Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/zizrnNL8wF9p6PNomcwd5MobOo4.roa
File: zizrnNL8wF9p6PNomcwd5MobOo4.roa (raw, json)
Hash identifier: CGjyvLBV/Ik2GySx2QYIgoMrKISbBhBCMpIPTdJISrs=
Subject key identifier: CE:2C:EB:9C:D2:FC:C0:5F:69:E8:F3:68:99:CC:1D:E4:CA:1B:3A:8E
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019FD75A1A49DE32B3B98AF7F66FBB307D78
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/zizrnNL8wF9p6PNomcwd5MobOo4.roa
Signing time: Thu 06 Aug 2026 13:53:54 +0000
ROA not before: Thu 06 Aug 2026 13:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 78.24.125.0/24 maxlen: 24
93.92.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:5a:1a:49:de:32:b3:b9:8a:f7:f6:6f:bb:30:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Aug 6 13:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce2ceb9cd2fcc05f69e8f36899cc1de4ca1b3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:35:fb:75:25:e3:cf:2e:a8:01:1b:27:d1:
c5:b7:1b:89:2f:64:8f:7b:f0:2a:45:cd:49:18:b0:
ef:01:51:6f:ab:1d:ae:2d:10:32:49:9f:46:f7:6e:
08:8f:9d:e6:02:29:d0:18:06:b2:d6:27:55:7d:7c:
16:f7:e8:76:77:b1:fd:78:82:c9:1c:5c:09:bf:1a:
07:81:34:eb:8b:ff:8c:22:35:b0:9b:fb:17:ba:44:
46:ca:4f:6e:83:35:ab:37:c7:d5:67:7b:bf:74:5e:
0a:3e:4a:ca:fd:54:b6:8e:6b:f8:09:22:1e:f4:f3:
9b:09:41:9d:a6:57:19:d7:36:1b:41:96:cb:cf:55:
55:e1:e1:60:c0:c9:cc:94:f6:02:e9:b6:39:ed:07:
f1:dc:27:de:b9:02:4e:c3:7b:44:cb:53:c3:89:ae:
88:81:5e:4b:9a:ba:3c:19:f3:8e:34:9e:9a:0b:dd:
60:2f:56:f4:35:c0:0c:4f:74:d1:95:c1:d9:36:39:
85:e4:83:4b:aa:1f:ad:3f:fd:1f:ad:9a:26:32:12:
90:7c:bd:7f:75:54:e7:72:5d:f5:55:21:3f:cf:bd:
58:da:c3:29:b2:e2:36:87:45:96:9a:76:f9:ae:c0:
e2:b4:ee:0a:01:42:96:f1:3a:20:13:db:f2:0d:5e:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:EB:9C:D2:FC:C0:5F:69:E8:F3:68:99:CC:1D:E4:CA:1B:3A:8E
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/zizrnNL8wF9p6PNomcwd5MobOo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.125.0/24
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:2b:91:7a:76:65:45:9a:fb:81:7d:b7:89:77:7d:25:82:f7:
49:6b:a2:54:df:8e:b1:3a:3f:b1:b9:8f:b6:bd:22:cf:69:1a:
37:80:43:9a:2b:8d:80:fc:fc:02:57:e8:77:8c:45:8f:70:15:
71:d3:c2:38:28:c8:dd:ef:26:46:2e:76:39:92:49:76:a1:03:
d8:ef:b2:fd:f2:d4:76:e0:07:82:af:01:3f:2a:65:60:fb:01:
54:fd:87:7d:85:41:d3:2d:6b:ce:5d:5f:c7:8e:6c:50:d0:04:
1f:33:0a:52:97:94:a0:92:ff:af:f6:de:f4:06:d2:44:ea:07:
4c:c5:7d:6d:c9:af:3b:1a:8f:1e:d6:1c:84:38:2b:4c:e8:4b:
72:9d:2f:81:21:62:b6:00:81:76:7f:8b:cd:ef:6b:0f:56:48:
b0:c1:5e:70:c5:14:fb:a3:d6:a1:ad:a1:fb:f8:34:1d:3a:b7:
d2:2f:e4:ce:c8:e1:57:a4:06:00:d0:67:f4:0e:c1:3c:b9:22:
a1:37:e2:75:7d:57:37:98:2a:e2:ac:f7:63:05:2c:8e:26:a5:
23:a4:6b:6d:40:c1:8a:26:7e:d7:00:82:82:9d:e1:c8:fc:02:
ae:0d:42:25:a7:ef:39:e9:a1:10:c8:66:72:85:27:7a:75:fa:
21:bb:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:32 2026 by rpki-client