Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa
File: pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa (raw, json)
Hash identifier: 6ImAyjB++uGSJlAdPGguoq0Hb1TaQ164wmSn84u2CX8=
Subject key identifier: A7:3F:6C:6C:D4:27:46:C0:F7:94:39:92:FF:7B:0D:41:21:94:36:53
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019CF7A71B0C41A8A0A5A148C5DEEC0E31AF
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa
Signing time: Mon 16 Mar 2026 17:17:29 +0000
ROA not before: Mon 16 Mar 2026 17:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 78.108.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:a7:1b:0c:41:a8:a0:a5:a1:48:c5:de:ec:0e:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 16 17:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73f6c6cd42746c0f7943992ff7b0d4121943653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:e1:b4:ba:5f:d0:f0:dc:07:31:a1:4a:f2:
e7:c8:be:4a:4a:cb:a2:59:28:3a:53:5b:bd:94:69:
b4:68:06:1e:e6:85:75:20:9f:7a:54:8c:23:3a:d7:
50:37:e5:9a:4b:a6:e1:48:51:73:7c:28:f0:79:03:
6a:b5:2b:e5:43:63:68:53:4a:37:f7:63:1f:d1:79:
3e:ba:f6:54:8a:ae:7e:84:c2:f4:8d:b9:72:53:69:
bb:49:14:4b:21:d9:ed:9b:61:2d:ae:3e:28:d0:f7:
c0:0e:4d:ae:2e:f6:bc:9f:3a:99:33:37:e1:6d:6d:
4a:9d:4f:cf:84:7c:66:87:95:19:0f:06:72:6f:55:
0a:66:40:a5:7f:99:c2:1b:1c:40:ae:3f:c7:e5:30:
74:d6:8f:5f:02:ca:f7:ff:d5:75:5e:8a:2f:c3:16:
2f:17:8b:ca:64:58:ec:85:67:89:c6:8d:fc:c1:be:
c2:a3:36:7c:0c:63:f1:2e:2d:78:43:ab:92:12:f0:
c5:84:c0:60:7a:01:6d:52:87:22:db:d1:c4:d1:a7:
32:e7:e9:74:6e:9c:e2:af:21:70:5b:00:32:5a:11:
3b:37:fa:84:84:1d:ca:c5:c5:a7:3b:2d:8c:5d:bf:
e6:60:e2:c7:e6:5b:63:58:41:1e:8d:3e:e2:76:de:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:6C:6C:D4:27:46:C0:F7:94:39:92:FF:7B:0D:41:21:94:36:53
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a0:36:83:93:b4:49:e0:34:5c:de:59:25:74:3c:f1:c4:66:
b6:ac:6f:6f:6e:ee:2b:b5:cb:47:e4:57:b9:b3:74:df:6f:dc:
7c:6a:31:38:ff:a4:23:83:1d:4c:72:a4:68:92:79:dd:78:d2:
8d:bd:7a:57:dc:cb:97:6e:fb:10:a8:b7:bc:ff:ce:fe:f2:b9:
e2:ab:48:03:d3:32:90:b6:52:de:96:70:4c:73:ea:a7:26:cc:
82:6f:d3:16:6d:89:92:a7:bb:91:0e:55:54:b5:30:96:a1:6d:
d8:04:36:a1:c0:0b:7c:d8:26:09:6a:cc:9d:65:21:c9:9e:42:
ae:74:b9:81:0d:4c:8e:cc:6d:ca:43:a4:08:ac:d0:6e:8e:0e:
a5:80:64:7d:4c:65:11:5f:4c:e7:f2:b0:72:28:21:35:dd:d8:
9f:88:1a:ef:ca:b5:12:7a:2a:65:c3:62:71:d9:d0:b8:56:77:
53:b7:95:3a:84:30:fa:bf:ef:f4:85:48:f7:9c:3d:83:e8:d1:
10:4d:6d:33:ca:4b:ec:95:35:68:58:2d:04:79:b4:f7:80:e2:
94:b6:0a:cb:af:e6:34:68:ec:5f:6a:3a:8e:67:0d:ea:3f:73:
7d:86:ee:91:9c:c6:97:0a:90:eb:c9:26:51:11:70:2c:26:15:
e8:4d:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:59:57 2026 by rpki-client