Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/5l0EQV5n-k-P3_b6mlCTfF5Pef8.roa
File: 5l0EQV5n-k-P3_b6mlCTfF5Pef8.roa (raw, json)
Hash identifier: 3z3axPSYa0CxyFXVxqIKS121Ef7PUcGQL7FvzBOycdo=
Subject key identifier: E6:5D:04:41:5E:67:FA:4F:8F:DF:F6:FA:9A:50:93:7C:5E:4F:79:FF
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A06709080DD62A3CBD2EC85DC14977066C
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/5l0EQV5n-k-P3_b6mlCTfF5Pef8.roa
Signing time: Thu 03 Sep 2026 11:30:40 +0000
ROA not before: Thu 03 Sep 2026 11:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.125.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:09:08:0d:d6:2a:3c:bd:2e:c8:5d:c1:49:77:06:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 3 11:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e65d04415e67fa4f8fdff6fa9a50937c5e4f79ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:e3:4a:bb:a4:88:95:8a:6d:3a:2d:38:bb:
03:c3:56:cd:e4:ed:48:97:7b:4a:c6:85:2c:b2:04:
11:5e:55:89:b9:59:28:ce:96:56:e0:a8:eb:d6:af:
71:ff:78:c6:c2:4a:6f:80:ce:3c:1c:70:48:f7:6b:
26:90:2b:e8:46:19:3e:a0:1f:06:ed:78:7b:a3:69:
65:1d:41:8d:32:49:cf:3c:59:ab:4f:c6:d8:7d:f3:
a1:df:72:b5:d7:6d:0b:b5:86:3a:63:19:fc:59:59:
0d:d6:ae:13:74:49:32:df:37:a7:3e:35:8e:02:50:
a3:c2:90:08:48:1f:0e:b6:0d:0f:da:b8:5e:0f:ea:
6d:51:9f:91:a8:1c:93:15:9b:b6:98:9c:6a:c9:b4:
6b:40:93:c3:06:b9:f6:c4:e6:38:0d:26:f2:f6:13:
4e:93:5b:e5:01:44:7a:20:d7:8e:7e:34:56:e6:e2:
dd:98:a6:98:ac:5a:e8:ff:80:81:0b:6e:1a:83:68:
07:e8:52:2a:14:a6:b2:2b:22:73:dd:56:e0:d8:8e:
8c:40:a0:7c:bd:b1:17:79:f8:60:8c:b6:9f:55:96:
c4:64:e0:fb:58:c3:0f:1f:d5:90:ea:44:17:3a:47:
da:0c:dd:3e:20:21:76:94:79:f6:27:04:6a:59:af:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:04:41:5E:67:FA:4F:8F:DF:F6:FA:9A:50:93:7C:5E:4F:79:FF
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/5l0EQV5n-k-P3_b6mlCTfF5Pef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.125.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
43:48:2d:7e:3c:c8:4b:2f:45:d9:f9:0e:13:92:9e:c4:44:db:
5a:36:97:33:16:d5:c2:65:07:75:9e:f2:7a:eb:4e:e2:49:10:
74:14:e1:6e:50:a6:7f:3a:cb:3e:38:c9:f1:aa:cc:5a:54:fe:
ec:00:5a:72:7e:e5:8c:49:38:10:a9:12:d5:6d:bd:3e:8a:86:
17:22:2d:05:fc:53:14:f2:63:d4:87:3f:9e:39:67:8d:0d:76:
f2:4e:53:cb:fd:ab:9d:37:ae:37:f0:74:32:62:33:49:2c:f2:
b4:1e:8a:13:84:8a:5f:73:7d:5c:dd:ef:07:f1:e4:be:2a:3c:
99:ac:eb:63:c2:c8:28:ea:31:27:d2:f6:9c:25:28:43:84:a1:
b1:49:d9:f2:76:ad:b0:9b:e4:c3:90:45:34:69:4a:9d:12:c1:
aa:6a:9d:44:80:c1:ae:f9:3b:9b:99:52:17:f0:77:fa:5e:47:
13:34:4c:60:d1:1d:41:03:e1:d8:2e:73:74:29:ce:5d:74:a6:
dd:96:b9:36:53:8e:47:db:af:16:a8:c8:d4:8d:0e:80:d7:42:
95:fa:bc:94:76:f5:1d:56:6b:ca:6d:1b:29:0d:72:91:ba:15:
cb:3c:65:7f:da:60:23:4d:f8:62:86:06:d6:bc:89:3d:50:40:
fa:33:b3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:09:22 2026 by rpki-client