Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/OTNnq40RHs6-RO1vnyF5GX8jSSo.roa
File: OTNnq40RHs6-RO1vnyF5GX8jSSo.roa (raw, json)
Hash identifier: GEnAb11gm/0k4gAv45gZBRalx642vYu648871Hhzo1c=
Subject key identifier: 39:33:67:AB:8D:11:1E:CE:BE:44:ED:6F:9F:21:79:19:7F:23:49:2A
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A067081EB7F8E05E73F46B05FAC8880622
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/OTNnq40RHs6-RO1vnyF5GX8jSSo.roa
Signing time: Thu 03 Sep 2026 11:29:40 +0000
ROA not before: Thu 03 Sep 2026 11:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 78.24.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:08:1e:b7:f8:e0:5e:73:f4:6b:05:fa:c8:88:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 3 11:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=393367ab8d111ecebe44ed6f9f2179197f23492a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:1a:43:60:f5:78:94:61:17:3b:4a:b1:05:
74:17:c8:70:60:56:02:e9:0b:61:f8:05:b1:79:2f:
3f:6d:a1:da:4a:bd:ef:37:09:f0:dc:1a:89:b8:e5:
62:8c:30:0e:07:c9:1d:a8:20:df:2b:bc:cc:80:58:
37:48:01:37:1f:95:2d:c5:43:f3:86:d2:36:6d:94:
32:1b:71:78:af:fc:ff:9f:81:99:d1:42:66:94:e1:
e8:e9:c3:d0:79:2f:9d:99:4e:67:44:2d:32:c8:69:
4d:a5:e8:33:de:90:88:69:18:64:5d:16:d7:8a:2a:
ee:6a:a8:de:e4:db:df:9e:71:ec:ef:80:86:9f:59:
ba:96:9b:17:9c:3b:45:d1:0b:82:41:52:ce:67:30:
c9:cf:bb:e4:cb:7e:8a:52:eb:6d:9b:a5:63:d7:5e:
21:06:8c:28:81:9a:5c:b6:12:28:05:70:c3:6e:f4:
86:dc:ae:42:40:99:b2:70:d6:c6:14:6f:b9:66:f6:
18:97:fa:86:03:1f:d7:cb:5c:de:c9:55:cf:9f:28:
e1:0f:ae:59:d5:66:04:a5:de:c9:3b:fe:6f:9f:7f:
ce:44:18:48:f9:08:e8:2f:84:e3:7d:10:9f:04:e2:
54:fd:71:08:7f:fc:a6:93:c1:0c:c7:96:01:81:1b:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:67:AB:8D:11:1E:CE:BE:44:ED:6F:9F:21:79:19:7F:23:49:2A
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/OTNnq40RHs6-RO1vnyF5GX8jSSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c5:fa:fe:03:71:d7:96:fb:ea:26:cf:0d:51:59:a9:e5:a9:
da:4a:32:c7:d5:8a:8c:6b:61:ee:8e:e6:c8:ad:5a:44:28:7a:
cf:14:0a:06:39:4e:dd:e3:03:07:f6:48:2d:e7:b1:3a:c2:f6:
8a:b8:c7:7d:44:7c:07:66:8d:dd:2d:e9:36:b4:82:8f:f3:3e:
b5:62:92:ea:77:5c:e8:76:09:50:4a:a1:f2:33:23:70:b4:97:
75:e3:a6:23:68:af:e5:6c:3a:ad:60:ec:8c:8e:b5:16:98:1f:
a0:6c:4f:82:e0:92:88:83:3d:cc:9f:ce:22:49:df:a9:5b:a0:
3b:44:99:eb:99:69:ef:7f:9d:39:3f:1f:a6:bb:ec:a3:37:67:
12:c8:53:30:e6:c1:de:07:0e:5a:e0:00:e6:cc:35:6b:dd:bf:
dd:c2:fb:90:05:66:cc:20:62:4e:ba:88:7e:99:b3:91:72:e2:
5b:9e:14:b6:aa:f8:95:cb:35:c1:22:02:ff:7e:d9:7d:7b:8f:
8c:65:b8:a3:7d:f7:0c:9d:ed:48:9e:8d:68:ae:75:53:e3:21:
76:b7:28:2d:47:fd:3e:62:e9:30:72:a0:c9:49:e0:ae:58:ce:
89:a2:a5:20:a2:73:b0:16:09:9c:7c:ee:93:a8:87:6b:4a:c5:
69:e0:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:09:27 2026 by rpki-client