Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/Z7gYULQsmbvLbgbmHmscIz6zf98.roa
File: Z7gYULQsmbvLbgbmHmscIz6zf98.roa (raw, json)
Hash identifier: s+jj3/PK5fs3M2FtKrTnCvCAEuY79jF5RTAzfgLyeJY=
Subject key identifier: 67:B8:18:50:B4:2C:99:BB:CB:6E:06:E6:1E:6B:1C:23:3E:B3:7F:DF
Certificate issuer: /CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Certificate serial: 01A0EDB2975BA82F78652242689A9DC1BB38
Authority key identifier: 98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/Z7gYULQsmbvLbgbmHmscIz6zf98.roa
Signing time: Tue 29 Sep 2026 15:04:59 +0000
ROA not before: Tue 29 Sep 2026 15:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 130.78.178.0/24 maxlen: 24
2a0f:4980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:b2:97:5b:a8:2f:78:65:22:42:68:9a:9d:c1:bb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Validity
Not Before: Sep 29 15:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b81850b42c99bbcb6e06e61e6b1c233eb37fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:d0:1e:5a:86:60:f9:42:85:a6:24:c2:31:
b2:ee:cf:5b:80:49:ec:4f:9e:2d:9e:7e:e5:c6:c3:
38:26:33:07:d6:ed:cb:91:c2:5b:36:e5:1f:47:fc:
27:2f:b2:98:d2:8d:fc:a4:87:dd:2c:e7:5c:b4:66:
8c:bb:fa:35:7e:c5:91:17:32:92:c3:c4:41:4c:f7:
93:75:0b:da:f0:6c:33:e4:c0:89:28:da:6a:27:84:
9e:42:7b:0a:05:65:0b:eb:c4:16:06:fd:7f:fc:e4:
59:e1:c7:f5:99:ee:45:ea:3d:d5:81:ec:88:4f:22:
20:b9:71:07:5c:d5:c7:8f:da:21:fd:09:d7:80:c1:
59:eb:3a:5a:53:4c:ca:42:53:56:5f:16:60:f6:45:
b1:e7:0b:ce:fb:c9:7d:0a:ff:a8:98:b7:7f:39:97:
c9:5c:54:a6:76:b6:27:66:87:7c:a8:fa:5a:11:b0:
87:42:1e:e8:d3:a5:1c:58:4c:32:96:00:9b:48:cb:
8d:29:68:01:ab:15:40:e6:d3:28:7c:c5:c3:fa:5d:
a1:0b:dc:93:08:0f:fa:da:58:e8:06:16:4c:f0:24:
54:4c:4e:d2:b2:09:d9:78:43:08:fb:0f:a3:37:2e:
01:19:09:42:2f:35:cd:3e:15:a0:85:1a:8a:0c:4c:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:18:50:B4:2C:99:BB:CB:6E:06:E6:1E:6B:1C:23:3E:B3:7F:DF
X509v3 Authority Key Identifier:
keyid:98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/Z7gYULQsmbvLbgbmHmscIz6zf98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.178.0/24
IPv6:
2a0f:4980::/29
Signature Algorithm: sha256WithRSAEncryption
91:3d:72:4f:03:4a:5f:6b:a6:48:0e:49:64:93:6e:b4:80:6c:
5b:de:91:5a:99:b8:10:14:1a:a6:db:ee:ad:f3:5f:65:8a:71:
91:a7:18:cc:5e:70:5e:27:4f:ac:04:58:05:79:8d:c8:b9:41:
49:59:88:87:76:b6:c3:90:2d:cb:7b:06:85:df:f9:25:93:9b:
3f:ec:ad:10:4a:8b:1b:9b:5c:f7:a8:8a:f4:6f:f3:aa:23:b5:
2f:84:84:5b:0d:23:37:fa:c5:72:54:34:c2:53:95:a5:df:bf:
ab:87:38:78:70:f1:a1:97:16:18:18:1b:71:fc:ef:e1:08:11:
2b:6d:fe:42:a5:7d:48:1f:8e:85:ae:47:53:c4:f7:59:23:d2:
54:75:96:47:92:40:75:ed:2c:1d:88:c2:af:3c:d0:51:21:c9:
72:d1:34:38:0b:7a:10:50:59:62:9b:0f:70:59:ad:0b:71:e0:
20:3d:de:1f:bb:f7:0e:92:9d:98:a1:c9:82:50:6b:e5:1f:b4:
1d:e3:88:cd:df:27:89:2d:e7:e8:30:9e:42:83:1a:99:7c:c2:
45:af:7f:5e:bb:c2:55:9a:90:0d:48:38:74:a1:6f:22:e3:85:
bb:01:b3:78:85:55:b5:8a:da:b4:c4:a7:c9:8a:99:16:13:1e:
22:24:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:03 2026 by rpki-client