Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/IlWdjL-ytgCPbeKaKojbLcDcQVg.roa
File: IlWdjL-ytgCPbeKaKojbLcDcQVg.roa (raw, json)
Hash identifier: SODcmAQzLm1C4suUKGZYP2Pl6fVxYUkVGZ+lZxMphvg=
Subject key identifier: 22:55:9D:8C:BF:B2:B6:00:8F:6D:E2:9A:2A:88:DB:2D:C0:DC:41:58
Certificate issuer: /CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Certificate serial: 01A0ED7196B00AB9F3D185507358F03E2164
Authority key identifier: 98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/IlWdjL-ytgCPbeKaKojbLcDcQVg.roa
Signing time: Tue 29 Sep 2026 13:53:59 +0000
ROA not before: Tue 29 Sep 2026 13:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218584
IP address blocks: 130.78.178.0/24 maxlen: 24
2a0f:4980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:71:96:b0:0a:b9:f3:d1:85:50:73:58:f0:3e:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Validity
Not Before: Sep 29 13:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22559d8cbfb2b6008f6de29a2a88db2dc0dc4158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:51:c2:5b:97:16:fa:51:c4:e3:c3:a3:26:
8d:f1:83:5d:10:99:ec:79:74:15:80:25:c6:6b:2a:
57:8a:20:0b:37:39:3c:c0:0e:d0:14:c2:0f:d3:b4:
91:c6:d8:67:e6:ad:88:c1:b3:e7:a5:00:d0:06:97:
ac:03:78:e1:8e:82:63:31:8b:dd:54:df:19:5c:47:
37:f4:ac:19:fe:22:84:7e:21:13:f2:d4:5e:f0:c1:
1f:36:50:d7:da:cf:ce:a7:d5:c2:99:ee:20:b0:89:
05:83:6d:99:c7:85:4c:05:38:09:ea:3c:64:94:03:
77:89:81:cd:5a:7b:a1:61:4d:d1:94:f8:e4:29:bc:
ff:b9:5b:f2:e9:9e:01:f4:96:d0:fa:79:da:5c:65:
59:b8:bc:8f:f2:c7:25:01:51:e0:7c:7e:71:8f:67:
60:52:a7:07:d7:d8:5d:d1:b5:d1:97:63:fc:58:06:
86:44:17:d7:7d:a3:87:a1:a9:8d:4d:5a:7b:55:94:
fb:60:33:cf:93:e4:e9:a6:23:8a:16:c8:fe:42:f7:
49:ca:2c:90:39:ac:c6:d4:c6:0a:1b:5a:a7:e3:db:
7b:cf:ec:85:da:22:4d:2b:5a:d3:aa:4a:7a:76:6a:
1b:a9:7e:4e:e1:9a:00:68:85:31:ff:50:04:3f:60:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:9D:8C:BF:B2:B6:00:8F:6D:E2:9A:2A:88:DB:2D:C0:DC:41:58
X509v3 Authority Key Identifier:
keyid:98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/IlWdjL-ytgCPbeKaKojbLcDcQVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.178.0/24
IPv6:
2a0f:4980::/29
Signature Algorithm: sha256WithRSAEncryption
50:a3:7a:5f:ae:0b:9f:7f:f1:d9:24:d1:c4:c7:80:01:2f:18:
4d:64:52:c7:48:ce:33:ce:ca:e3:a4:9a:67:e4:e8:18:39:37:
14:0b:7f:19:b7:12:cf:50:40:84:54:b8:fb:77:0f:cc:a3:fb:
ec:ca:89:9b:51:87:b2:1f:ad:03:f1:f5:71:21:98:6e:7c:8e:
95:99:39:01:43:32:a2:c6:eb:c9:ea:d4:2e:bd:93:6e:3f:4f:
82:da:2f:76:c4:49:a0:16:58:9d:2d:af:96:6d:25:c6:c8:f5:
5d:bd:7b:d9:0f:b3:96:e9:7a:13:10:e9:b7:5d:84:28:37:7a:
57:6d:5e:86:99:33:74:53:3e:34:91:c4:d3:6a:50:dc:09:96:
b7:7a:da:a0:ee:aa:b2:24:60:76:0a:74:fd:cc:34:30:e5:8c:
de:9e:f9:17:8b:84:86:92:92:e4:cb:15:69:d3:3f:5a:d8:c9:
84:c5:f4:05:49:18:ed:b9:e3:09:4d:14:07:37:96:24:89:eb:
69:2e:8e:92:93:13:97:40:de:5c:39:9f:f5:36:66:51:7d:f9:
98:d4:d9:df:9e:e2:ce:6d:ae:7f:b8:46:da:71:75:b5:71:c9:
e6:ec:db:f3:3b:a2:f9:e5:6f:9d:56:b8:f1:83:28:19:9a:0f:
64:f6:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:44 2026 by rpki-client