Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa
File: 8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa (raw, json)
Hash identifier: kECzxgTvYO+PrdxQixZUCF66WT+yJQBNEFYIJiJ2PsM=
Subject key identifier: F1:66:19:B6:EC:18:AC:D5:71:4C:66:A8:D7:19:DF:0F:A0:D3:25:D4
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019D007C7587B8337F33DD1E2CFD0F7DB53B
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa
Signing time: Wed 18 Mar 2026 10:27:29 +0000
ROA not before: Wed 18 Mar 2026 10:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 78.108.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:7c:75:87:b8:33:7f:33:dd:1e:2c:fd:0f:7d:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 18 10:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f16619b6ec18acd5714c66a8d719df0fa0d325d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:18:2f:5a:05:9f:92:f5:02:35:23:3c:1a:
7b:59:2f:84:58:c7:83:d0:7a:9b:6b:2a:06:b3:26:
95:4d:83:28:56:6d:cc:e9:4c:37:12:18:ef:8e:f2:
3c:a3:5c:ae:fe:10:8d:66:82:a8:6b:ec:01:25:a8:
dc:ec:bc:2a:d7:65:c5:b3:9d:9b:8d:62:3e:cd:2d:
b9:08:f9:82:e9:68:87:44:47:af:58:d5:a1:db:19:
7c:99:05:6a:22:f2:ec:52:fb:82:42:2d:54:46:b4:
36:d0:b3:8d:b5:3c:2b:b2:10:9e:c6:f6:68:43:86:
d4:e1:82:34:09:85:76:1e:42:1b:ea:10:89:26:18:
b2:06:a2:39:c6:12:99:ac:4c:52:75:b0:3f:1c:3c:
79:e6:4c:ff:7d:86:57:f0:da:27:ee:58:de:6c:04:
56:bc:23:ca:04:21:11:40:a8:e3:51:27:e8:91:c9:
05:20:ad:99:9c:90:05:e6:52:9f:6e:fa:33:99:dd:
7b:63:5b:45:65:a3:24:d4:23:c5:9c:14:be:47:f0:
c6:63:b5:b0:14:68:8f:98:71:f1:52:e9:45:b9:c2:
bf:a2:4d:42:fe:b2:b2:39:94:3c:93:38:bd:60:32:
05:f8:69:0d:6d:a9:2d:44:cb:84:c8:4a:27:09:2d:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:19:B6:EC:18:AC:D5:71:4C:66:A8:D7:19:DF:0F:A0:D3:25:D4
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.62.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d4:89:48:47:24:f9:ee:6e:fd:78:08:8e:8b:5d:ae:ed:97:
4c:b6:e8:6f:b9:07:5b:75:ae:53:fb:74:96:1b:c0:56:fe:a2:
54:5e:7d:ae:f1:b4:5b:3e:a8:2c:e4:e6:93:52:16:65:79:db:
15:56:a2:53:f7:52:e5:45:54:d2:74:a9:43:a0:3e:59:d5:9e:
c0:3a:21:bd:da:0e:08:bd:32:d6:e6:34:37:69:76:4a:a2:70:
93:fd:fe:77:1b:7f:79:e6:a7:b5:34:fe:01:5d:b1:d0:0b:24:
6c:d9:14:a9:87:8f:56:e7:8d:59:4c:bc:90:0d:d5:a8:12:87:
6d:07:de:3d:25:33:65:38:d6:f6:34:ef:c6:ec:fe:78:f8:09:
1f:45:69:99:94:68:16:ed:1d:46:87:fb:fd:1f:bf:f3:67:b0:
3d:b5:42:41:7d:47:62:fa:bb:33:0a:2a:b7:d5:34:22:a5:aa:
29:89:68:2d:bd:16:6a:33:bf:4c:42:18:f9:63:8e:a3:1a:26:
07:3e:87:85:26:37:d3:d2:8c:73:a6:96:64:7d:c5:43:f7:d7:
bf:2a:d4:04:ab:04:ff:4f:43:56:1c:12:06:8d:78:e8:06:23:
a7:87:f9:27:c9:2f:68:9a:7c:0b:a0:c1:bf:fc:52:4d:33:2f:
53:df:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:00:09 2026 by rpki-client