Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/nWXUmdrRFwsJUQ_9oJaPGBDP9jQ.roa
File: nWXUmdrRFwsJUQ_9oJaPGBDP9jQ.roa (raw, json)
Hash identifier: rIbSgKhcb90mcIIisuiQswIgBYp5rgA0dx4/mD2oAi4=
Subject key identifier: 9D:65:D4:99:DA:D1:17:0B:09:51:0F:FD:A0:96:8F:18:10:CF:F6:34
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019A5EAE12717971329F46C9D634887A0C4D
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/nWXUmdrRFwsJUQ_9oJaPGBDP9jQ.roa
Signing time: Fri 07 Nov 2025 14:17:37 +0000
ROA not before: Fri 07 Nov 2025 14:17:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209725
IP address blocks: 78.24.120.0/24 maxlen: 24
93.92.17.0/24 maxlen: 24
2a0f:69c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:ae:12:71:79:71:32:9f:46:c9:d6:34:88:7a:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Nov 7 14:17:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d65d499dad1170b09510ffda0968f1810cff634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:90:02:df:2f:d7:c7:dd:13:18:7f:b4:ba:
d8:74:16:52:a4:73:62:b6:f4:6f:d4:7c:07:4f:80:
15:f7:69:62:3e:4d:51:50:32:22:5d:a2:7a:72:67:
37:b7:9d:bc:08:1f:5a:27:86:2d:3a:f3:5f:9f:5f:
87:72:ea:0f:8f:7b:c4:40:dc:2c:34:c3:fa:9e:11:
07:8f:ca:65:aa:f6:1a:22:96:a8:9f:14:13:35:25:
f6:1c:1d:5d:c5:39:57:5b:c0:6d:c7:18:0a:74:45:
79:27:51:56:b9:a0:56:2a:99:7f:e5:d9:11:94:3e:
b7:9b:45:7b:d2:4e:41:50:5a:97:e2:b9:2f:ed:70:
5c:de:9a:40:46:54:5c:24:c7:62:26:1e:8e:5b:1c:
1c:04:bc:3b:fb:a5:f0:a1:56:50:4d:81:d5:1b:7a:
1b:a3:43:65:9f:b7:82:b9:70:04:b2:b8:83:e0:bb:
fa:47:3c:7d:28:e0:8d:61:12:5e:f8:1a:8b:59:21:
51:43:a7:e6:fe:e4:5a:5b:47:02:3e:55:4d:a1:03:
e7:e4:b6:25:63:b4:ba:9b:ca:69:c1:c8:09:b2:3f:
71:15:cf:ab:ce:46:bb:5d:40:bf:fb:a9:7c:7e:a9:
8a:1a:14:ed:3f:59:be:63:13:ae:66:31:c7:4d:26:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:D4:99:DA:D1:17:0B:09:51:0F:FD:A0:96:8F:18:10:CF:F6:34
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/nWXUmdrRFwsJUQ_9oJaPGBDP9jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.120.0/24
93.92.17.0/24
IPv6:
2a0f:69c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:f4:b5:bb:67:02:9f:d2:b1:7f:33:53:d5:bb:27:45:d4:8c:
76:c6:0b:33:e4:21:72:af:7f:c3:2d:ef:ae:11:c1:1c:9c:4d:
7d:4f:49:0f:d7:de:c1:87:b3:f3:da:71:28:84:97:b1:14:4e:
70:96:81:87:7f:8f:7b:88:d8:5c:d4:ce:a0:7d:c1:00:f4:68:
07:87:d3:24:ae:d6:3e:20:ff:10:6c:f8:2d:8b:e0:85:32:32:
f4:1d:f8:ca:53:3a:85:a9:6d:98:5b:26:5a:f3:70:8d:16:8a:
d1:ca:bd:c6:d4:ed:2d:69:18:cf:76:ef:b8:0b:73:33:69:e4:
bc:83:76:e2:f6:2a:6c:f7:5c:1c:4d:ba:6e:56:9e:46:44:bd:
19:db:76:4f:a1:30:37:b8:34:38:c9:24:fb:00:6b:c7:37:11:
14:ba:37:78:6e:3d:50:4f:99:13:e4:fc:c4:5c:ba:94:3a:94:
c3:77:0d:38:5e:67:f2:fb:86:ab:4e:64:ad:f9:c2:ef:8a:a1:
bb:9e:73:64:20:2b:19:6e:87:4d:45:61:65:56:3d:6c:90:91:
a3:6d:6c:0a:07:43:2d:9c:3d:a9:25:92:d6:5d:0d:a4:03:f5:
53:30:70:89:14:52:7a:57:fe:41:4b:85:64:41:2f:72:f8:24:
50:41:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:31 2025 by rpki-client