Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/roCmEcLotG26DvoespZ13VQqNEM.roa
File: roCmEcLotG26DvoespZ13VQqNEM.roa (raw, json)
Hash identifier: WLsBiZ2uejeQ/ReJ+/6/6imfUvvHivXiEVOIQDfwWK8=
Subject key identifier: AE:80:A6:11:C2:E8:B4:6D:BA:0E:FA:1E:B2:96:75:DD:54:2A:34:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F006E4F95BD27504CDED7D53D820D7B4B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/roCmEcLotG26DvoespZ13VQqNEM.roa
Signing time: Thu 25 Jun 2026 20:17:37 +0000
ROA not before: Thu 25 Jun 2026 20:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 78.154.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:6e:4f:95:bd:27:50:4c:de:d7:d5:3d:82:0d:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 25 20:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae80a611c2e8b46dba0efa1eb29675dd542a3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:5d:e4:bf:d7:4b:18:c9:be:2b:f9:9c:61:
aa:a4:62:c3:41:4c:6e:b2:83:8c:8f:36:c1:c3:f7:
a1:39:0c:0f:84:79:0e:d2:ea:47:2f:f7:44:40:a9:
50:aa:0b:d7:25:85:76:4e:90:e4:a3:66:03:cf:a9:
8b:07:81:34:e1:5d:a5:99:58:2b:9d:49:24:ab:0e:
ad:e2:8f:55:19:39:5a:cf:32:53:89:3e:04:d5:3d:
1e:39:b4:cd:c4:03:59:09:00:d2:b0:09:5f:ba:bc:
c7:34:71:db:87:71:26:83:23:16:c8:d3:87:fa:e0:
89:8e:ac:56:3f:2a:fe:d8:70:b4:e0:69:72:b4:d4:
f3:cd:e7:5c:79:dc:4f:a4:21:5c:c3:0e:73:df:c5:
1d:a1:68:5a:b5:fc:cf:b6:e0:9c:54:3d:b1:e8:67:
99:ad:36:7f:6f:15:f3:98:eb:f4:4e:a5:cc:81:a4:
aa:ed:20:ab:68:f8:41:64:a3:1b:d4:36:a8:c0:6c:
66:72:df:8e:b7:a5:ca:f9:48:ac:26:bd:3f:60:ed:
6e:05:ec:b7:c4:7d:69:e9:34:ad:20:1a:0f:3a:cf:
87:0a:35:71:7d:d5:06:8f:00:b5:80:48:5d:29:33:
70:c7:42:64:29:5c:4a:45:33:b5:e7:2a:bb:b9:26:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:A6:11:C2:E8:B4:6D:BA:0E:FA:1E:B2:96:75:DD:54:2A:34:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/roCmEcLotG26DvoespZ13VQqNEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.116.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:bd:08:43:23:ce:ed:52:91:4b:e3:79:2e:c9:9f:dc:5f:
5b:1a:99:e6:cd:ae:2e:78:a8:70:58:cb:61:f6:b2:99:ad:b4:
d1:d4:88:cd:e7:f9:6e:71:72:25:f9:2c:ff:d5:65:25:10:5e:
24:3e:78:5d:e7:98:f1:e8:b0:1e:ea:ce:96:e9:76:fe:a3:8e:
3a:83:1a:cc:cf:7a:9d:4f:e3:01:1a:a6:88:25:f4:4d:b6:d6:
7c:11:54:2a:58:83:8f:ff:fc:de:23:94:e1:5f:65:a8:f9:85:
36:89:dc:7f:43:2c:25:67:95:be:0b:32:04:37:31:27:6f:4e:
66:af:4e:60:90:3a:93:07:83:50:ab:b0:77:16:37:cb:00:38:
d5:56:c1:a7:64:cf:7c:42:0e:97:22:b7:08:3a:33:42:09:71:
3e:18:30:91:6c:e0:e6:70:00:ba:19:b6:4e:75:e5:03:ec:33:
e5:3a:37:54:b9:a0:f9:84:05:e1:c0:c3:35:70:6d:81:07:47:
74:a3:b3:fc:02:b7:c3:6d:ca:a2:22:37:c7:28:06:b8:b3:4c:
85:9b:b5:91:75:01:fd:12:f0:a9:bb:5b:36:6b:ed:96:c8:73:
a0:fe:df:09:26:5e:fa:70:d2:b5:61:eb:14:b0:d1:43:9a:55:
80:6d:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:35:58 2026 by rpki-client