Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/t78IaYnS0HEmsTTGKwuBCWpIiL0.roa
File: t78IaYnS0HEmsTTGKwuBCWpIiL0.roa (raw, json)
Hash identifier: deDg5nylgSFBLHO4ZXDN2ZLbhoJvPcFuTZWzXsLAcBU=
Subject key identifier: B7:BF:08:69:89:D2:D0:71:26:B1:34:C6:2B:0B:81:09:6A:48:88:BD
Certificate issuer: /CN=e38d9326f1ac5b0e55d2a8c3a665495928511b3f
Certificate serial: 019FB279489BC013F81531CD8D1A1E047049
Authority key identifier: E3:8D:93:26:F1:AC:5B:0E:55:D2:A8:C3:A6:65:49:59:28:51:1B:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/442TJvGsWw5V0qjDpmVJWShRGz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/t78IaYnS0HEmsTTGKwuBCWpIiL0.roa
Signing time: Thu 30 Jul 2026 10:02:00 +0000
ROA not before: Thu 30 Jul 2026 10:02:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57499
IP address blocks: 194.5.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/442TJvGsWw5V0qjDpmVJWShRGz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/442TJvGsWw5V0qjDpmVJWShRGz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/442TJvGsWw5V0qjDpmVJWShRGz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:79:48:9b:c0:13:f8:15:31:cd:8d:1a:1e:04:70:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38d9326f1ac5b0e55d2a8c3a665495928511b3f
Validity
Not Before: Jul 30 10:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7bf086989d2d07126b134c62b0b81096a4888bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:91:c4:61:0c:cc:1c:a7:8e:c0:1c:1a:7e:
b9:f3:77:fc:0c:3e:3e:26:84:38:60:5a:76:9e:c9:
52:94:17:53:71:88:b7:a9:4b:89:94:4d:f7:5f:02:
a4:f6:69:69:cc:9c:ab:2f:ae:20:bc:1d:96:a5:d9:
f3:6a:30:51:bb:06:8e:38:48:4a:67:e9:49:07:3a:
0b:fd:77:c8:40:12:09:eb:11:a6:ff:f2:ec:60:ad:
29:ee:9b:20:01:4d:81:7a:95:8d:b2:39:6a:a6:0e:
51:f2:c7:8d:73:15:b9:32:8b:ca:59:2f:f4:31:35:
e8:7f:6a:26:8a:77:a5:84:de:42:33:db:c6:a7:b6:
b6:04:43:da:5c:5a:3f:20:1e:4b:19:f7:1f:19:fe:
ca:f5:d6:03:d9:64:8a:0f:aa:67:80:59:ea:73:7a:
48:1a:37:fa:9d:35:fe:f4:19:55:bf:8d:58:f6:e5:
f6:3b:83:31:75:f7:69:9e:c9:45:18:e2:a9:5e:8e:
3c:b0:f4:7a:b6:19:6e:43:ec:6e:05:2b:3e:06:de:
d4:74:cd:4d:09:90:ef:6a:1c:f9:72:d0:d1:cd:22:
02:88:93:92:75:1a:06:7b:76:46:f4:04:43:88:1f:
9b:d4:96:39:a6:2a:a5:c8:ac:47:28:a8:31:89:68:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:08:69:89:D2:D0:71:26:B1:34:C6:2B:0B:81:09:6A:48:88:BD
X509v3 Authority Key Identifier:
keyid:E3:8D:93:26:F1:AC:5B:0E:55:D2:A8:C3:A6:65:49:59:28:51:1B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/442TJvGsWw5V0qjDpmVJWShRGz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/t78IaYnS0HEmsTTGKwuBCWpIiL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/86d1d8-fbab-4522-9e40-1ed05cad4418/1/442TJvGsWw5V0qjDpmVJWShRGz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.87.0/24
Signature Algorithm: sha256WithRSAEncryption
23:06:d9:1e:d5:c3:cf:f3:55:fe:ec:dd:47:46:7d:4d:96:2a:
b3:5d:71:ff:47:ec:c1:7f:72:8c:28:13:6e:eb:d6:20:d1:ee:
9f:ab:6f:d8:43:9d:31:88:09:1d:c5:ea:b6:34:6a:db:52:d0:
88:ff:24:9e:aa:c9:2a:53:e4:26:7c:03:18:d2:00:e4:df:c3:
ba:03:c3:c8:04:21:c3:37:2c:f1:b8:6c:e6:30:8c:9d:66:60:
53:11:e2:5a:d1:a4:76:d5:bf:47:8b:8e:de:ed:59:31:5c:83:
8d:97:1f:05:7c:cd:1d:62:2c:f4:cf:6a:92:d0:eb:dc:4f:89:
2d:43:6a:9c:12:de:84:f8:f5:f7:a0:17:fc:9d:1e:c6:c0:e9:
9f:f8:cd:25:cb:b5:67:d9:7c:f4:9c:04:6d:9f:fe:ca:99:4c:
16:90:71:b6:b8:c8:c6:85:1f:aa:ba:b3:ce:7b:05:dd:c2:07:
9e:42:78:f8:74:9d:8b:66:67:dd:1f:48:ec:e6:bf:fc:09:f6:
20:ef:fa:74:e0:01:3c:a1:e0:53:00:56:10:7f:16:bd:4f:af:
0d:9a:40:d7:ec:35:44:76:f4:5c:b9:00:86:e5:74:de:e8:68:
67:9a:73:08:67:ba:fa:c2:21:6b:20:b7:8b:15:e5:5f:4f:e5:
92:c8:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:39:53 2026 by rpki-client