Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o6Z58e8kXC_tjHrx3AzJikiTFTk.roa
File: o6Z58e8kXC_tjHrx3AzJikiTFTk.roa (raw, json)
Hash identifier: lBfmpjtG/hG8Jjm+pzEslmQwcH0RK+BZ0PVEwxvPA2E=
Subject key identifier: A3:A6:79:F1:EF:24:5C:2F:ED:8C:7A:F1:DC:0C:C9:8A:48:93:15:39
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F7FBB8B5016CDA9A4D7FA51A0A3912B8C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o6Z58e8kXC_tjHrx3AzJikiTFTk.roa
Signing time: Mon 20 Jul 2026 13:33:45 +0000
ROA not before: Mon 20 Jul 2026 13:33:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216232
IP address blocks: 78.154.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:bb:8b:50:16:cd:a9:a4:d7:fa:51:a0:a3:91:2b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 20 13:33:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a679f1ef245c2fed8c7af1dc0cc98a48931539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:a1:b0:93:3b:c8:8d:c7:fa:60:a7:46:db:
ff:df:fd:60:06:44:c5:d4:4f:9c:31:76:48:7e:53:
9e:0a:87:8b:77:79:27:64:51:8b:09:56:f1:3a:1e:
ff:c5:7d:86:ce:3c:41:f9:28:d9:84:f1:ea:f5:1e:
c8:d4:b0:9d:48:14:71:7a:c9:05:67:85:96:47:dc:
ba:78:53:a5:80:19:1f:f1:6b:60:69:a9:47:51:19:
93:a6:7c:8e:2c:2e:35:11:bc:3a:4d:6e:4b:61:75:
1b:00:f3:ae:76:24:38:69:76:78:f6:af:a5:3f:a0:
02:a1:5e:44:37:ca:ed:af:1e:cf:39:5f:b8:24:61:
3c:0f:4e:d4:21:49:a5:bd:b3:7e:33:6e:64:c1:76:
07:a1:31:95:7b:83:f3:85:3f:ab:24:1d:da:85:92:
cf:7d:49:38:64:a2:bb:cf:41:cc:fc:09:67:a3:7e:
aa:ad:59:96:bf:68:8e:4b:1d:1f:a9:9a:8a:41:48:
98:3f:ef:95:18:cf:d6:00:0a:7d:69:9a:4e:f2:d6:
09:c1:ff:ca:b1:f5:8c:a9:3a:96:35:ef:7a:6f:05:
58:9b:dc:15:44:00:53:92:0b:ef:6e:d6:e3:76:19:
61:57:33:28:d5:dc:5b:85:a7:b5:eb:bc:15:68:ea:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:79:F1:EF:24:5C:2F:ED:8C:7A:F1:DC:0C:C9:8A:48:93:15:39
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o6Z58e8kXC_tjHrx3AzJikiTFTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.100.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f4:19:74:36:7d:7e:6e:71:09:e6:91:2a:1c:1f:5a:99:4e:
0e:b3:f9:53:14:c3:15:5a:02:6e:b2:72:f5:e4:99:50:b8:69:
f4:f4:d7:79:d3:0b:b5:f6:e0:b0:2c:4a:2d:b7:79:3a:7a:a5:
41:5b:6f:72:12:ae:70:e7:2c:07:7d:c1:60:bf:68:e1:8a:05:
64:40:a4:83:1a:37:09:9c:e8:c0:df:62:22:ae:38:6b:16:07:
32:34:3c:62:b6:d0:01:03:cc:6c:09:2b:2e:9d:13:4e:af:c5:
15:48:b3:53:8a:42:48:de:2e:f9:50:db:ac:04:47:23:d3:1b:
32:b4:f3:91:5f:2c:ba:03:88:a0:7a:da:ba:61:bb:02:de:13:
53:6c:c2:00:38:65:d2:1e:9f:15:42:cd:52:ab:29:4e:7c:03:
01:91:a1:75:5c:df:95:a7:3a:2d:67:a3:b1:af:e0:3f:5f:72:
57:5b:5a:4a:6c:91:b5:0c:3e:e4:36:05:f3:62:6f:1f:58:d7:
a2:84:86:40:1d:8d:57:d0:8f:37:ef:04:b8:4b:8a:57:4d:b4:
b4:65:23:53:38:60:ed:87:7b:8a:ce:65:94:b1:2e:db:9f:ab:
5e:7d:46:ec:2f:63:27:15:14:90:5f:5a:73:cb:23:12:af:7f:
3b:e2:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client