Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/YzomGtOYIRRrlhQRWjpyr4eWXD0.roa
File: YzomGtOYIRRrlhQRWjpyr4eWXD0.roa (raw, json)
Hash identifier: KEjrfgpXRjr0pIovk/a5w0DpByQYa2YwLIUtX2WPQV4=
Subject key identifier: 63:3A:26:1A:D3:98:21:14:6B:96:14:11:5A:3A:72:AF:87:96:5C:3D
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A0623252DFCE0F14E2A7B81FA3CFC4901C
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/YzomGtOYIRRrlhQRWjpyr4eWXD0.roa
Signing time: Wed 02 Sep 2026 12:57:40 +0000
ROA not before: Wed 02 Sep 2026 12:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 06:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:32:52:df:ce:0f:14:e2:a7:b8:1f:a3:cf:c4:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Sep 2 12:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=633a261ad39821146b9614115a3a72af87965c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:c5:a4:57:6a:b0:be:52:14:e0:d3:94:76:
06:f8:ea:ea:ca:ef:19:a5:fc:1f:e4:c8:de:55:d9:
0c:63:e0:71:84:46:0a:f5:36:47:aa:d9:fb:90:2f:
91:64:05:97:a4:79:78:8c:3e:db:ab:05:8d:7b:02:
7e:f2:b4:75:aa:69:54:40:10:f7:7b:e5:e6:48:ee:
0f:65:06:b0:ca:44:f4:1f:ed:bd:a1:6c:77:85:05:
86:a1:87:06:cd:08:8d:60:7a:7b:eb:53:fb:b4:6f:
75:3e:5e:d0:60:32:c0:05:99:89:32:c5:d0:55:54:
93:b4:6f:e4:cd:a6:d4:71:01:34:77:fe:06:68:f9:
f9:c6:f1:76:93:44:1c:3a:0f:87:c3:e0:0d:cb:61:
fd:a4:e9:98:c6:2f:78:b0:db:cf:b9:c9:98:54:76:
82:b5:cc:b7:d7:de:1c:1d:ed:6a:c1:10:5c:a3:57:
40:9d:f7:36:45:cf:8e:37:4f:37:18:a0:1a:7d:da:
f9:d9:1b:b2:c5:24:1f:e1:92:c2:d8:c9:e3:6a:09:
15:ae:29:a2:2f:fb:82:99:5c:3b:9a:08:76:41:d1:
c3:c7:53:6e:ef:f8:d5:1a:4a:3b:d1:a6:b6:83:14:
9a:3f:6c:9a:f8:52:97:f4:23:6d:ce:fd:5f:7e:a8:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:26:1A:D3:98:21:14:6B:96:14:11:5A:3A:72:AF:87:96:5C:3D
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/YzomGtOYIRRrlhQRWjpyr4eWXD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3f:89:6e:c1:2a:d0:43:a9:ac:01:57:25:6b:29:d8:1c:2a:
64:1a:4b:a8:98:19:7b:42:07:62:2c:d0:9f:42:4e:f3:46:af:
1b:8a:24:35:6f:90:91:49:33:0a:e9:2b:b2:cb:e0:2f:9c:3f:
d4:dd:7c:28:72:96:2c:d7:b4:d5:2c:33:e6:c1:fc:9e:23:6b:
57:b3:e8:7b:5b:01:2c:26:6f:eb:03:47:a8:cb:e7:53:58:7f:
7b:5a:4d:a8:9c:d0:fe:a1:49:0b:63:5f:e4:a6:78:03:6b:fa:
82:bf:56:67:5a:2f:6b:a7:30:d0:1e:ff:bb:4c:26:31:eb:1c:
c6:fb:f0:fb:e9:2c:66:21:92:64:86:37:16:82:f0:07:04:ca:
d2:7e:c9:8f:1b:62:c2:ab:94:e4:5e:13:db:84:14:f5:f4:84:
44:a7:3b:2e:30:73:87:60:af:b0:42:42:98:59:6f:56:e6:bc:
3d:cb:6a:d2:94:3b:ec:4b:1d:75:81:84:bc:ab:9a:3c:40:51:
09:3f:14:8f:84:e6:e4:da:a8:17:8f:63:26:6e:bc:10:c4:a0:
e8:21:c3:e7:f0:43:16:12:17:cd:73:f8:e8:b3:af:1f:18:67:
06:88:54:47:96:3b:6e:c8:1a:bd:5f:9f:aa:8a:4d:bd:e8:5b:
9f:ee:e2:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBiMlLfzg8U4qe4H6PPxJAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYwOTAyMTI1NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzNhMjYxYWQzOTgyMTE0NmI5NjE0MTE1YTNhNzJhZjg3OTY1YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgPFpFdqsL5SFODTlHYG+Orqyu8Z
pfwf5MjeVdkMY+BxhEYK9TZHqtn7kC+RZAWXpHl4jD7bqwWNewJ+8rR1qmlUQBD3
e+XmSO4PZQawykT0H+29oWx3hQWGoYcGzQiNYHp761P7tG91Pl7QYDLABZmJMsXQ
VVSTtG/kzabUcQE0d/4GaPn5xvF2k0QcOg+Hw+ANy2H9pOmYxi94sNvPucmYVHaC
tcy3194cHe1qwRBco1dAnfc2Rc+ON083GKAafdr52RuyxSQf4ZLC2MnjagkVrimi
L/uCmVw7mgh2QdHDx1Nu7/jVGko70aa2gxSaP2ya+FKX9CNtzv1ffqhSNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGM6JhrTmCEUa5YUEVo6cq+Hllw9MB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvWXpvbUd0T1lJUlJybGhRUldqcHlyNGVXWEQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThh6MA0G
CSqGSIb3DQEBCwUAA4IBAQCIP4luwSrQQ6msAVclaynYHCpkGkuomBl7QgdiLNCf
Qk7zRq8biiQ1b5CRSTMK6Suyy+AvnD/U3XwocpYs17TVLDPmwfyeI2tXs+h7WwEs
Jm/rA0eoy+dTWH97Wk2onND+oUkLY1/kpngDa/qCv1ZnWi9rpzDQHv+7TCYx6xzG
+/D76SxmIZJkhjcWgvAHBMrSfsmPG2LCq5TkXhPbhBT19IREpzsuMHOHYK+wQkKY
WW9W5rw9y2rSlDvsSx11gYS8q5o8QFEJPxSPhObk2qgXj2MmbrwQxKDoIcPn8EMW
EhfNc/jos68fGGcGiFRHljtuyBq9X5+qik296Fuf7uLf
-----END CERTIFICATE-----
Generated at Thu Sep 3 11:58:13 2026 by rpki-client