Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/UpQKV3xc3UPVmFYNnz30wv_Mj1M.roa
File: UpQKV3xc3UPVmFYNnz30wv_Mj1M.roa (raw, json)
Hash identifier: 22vHOWrQdL9iDimMsLkIhVOLWRdzdznHoBdfwbWk+1g=
Subject key identifier: 52:94:0A:57:7C:5C:DD:43:D5:98:56:0D:9F:3D:F4:C2:FF:CC:8F:53
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019EC9FEB159363F4B6CD0E4CC299A5D0195
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/UpQKV3xc3UPVmFYNnz30wv_Mj1M.roa
Signing time: Mon 15 Jun 2026 06:36:12 +0000
ROA not before: Mon 15 Jun 2026 06:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 78.24.124.0/24 maxlen: 24
78.24.125.0/24 maxlen: 24
93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:fe:b1:59:36:3f:4b:6c:d0:e4:cc:29:9a:5d:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jun 15 06:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52940a577c5cdd43d598560d9f3df4c2ffcc8f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:cb:0f:a0:fa:de:69:05:e3:53:b6:45:c0:
92:3c:43:6d:5a:13:f7:1e:9c:35:b9:66:24:b5:a7:
91:8f:7b:e6:85:a4:f5:bc:38:6f:24:0d:fe:52:39:
ba:0b:e7:b1:a6:81:a5:dd:a0:a8:fb:15:96:d4:2b:
2b:76:9e:58:9f:0e:a8:d3:43:1a:ce:8d:66:a9:8f:
ee:22:8e:e1:e1:80:06:e4:95:d9:a6:e2:0d:78:66:
64:dd:ac:b1:c3:ce:21:ed:8b:06:13:2d:e6:c5:fe:
1c:af:02:73:57:b0:09:bc:37:c9:e8:1b:81:74:da:
67:07:b5:2d:ca:81:91:00:24:93:14:bd:89:3b:67:
b1:85:85:00:75:8e:15:d5:a6:91:1a:08:ab:17:7c:
6f:73:73:d6:0e:0a:78:d0:65:7d:9a:53:b1:9e:e7:
9b:2f:ba:88:93:23:9b:17:11:d8:28:6d:6e:16:9f:
03:55:b2:c3:c1:7a:1c:d2:26:03:fd:c7:37:4d:62:
fd:0e:9a:9c:e0:c5:90:1f:18:a2:cd:c8:0a:7f:b7:
ca:0f:89:50:26:db:ae:8b:14:f1:90:d8:7b:31:2e:
06:f0:3f:c4:3e:52:6b:15:bc:39:2c:20:a6:5b:72:
e3:28:aa:b7:60:65:71:49:3e:3f:a0:99:c5:75:96:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:0A:57:7C:5C:DD:43:D5:98:56:0D:9F:3D:F4:C2:FF:CC:8F:53
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/UpQKV3xc3UPVmFYNnz30wv_Mj1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/23
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
62:65:47:f1:45:9d:95:48:5a:32:fb:47:cb:48:c3:9f:4a:c5:
12:d7:2c:f4:59:82:08:ec:75:09:ca:4a:af:7a:f6:d2:84:af:
6d:f8:a3:8f:7b:c6:fa:ae:29:c2:27:45:41:40:d3:0c:b3:d1:
f9:5c:87:69:74:11:1b:89:ba:cd:9a:01:cd:ca:e9:d4:86:98:
b3:f7:ca:78:b3:7f:e9:ba:53:2b:e4:79:2f:41:35:dc:48:53:
48:f5:68:f1:61:47:f7:1f:dd:25:f5:76:dd:60:ac:39:05:f6:
fd:e3:c2:ab:8a:88:59:c5:e7:54:79:b2:11:4f:ca:41:a8:4e:
db:a5:ec:74:0d:2a:c0:19:e5:a0:34:d8:8e:ae:bd:96:08:3a:
31:54:0a:ae:43:09:a0:bc:64:59:66:e6:f6:72:44:cf:ab:98:
3a:a3:3c:4b:b5:32:5a:59:d1:7e:92:45:b5:ff:e8:05:18:03:
63:c2:72:e3:ae:6d:b1:a1:96:38:21:9a:39:40:86:64:9e:70:
ce:b7:31:83:55:7f:8d:f6:02:53:5e:e4:77:0f:0e:ae:a0:35:
02:3d:03:53:2a:b9:f5:11:1f:65:83:3d:e6:e5:a7:45:02:38:
0d:13:f6:ae:17:3f:f2:15:a5:5b:8d:a8:ba:2a:2d:b0:90:fa:
a6:3a:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 01:27:01 2026 by rpki-client