Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/78eqcaMcvTPsNu7guK_5i9wvMew.roa
File: 78eqcaMcvTPsNu7guK_5i9wvMew.roa (raw, json)
Hash identifier: faBt9IMwah328Jgf+zWMXABylJqIbTadVclew2vDQZI=
Subject key identifier: EF:C7:AA:71:A3:1C:BD:33:EC:36:EE:E0:B8:AF:F9:8B:DC:2F:31:EC
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A003EAFFC8438DC0496E298959295D0FF3
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/78eqcaMcvTPsNu7guK_5i9wvMew.roa
Signing time: Sat 15 Aug 2026 05:35:27 +0000
ROA not before: Sat 15 Aug 2026 05:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206854
IP address blocks: 94.139.184.0/24 maxlen: 24
94.139.185.0/24 maxlen: 24
94.139.186.0/24 maxlen: 24
94.139.188.0/24 maxlen: 24
94.139.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:ea:ff:c8:43:8d:c0:49:6e:29:89:59:29:5d:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Aug 15 05:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc7aa71a31cbd33ec36eee0b8aff98bdc2f31ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:c6:45:2e:43:93:e6:19:a6:e8:05:be:2c:
40:ea:07:aa:bb:6c:04:1f:27:e6:b6:19:d9:b4:77:
d5:7c:7f:a3:c0:64:22:4c:30:43:e5:00:6a:ce:15:
de:8c:25:01:6c:1b:7c:85:fe:72:48:59:c6:d2:6e:
60:c1:09:e0:72:0c:de:8f:5b:a2:79:d7:d6:ae:80:
9f:33:67:d4:75:2b:5d:43:e9:30:b4:80:56:7b:16:
59:d8:4a:88:b4:29:ec:25:da:b4:51:7b:13:f7:02:
11:f2:d6:45:78:46:03:d5:9c:ec:24:37:c1:9d:b8:
63:b6:37:23:6e:ce:c0:60:e9:a1:97:cb:75:5c:38:
72:18:3b:e0:da:11:60:17:47:8b:06:13:c9:19:3a:
7c:ac:b6:b3:f4:f1:bf:77:ab:93:ed:4d:36:50:62:
4f:e0:93:c5:d7:f4:70:33:4d:fd:ba:ae:33:a7:82:
f6:a7:b7:f8:22:df:c7:a9:42:d5:d9:a0:f0:0f:22:
48:c4:47:dc:3e:95:8e:23:55:46:b6:29:a2:98:51:
9d:6b:3a:7c:41:b5:78:00:b3:49:86:bc:58:57:a1:
44:5e:a2:81:09:9c:82:02:73:74:c5:42:9f:cd:52:
5c:f2:f0:0b:c7:80:87:4c:79:53:0b:77:96:90:14:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:AA:71:A3:1C:BD:33:EC:36:EE:E0:B8:AF:F9:8B:DC:2F:31:EC
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/78eqcaMcvTPsNu7guK_5i9wvMew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.184.0-94.139.186.255
94.139.188.0/24
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:05:1e:f4:fd:2e:9b:fb:87:5d:b1:b2:5c:21:bf:5b:14:ee:
ba:23:41:63:ed:44:60:30:e3:9b:56:46:81:f3:8f:20:27:9b:
fa:fd:81:5a:11:05:f1:e7:4a:26:df:15:2f:e1:b1:8a:20:34:
40:69:9b:3b:5f:9c:e9:24:2b:b6:8d:a0:18:7c:c9:26:5b:fd:
30:13:dc:79:57:df:01:98:38:14:2f:cb:93:3f:63:5a:68:1c:
8f:fc:66:cf:5a:f4:4f:c8:c2:97:17:e8:19:24:cb:47:12:4a:
cd:4a:c2:09:3c:fa:e2:2d:b2:48:a2:26:7c:6c:e8:2b:c0:bb:
24:7a:1f:bd:64:ab:df:36:6d:82:d2:99:c0:60:49:5b:0c:6a:
48:75:49:55:f9:47:60:d7:d7:c4:b4:ae:89:0f:86:60:b5:de:
64:9d:1f:1d:24:73:47:da:85:ab:0b:cf:f3:85:78:08:2d:9f:
53:b9:94:2f:93:75:29:fe:08:e6:c9:7c:39:78:16:64:63:80:
59:c6:ec:97:f9:64:c7:bd:e1:10:b5:dd:4d:da:2b:6f:c0:ef:
ff:e8:f5:83:43:5d:55:9c:2e:de:ad:25:a9:d9:e6:3b:e5:dc:
73:d4:4d:a0:40:1b:63:34:2c:57:13:7b:dd:8f:9d:54:d4:0f:
25:44:60:15
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaAD6v/IQ43ASW4piVkpXQ/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYwODE1MDUzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmM3YWE3MWEzMWNiZDMzZWMzNmVlZTBiOGFmZjk4YmRjMmYzMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZHGRS5Dk+YZpugFvixA6gequ2wE
HyfmthnZtHfVfH+jwGQiTDBD5QBqzhXejCUBbBt8hf5ySFnG0m5gwQngcgzej1ui
edfWroCfM2fUdStdQ+kwtIBWexZZ2EqItCnsJdq0UXsT9wIR8tZFeEYD1ZzsJDfB
nbhjtjcjbs7AYOmhl8t1XDhyGDvg2hFgF0eLBhPJGTp8rLaz9PG/d6uT7U02UGJP
4JPF1/RwM039uq4zp4L2p7f4It/HqULV2aDwDyJIxEfcPpWOI1VGtimimFGdazp8
QbV4ALNJhrxYV6FEXqKBCZyCAnN0xUKfzVJc8vALx4CHTHlTC3eWkBS24QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFO/HqnGjHL0z7Dbu4Liv+YvcLzHsMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvNzhlcWNhTWN2VFBzTnU3Z3VLXzVpOXd2TWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANei7gD
BABei7oDBABei7wDBAFei74wDQYJKoZIhvcNAQELBQADggEBAF4FHvT9Lpv7h12x
slwhv1sU7rojQWPtRGAw45tWRoHzjyAnm/r9gVoRBfHnSibfFS/hsYogNEBpmztf
nOkkK7aNoBh8ySZb/TAT3HlX3wGYOBQvy5M/Y1poHI/8Zs9a9E/IwpcX6Bkky0cS
Ss1Kwgk8+uItskiiJnxs6CvAuyR6H71kq982bYLSmcBgSVsMakh1SVX5R2DX18S0
rokPhmC13mSdHx0kc0fahasLz/OFeAgtn1O5lC+TdSn+CObJfDl4FmRjgFnG7Jf5
ZMe94RC13U3aK2/A7//o9YNDXVWcLt6tJanZ5jvl3HPUTaBAG2M0LFcTe92PnVTU
DyVEYBU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:08:14 2026 by rpki-client