Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/L-JyaLSktZhU500CZ2Jm-DzL3yI.roa
File: L-JyaLSktZhU500CZ2Jm-DzL3yI.roa (raw, json)
Hash identifier: oJkt8aUX20M7CKsCfdRcWZpuHilWXCMczf1t5NXS0eI=
Subject key identifier: 2F:E2:72:68:B4:A4:B5:98:54:E7:4D:02:67:62:66:F8:3C:CB:DF:22
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 01A11B503F7D9DC0C79E3A52F9CE2B7E4E58
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/L-JyaLSktZhU500CZ2Jm-DzL3yI.roa
Signing time: Thu 08 Oct 2026 11:40:06 +0000
ROA not before: Thu 08 Oct 2026 11:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213301
IP address blocks: 185.78.84.0/24 maxlen: 24
185.78.85.0/24 maxlen: 24
185.174.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:50:3f:7d:9d:c0:c7:9e:3a:52:f9:ce:2b:7e:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Oct 8 11:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fe27268b4a4b59854e74d02676266f83ccbdf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:6f:0a:5f:c4:3e:de:77:74:f0:9f:c5:a2:
ab:75:a0:6b:da:d7:f8:0a:54:e7:d8:b9:59:a7:35:
c2:d5:61:b6:95:11:d1:c3:97:4f:07:5e:c3:5d:f7:
5c:4e:1c:4f:75:3e:69:93:ec:d9:a7:27:4f:73:10:
e6:09:d5:44:1f:7c:2c:3f:c0:8e:29:40:49:6c:ea:
b8:92:5b:c6:94:de:3f:0f:6a:15:12:e7:00:26:d3:
33:8e:84:93:08:03:81:4a:bf:25:51:63:c3:05:1c:
bb:6f:cc:2d:77:77:68:70:5c:64:61:41:59:e4:95:
69:ab:08:49:4b:6c:82:73:de:63:b8:8b:e7:a2:67:
8d:60:a3:59:3d:98:bd:d1:19:0e:4f:15:cc:27:cb:
ad:72:b3:d6:34:a7:94:3c:3e:ca:e5:f2:a3:9e:7f:
7c:b5:d9:5d:f3:4b:39:15:be:fe:32:0d:b6:d7:bf:
76:91:2b:67:18:4d:83:e0:ed:10:e4:fc:de:72:ca:
71:cf:a9:7a:70:91:1b:9a:70:97:99:10:64:95:17:
18:e1:c1:73:1a:a7:13:a9:92:10:12:ee:60:ec:aa:
20:01:5e:bc:65:f4:6c:54:4a:aa:c6:dc:93:ee:e9:
77:5e:f4:21:55:d4:50:f9:ae:98:9b:2a:07:f8:a6:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:72:68:B4:A4:B5:98:54:E7:4D:02:67:62:66:F8:3C:CB:DF:22
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/L-JyaLSktZhU500CZ2Jm-DzL3yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.84.0/23
185.174.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:8d:e8:70:d5:69:94:73:ea:53:20:4f:ed:7b:4d:ea:5c:
bf:a3:24:87:38:83:2b:29:46:68:bb:15:93:ef:16:0a:d2:9f:
fc:b2:c1:fd:03:36:66:ca:ad:53:ae:f8:23:da:dd:56:c7:5e:
7b:98:d8:ca:e9:5a:9d:61:28:58:93:ce:5b:c8:8f:da:52:a1:
b5:4b:41:0e:ae:ed:7b:c3:0e:21:48:0c:cc:a7:14:0a:7f:d0:
28:e6:47:98:82:c9:58:98:c7:6f:3d:71:55:63:83:d4:89:47:
7c:c9:1f:ad:bf:94:ab:92:b5:73:01:bd:23:ee:ee:de:e9:b6:
42:9e:b8:3c:da:53:5c:06:77:9a:36:8e:75:49:bd:13:d4:dc:
31:46:90:6c:27:6a:9f:06:39:6f:31:54:49:47:77:e5:df:4c:
a3:19:d9:5c:15:ed:0e:07:03:2f:c3:a8:01:2c:62:65:41:58:
8c:08:22:cc:cf:05:f7:f0:31:cc:85:eb:4b:a9:3c:94:ef:c7:
1c:a8:ba:7f:25:4c:6d:db:5e:1f:1a:db:c1:55:5e:4c:f0:a0:
ae:b1:d2:0e:b8:1a:01:c7:41:34:72:2e:91:4d:e4:69:66:60:
20:11:3d:46:d5:9d:3e:f4:14:bf:84:97:ae:8c:d6:36:41:15:
41:5d:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:09 2026 by rpki-client