Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/X63AqHfOJPypWViA_3Ss5Bo5yRk.roa
File: X63AqHfOJPypWViA_3Ss5Bo5yRk.roa (raw, json)
Hash identifier: cbJWDvrsEC0cesy2nGJtzz49oQ+NLLneKuGrBhymaNo=
Subject key identifier: 5F:AD:C0:A8:77:CE:24:FC:A9:59:58:80:FF:74:AC:E4:1A:39:C9:19
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0B3B74386B1372067D64FAC211EDB0F50
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/X63AqHfOJPypWViA_3Ss5Bo5yRk.roa
Signing time: Fri 18 Sep 2026 08:52:07 +0000
ROA not before: Fri 18 Sep 2026 08:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.125.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:b7:43:86:b1:37:20:67:d6:4f:ac:21:1e:db:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 18 08:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fadc0a877ce24fca9595880ff74ace41a39c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:1f:4b:15:13:a7:d3:ef:98:66:be:7c:7f:
c9:ac:dd:7c:ba:98:da:5e:14:7c:57:cf:19:65:49:
21:48:03:a3:1d:80:47:a7:5f:a0:c9:39:3d:3c:8c:
f0:46:0c:00:c8:82:88:7b:07:9f:da:be:67:f6:57:
49:bd:42:7e:28:34:1a:62:93:f9:59:92:b7:b4:69:
6d:89:f1:b6:30:49:b5:ce:cd:43:8f:ed:be:6f:1b:
55:3d:1a:4c:8b:22:cf:d8:c4:90:8c:bf:44:63:84:
4c:92:4f:ac:61:11:a1:44:6f:06:af:2f:60:3e:fd:
38:88:0b:4e:c5:3c:3e:a0:f5:e5:c8:c7:ef:b0:2a:
72:87:2c:0b:e8:39:ee:78:6e:5c:a0:d5:6a:70:fb:
a3:27:a2:2c:96:9b:4b:ac:37:27:28:38:ed:82:76:
a1:3e:83:e5:b2:ef:ca:6e:ae:db:5f:7f:91:74:e4:
cf:1a:6a:28:a7:72:f0:78:ca:46:10:14:1f:b0:aa:
2d:a3:a5:f7:b3:a7:e3:56:e3:19:af:7b:ea:a5:f9:
40:8a:3d:a6:65:a7:a3:ae:00:c0:f1:a2:dd:64:1c:
3d:a3:40:f9:74:ff:71:8b:69:af:8b:48:ad:25:8c:
bb:1d:fa:f3:52:d2:3d:cb:3b:b6:90:01:47:92:18:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:C0:A8:77:CE:24:FC:A9:59:58:80:FF:74:AC:E4:1A:39:C9:19
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/X63AqHfOJPypWViA_3Ss5Bo5yRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.125.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:57:6c:83:51:a0:b0:c5:1f:97:79:fc:39:74:e4:df:89:c6:
a5:5a:3d:47:9a:bf:3f:d0:d9:4e:ab:f8:0b:8c:91:c4:3b:c7:
ac:95:78:44:10:1f:be:95:ef:fb:3b:04:f5:68:d1:89:4e:a2:
cb:1d:6e:34:c1:f9:2d:7f:91:7e:51:46:85:45:05:95:c0:ff:
a0:fd:8d:7b:9c:42:3b:30:18:6f:08:47:01:62:29:4e:60:f3:
f1:a0:dc:e5:5a:f2:3f:f4:8c:20:83:de:63:aa:e1:23:ef:58:
33:2c:28:b8:58:cf:55:77:63:ff:a2:89:d6:ab:10:16:cf:a4:
82:52:a7:1d:28:10:8e:4a:ab:89:0b:8d:3a:60:b7:50:9d:1a:
f7:e3:f8:8b:19:08:f3:1c:b0:ad:ce:30:d7:6d:13:3b:c2:b3:
a0:48:9c:27:58:8b:06:48:17:b6:a2:80:07:09:05:1c:cb:d0:
30:a2:c5:6e:59:36:2a:d6:5b:44:36:c1:94:e0:5d:fc:cb:d6:
b2:06:9c:08:cc:b5:d4:b3:c7:6b:dd:d6:96:c6:bf:0f:87:6e:
f5:4a:06:fb:ac:54:9d:86:13:0a:62:dd:9f:96:c3:08:89:57:
76:0d:76:31:7a:cf:c5:c9:d4:15:3b:9e:50:d6:2c:4b:b7:00:
ce:0f:39:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCzt0OGsTcgZ9ZPrCEe2w9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYwOTE4MDg1MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmFkYzBhODc3Y2UyNGZjYTk1OTU4ODBmZjc0YWNlNDFhMzljOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybofSxUTp9PvmGa+fH/JrN18upja
XhR8V88ZZUkhSAOjHYBHp1+gyTk9PIzwRgwAyIKIewef2r5n9ldJvUJ+KDQaYpP5
WZK3tGltifG2MEm1zs1Dj+2+bxtVPRpMiyLP2MSQjL9EY4RMkk+sYRGhRG8Gry9g
Pv04iAtOxTw+oPXlyMfvsCpyhywL6DnueG5coNVqcPujJ6IslptLrDcnKDjtgnah
PoPlsu/Kbq7bX3+RdOTPGmoop3LweMpGEBQfsKoto6X3s6fjVuMZr3vqpflAij2m
ZaejrgDA8aLdZBw9o0D5dP9xi2mvi0itJYy7HfrzUtI9yzu2kAFHkhgIWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF+twKh3ziT8qVlYgP90rOQaOckZMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvWDYzQXFIZk9KUHlwV1ZpQV8zU3M1Qm81eVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAThh9AwQB
XVwWMA0GCSqGSIb3DQEBCwUAA4IBAQAcV2yDUaCwxR+Xefw5dOTficalWj1Hmr8/
0NlOq/gLjJHEO8eslXhEEB++le/7OwT1aNGJTqLLHW40wfktf5F+UUaFRQWVwP+g
/Y17nEI7MBhvCEcBYilOYPPxoNzlWvI/9Iwgg95jquEj71gzLCi4WM9Vd2P/oonW
qxAWz6SCUqcdKBCOSquJC406YLdQnRr34/iLGQjzHLCtzjDXbRM7wrOgSJwnWIsG
SBe2ooAHCQUcy9AwosVuWTYq1ltENsGU4F38y9ayBpwIzLXUs8dr3daWxr8Ph271
Sgb7rFSdhhMKYt2flsMIiVd2DXYxes/FydQVO55Q1ixLtwDODzkM
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:18:21 2026 by rpki-client