Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/yqfpXi6KuJJULjeYNBeixgPcoIA.roa
File: yqfpXi6KuJJULjeYNBeixgPcoIA.roa (raw, json)
Hash identifier: G3dtJcu0gboRWqaS4RnCOjlxmq8E5TnalJLurWhHAbg=
Subject key identifier: CA:A7:E9:5E:2E:8A:B8:92:54:2E:37:98:34:17:A2:C6:03:DC:A0:80
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 01A033BD6EA6624675EC93AA76F065683613
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/yqfpXi6KuJJULjeYNBeixgPcoIA.roa
Signing time: Mon 24 Aug 2026 12:27:27 +0000
ROA not before: Mon 24 Aug 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213301
IP address blocks: 185.78.84.0/24 maxlen: 24
185.78.85.0/24 maxlen: 24
185.174.68.0/24 maxlen: 24
185.174.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:bd:6e:a6:62:46:75:ec:93:aa:76:f0:65:68:36:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Aug 24 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caa7e95e2e8ab892542e37983417a2c603dca080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:48:98:e7:e9:fd:9e:76:80:94:cf:31:1c:
86:a8:02:00:34:1f:b6:a7:d8:d6:31:a5:d9:fe:24:
e8:81:db:a8:43:84:b2:94:a5:5d:a5:6f:de:b0:bc:
48:08:96:d7:56:4e:d8:12:75:8a:69:d1:8d:32:fc:
85:f9:63:20:77:ae:2d:a6:17:72:e8:7a:53:de:0a:
f1:67:e6:5b:d4:66:02:11:f6:fe:d3:3f:1f:0d:79:
f5:82:d6:0c:4e:95:c2:9d:f0:ff:17:92:79:4b:b4:
5f:1c:30:ab:1c:6c:29:c7:c6:3d:05:fa:e0:ca:c1:
a1:ca:7f:0a:50:e1:85:a5:81:2c:7b:c6:1c:f8:12:
3b:8a:f0:ba:64:f9:fc:b4:46:ee:17:e2:d6:7a:7d:
c1:5b:46:70:38:43:50:72:f7:7a:9b:eb:ee:7f:49:
8f:b5:84:fe:0c:e0:24:93:b2:95:dd:12:ee:09:9d:
db:2b:db:88:5e:bd:c3:ca:47:54:00:c8:28:a3:cd:
96:38:9f:ab:b6:4d:b0:98:0d:63:67:0d:9d:8d:f4:
2c:61:02:9b:f1:4c:fa:b8:52:1f:66:e0:41:93:f2:
84:68:da:0a:ec:7b:0c:ce:42:d8:fd:d9:8f:71:bc:
a5:66:85:49:be:5d:c0:f3:44:32:78:55:bd:9f:fa:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:E9:5E:2E:8A:B8:92:54:2E:37:98:34:17:A2:C6:03:DC:A0:80
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/yqfpXi6KuJJULjeYNBeixgPcoIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.84.0/23
185.174.68.0/24
185.174.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ac:47:4b:1a:09:39:32:78:61:33:88:1d:23:73:9b:33:f1:
e6:f0:fd:f9:66:7d:42:49:6b:07:de:c6:12:e5:ae:ef:34:40:
7a:fd:1d:48:2f:8d:ae:a7:12:99:c4:26:80:d4:62:72:81:d7:
16:a7:e6:05:1c:ad:2b:5f:d6:74:cb:96:71:1f:a2:a7:9f:9f:
3c:64:87:60:65:d7:53:2c:1e:b0:86:56:76:67:e6:73:76:7c:
8c:7c:63:c5:f6:0d:73:73:d0:13:a9:36:c6:a4:d0:e5:70:60:
43:53:b5:67:a6:84:a7:e1:f7:d5:11:e8:5e:e0:fb:09:ad:6b:
c9:da:61:4a:5b:b0:6d:42:d5:ba:cb:84:bc:dc:b0:0e:91:15:
7c:06:d6:81:d6:96:0e:0f:50:95:31:eb:eb:22:a6:70:1d:73:
38:bf:40:a3:6e:c7:39:37:af:49:2c:84:48:80:c4:ce:8b:d0:
d7:2c:20:a5:9a:03:7e:44:17:2f:0e:80:0e:99:e4:1f:98:c4:
55:7f:10:ac:33:b9:b3:2c:83:e6:4a:db:45:11:bc:76:81:8d:
68:90:79:31:ef:94:e8:4f:16:a6:24:f0:eb:69:7c:a5:91:90:
64:39:24:49:2e:d3:a8:e3:e0:fd:3b:7f:3b:e4:63:b5:9e:67:
3c:b4:2d:ad
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAzvW6mYkZ17JOqdvBlaDYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjYwODI0MTIyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE3ZTk1ZTJlOGFiODkyNTQyZTM3OTgzNDE3YTJjNjAzZGNhMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa5ImOfp/Z52gJTPMRyGqAIANB+2
p9jWMaXZ/iTogduoQ4SylKVdpW/esLxICJbXVk7YEnWKadGNMvyF+WMgd64tphdy
6HpT3grxZ+Zb1GYCEfb+0z8fDXn1gtYMTpXCnfD/F5J5S7RfHDCrHGwpx8Y9Bfrg
ysGhyn8KUOGFpYEse8Yc+BI7ivC6ZPn8tEbuF+LWen3BW0ZwOENQcvd6m+vuf0mP
tYT+DOAkk7KV3RLuCZ3bK9uIXr3DykdUAMgoo82WOJ+rtk2wmA1jZw2djfQsYQKb
8Uz6uFIfZuBBk/KEaNoK7HsMzkLY/dmPcbylZoVJvl3A80QyeFW9n/pf0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMqn6V4uiriSVC43mDQXosYD3KCAMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEveXFmcFhpNkt1SkpVTGplWU5CZWl4Z1Bjb0lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuU5UAwQA
ua5EAwQAua5GMA0GCSqGSIb3DQEBCwUAA4IBAQBLrEdLGgk5MnhhM4gdI3ObM/Hm
8P35Zn1CSWsH3sYS5a7vNEB6/R1IL42upxKZxCaA1GJygdcWp+YFHK0rX9Z0y5Zx
H6Knn588ZIdgZddTLB6whlZ2Z+ZzdnyMfGPF9g1zc9ATqTbGpNDlcGBDU7VnpoSn
4ffVEehe4PsJrWvJ2mFKW7BtQtW6y4S83LAOkRV8BtaB1pYOD1CVMevrIqZwHXM4
v0Cjbsc5N69JLIRIgMTOi9DXLCClmgN+RBcvDoAOmeQfmMRVfxCsM7mzLIPmSttF
Ebx2gY1okHkx75ToTxamJPDraXylkZBkOSRJLtOo4+D9O3875GO1nmc8tC2t
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:37:47 2026 by rpki-client