Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/S1Xfq_W2hZFBrf3QTZ7Z5mFY7oY.roa
File: S1Xfq_W2hZFBrf3QTZ7Z5mFY7oY.roa (raw, json)
Hash identifier: +tsFBAioidYea+3mTIsYUtxrzdHnhTY3W73hdTPcWe0=
Subject key identifier: 4B:55:DF:AB:F5:B6:85:91:41:AD:FD:D0:4D:9E:D9:E6:61:58:EE:86
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A11B3B05F2B0D2AB58D5CE628E9F698D62
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/S1Xfq_W2hZFBrf3QTZ7Z5mFY7oY.roa
Signing time: Thu 08 Oct 2026 11:16:55 +0000
ROA not before: Thu 08 Oct 2026 11:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 78.136.255.0/24 maxlen: 24
194.76.192.0/24 maxlen: 24
194.76.218.0/24 maxlen: 24
194.76.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:3b:05:f2:b0:d2:ab:58:d5:ce:62:8e:9f:69:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Oct 8 11:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b55dfabf5b6859141adfdd04d9ed9e66158ee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:66:dc:50:e4:73:7d:cf:ac:ad:76:6e:c1:
f4:a3:e1:71:5d:eb:0f:26:d2:12:57:86:4b:fd:82:
21:17:f0:04:b0:0d:df:66:c8:50:e3:27:75:30:ed:
07:61:16:0a:11:30:99:aa:b4:b0:c6:08:0f:26:0e:
1a:eb:92:08:c8:fc:92:a4:9e:5e:98:29:e6:72:6c:
fd:a8:d7:2b:2a:51:8b:04:cf:96:98:27:95:f1:ab:
07:44:44:95:4c:a4:79:94:ef:49:5b:8a:6e:7a:50:
d2:7c:87:6d:fe:2a:a2:2c:48:36:af:fb:97:85:a9:
fc:ca:7e:9e:6d:48:e9:db:3a:d9:67:09:7a:01:66:
5e:ad:1a:fc:63:99:29:a5:27:fc:96:31:fa:ba:41:
e8:16:4a:fe:56:a1:c7:f8:d6:9a:34:51:d3:0f:73:
6b:ae:e8:ba:b6:bb:71:72:3d:ea:22:13:f9:f1:1b:
51:e1:78:f9:19:4c:79:7b:a3:71:6f:b4:d3:e1:a3:
87:a7:96:e3:5a:63:29:da:3e:48:5e:e5:d4:2e:4c:
4c:90:c9:f2:1f:55:f4:29:fa:8e:c7:47:91:b8:a3:
07:7a:25:29:cf:d2:1e:ec:df:d2:ca:03:aa:41:dc:
a5:af:ef:c9:ac:22:bb:9e:fe:b8:fe:46:4a:4f:76:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:DF:AB:F5:B6:85:91:41:AD:FD:D0:4D:9E:D9:E6:61:58:EE:86
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/S1Xfq_W2hZFBrf3QTZ7Z5mFY7oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.255.0/24
194.76.192.0/24
194.76.218.0/24
194.76.238.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ef:4e:87:34:6d:86:3c:6c:e5:1c:ea:10:24:13:42:39:47:
49:8c:16:c3:3c:a5:f7:cf:5f:f8:d1:94:69:a1:ec:52:7d:cb:
d1:b7:a5:e0:36:de:d4:5d:19:c5:ef:33:ee:71:37:e3:41:cd:
b1:ea:e1:f4:7a:79:58:c6:47:e8:35:56:cb:b3:6b:e7:37:21:
f2:02:e6:4d:7c:82:48:31:3c:84:1a:03:11:8a:d9:c8:c0:d8:
8e:7b:09:e4:fe:4a:ec:e3:cf:aa:0d:a1:2e:7f:e7:d3:9e:1c:
b8:8a:a3:0b:76:7a:79:fc:9c:58:66:a3:bd:e6:4d:88:0b:c6:
1d:6c:ae:d8:22:d1:ff:32:d3:01:de:03:6f:ed:0e:84:32:fb:
08:1a:0a:08:1c:3c:a1:9c:4f:31:b6:3d:74:5f:c8:3a:2d:00:
1b:a3:e0:04:f3:43:43:0f:fa:10:62:12:b5:be:f1:f7:20:ce:
bc:ff:13:9d:80:8c:cd:ff:85:5b:6c:18:36:da:92:25:6d:4b:
a9:13:aa:ab:c6:12:c7:33:32:61:e6:2a:29:3f:eb:a0:03:50:
18:d4:91:48:c5:f1:48:25:fe:8f:b8:c6:d5:f6:3d:65:9c:73:
7e:17:5b:e9:a1:5c:d5:ff:a4:01:ba:56:4e:04:22:ae:f9:86:
12:17:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:32 2026 by rpki-client