6:d3:5d:40:4a:
3e:34:ea:93:f6:f7:04:62:c7:4a:69:17:e9:7c:38:99:f6:c4:
5a:ba:da:7f:75:ff:88:1e:a9:e8:49:91:61:ca:e8:05:da:cd:
87:01:3b:b4:8b:8f:16:35:ff:71:d1:a5:ee:0b:c0:a5:87:07:
e5:24:6e:23:8f:47:72:8f:17:5c:78:c5:8f:27:76:5f:37:4a:
84:06:ae:e3:7e:06:c7:4d:0c:ef:e3:a6:14:52:b9:fc:69:77:
63:c2:ea:45:0a:6f:3e:24:ea:a3:12:1c:73:5d:85:32:2a:22:
43:bf:99:7f:7a:81:00:68:71:63:5e:01:6a:99:a4:a5:c1:3f:
a5:5d:33:cd:5d:0f:ea:0a:42:e9:6d:58:52:a8:5c:36:32:c5:
5d:dd:39:37:86:c3:28:64:59:04:54:11:13:8c:b0:e7:a2:7c:
c3:77:11:f5:1e:e8:97:d1:45:f6:ed:d2:98:c9:c3:f9:e5:27:
5d:8b:ae:76:d5:51:83:30:d5:95:eb:cb:73:44:bf:f6:36:4d:
35:38:a4:86:1b:79:bb:e7:bb:88:95:20:79:ff:78:16:90:56:
42:51:83:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8J3XZvMARw42NHpWFIYlnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYwNjI3MTYxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWI1NDQ4OTZhMzUyYmY2ZjFlOTk2MjcyODYxMWZlNGEzMDIzYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l0Unou6jxpyAsTEZZ6b+bG9kGca
6xiSyp/gxaHLMJvehNJhrvOevwHUQPackvmDaB+eaI5sFafgtIcF8arsoRU0vrZw
Rg1LTMhWyRJPZLEytQRHierfS5DKmb8IF3wAKqaMGFw0IU2KYCvL0MvVY6hC/5KY
pfdXGu7iPNHkTqHorLtXCvRqZFjRHaxw+MNakgAxlKSo5iph9MvIcDV+vLobNIQv
E55/849gvFoxKaMTVoXsCRAzFdCZ6eSByuSeBG+SK6m+XIRpZD/c32P22yxrO+7n
L6ylXUF74KKbr1uUmHbu56YERJ2719OFxykLSIeYjz17E0LIrm5yPWy/SQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNW1RIlqNSv28emWJyhhH+SjAjp2MB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvMWJWRWlXbzFLX2J4NlpZbktHRWY1S01DT25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBThh8AwQA
XVwSAwQBXVwWMA0GCSqGSIb3DQEBCwUAA4IBAQBOk2O+hxuHSI4/obx+yHBIGSqL
docz3fANq7lQyQGPptNdQEo+NOqT9vcEYsdKaRfpfDiZ9sRautp/df+IHqnoSZFh
yugF2s2HATu0i48WNf9x0aXuC8ClhwflJG4jj0dyjxdceMWPJ3ZfN0qEBq7jfgbH
TQzv46YUUrn8aXdjwupFCm8+JOqjEhxzXYUyKiJDv5l/eoEAaHFjXgFqmaSlwT+l
XTPNXQ/qCkLpbVhSqFw2MsVd3Tk3hsMoZFkEVBETjLDnonzDdxH1HuiX0UX27dKY
ycP55Sddi6521VGDMNWV68tzRL/2Nk01OKSGG3m757uIlSB5/3gWkFZCUYPf
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:08 2026 by rpki-client