Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa
File: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (raw, json)
Hash identifier: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=
Subject key identifier: F4:25:26:4F:69:42:FB:C9:20:9C:7D:4F:93:5C:F9:82:08:FD:C9:8B
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019F1CCA8BA3B2D04129939759C3F36B7262
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa
Signing time: Wed 01 Jul 2026 08:27:43 +0000
ROA not before: Wed 01 Jul 2026 08:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 78.108.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:ca:8b:a3:b2:d0:41:29:93:97:59:c3:f3:6b:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jul 1 08:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f425264f6942fbc9209c7d4f935cf98208fdc98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:20:4e:8f:5c:27:47:da:71:5c:af:70:93:
fc:d1:dd:9a:92:c8:39:94:3e:c6:ba:18:4a:fb:0d:
f0:53:21:cc:45:09:d8:0f:91:63:bd:33:e1:20:74:
8f:2f:15:0f:90:55:15:31:21:83:f1:1a:e6:05:58:
d2:1a:78:2f:f7:63:20:b9:bc:42:dc:ae:4f:8d:17:
b8:b1:1a:43:c9:cf:12:1f:5c:d0:c0:dd:72:55:50:
2a:7e:48:fb:19:f1:bc:da:c8:17:64:e8:01:eb:86:
72:f0:a4:c6:02:08:00:4f:2d:33:b7:95:f5:80:cb:
9d:03:da:9a:17:54:06:f9:3c:fd:03:00:82:41:24:
e2:dc:0e:ac:7a:d6:93:1d:39:07:05:1a:26:2c:e3:
90:29:ed:96:4b:95:7a:0f:f8:d6:fa:84:6a:e1:08:
7a:fa:33:13:eb:70:5e:e5:fe:81:07:77:31:a8:53:
14:9c:4d:84:7a:30:c5:71:a5:f0:e7:b4:2c:2f:64:
02:2d:66:6c:3a:49:0e:63:17:20:2a:35:52:ce:ae:
0f:68:cd:51:75:1c:27:cc:07:8b:2e:11:10:a5:a5:
5d:01:bd:9c:2b:02:83:c4:7b:a9:df:5b:2b:20:9b:
67:f5:8d:1d:18:f2:1b:c1:88:4d:40:eb:22:39:ea:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:26:4F:69:42:FB:C9:20:9C:7D:4F:93:5C:F9:82:08:FD:C9:8B
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:37:9b:cc:f0:e5:9f:df:63:dd:20:9e:d4:9a:77:41:0c:54:
e1:4d:0a:44:77:7e:03:e6:42:52:00:f1:cd:3f:31:e7:51:9a:
4f:5e:7a:c2:96:1a:98:88:7d:8f:78:25:c5:b5:68:e9:a4:50:
fa:0b:8a:19:15:7d:93:b9:a5:18:47:95:5a:50:a0:0c:c8:3d:
15:1f:cc:8f:a4:39:21:07:75:06:76:ee:88:b4:2c:1b:24:f3:
b4:16:66:dc:d7:92:a1:d2:a1:72:5f:6a:b8:a0:be:f6:a9:70:
b6:f6:39:8b:42:6c:15:02:92:ce:61:f7:59:d3:92:b4:be:0e:
01:9b:81:e0:4a:70:e9:40:d9:c5:bb:93:86:a8:f8:62:9e:d5:
b1:fc:98:3a:9b:ad:1d:36:af:7d:1d:94:78:d4:25:27:58:13:
9d:39:1e:b2:c0:46:8c:b3:09:22:a6:24:d8:12:a3:15:e1:57:
11:14:e8:4b:89:19:12:5b:bf:06:99:70:7a:b4:c6:f8:cc:98:
32:cd:05:60:8a:a4:dd:ab:25:96:43:6b:69:75:10:1e:81:3b:
ad:17:65:98:9f:c3:98:af:9b:0b:63:fd:51:b3:71:d4:b4:bb:
eb:58:d1:88:ac:e6:b3:fb:51:6f:c8:3a:dd:e3:b5:05:aa:c7:
1c:22:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:45 2026 by rpki-client