Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/f124qcSuYZ4xS49cZGn7_xWTp1k.roa
File: f124qcSuYZ4xS49cZGn7_xWTp1k.roa (raw, json)
Hash identifier: M4T1HgUyQdylFyjvdQ1BAjEjDi2iFcVNoFZ/smBbMec=
Subject key identifier: 7F:5D:B8:A9:C4:AE:61:9E:31:4B:8F:5C:64:69:FB:FF:15:93:A7:59
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 01A1344FAFDBAC7B2409C0A19A5AD251E77D
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/f124qcSuYZ4xS49cZGn7_xWTp1k.roa
Signing time: Tue 13 Oct 2026 08:09:59 +0000
ROA not before: Tue 13 Oct 2026 08:09:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215081
IP address blocks: 201.78.130.0/24 maxlen: 24
201.78.144.0/24 maxlen: 24
201.78.145.0/24 maxlen: 24
201.78.146.0/24 maxlen: 24
201.78.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:4f:af:db:ac:7b:24:09:c0:a1:9a:5a:d2:51:e7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: Oct 13 08:09:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f5db8a9c4ae619e314b8f5c6469fbff1593a759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:67:4e:fc:6f:a1:64:89:1b:49:20:9e:3d:
2c:70:9e:65:53:e1:c9:8e:7c:89:98:ba:5f:c8:69:
ca:28:75:66:48:7e:3a:60:77:97:f3:9f:63:de:8e:
92:43:be:df:46:e0:9b:14:a4:55:a4:3a:f0:26:62:
36:90:20:19:d5:26:e5:68:e3:ed:0b:cc:c4:8e:b4:
0f:f9:58:fb:00:b2:d5:d2:f5:c6:13:c1:01:b7:5a:
d4:22:de:8e:f3:14:66:66:a7:d8:76:c6:e9:ec:fd:
11:b0:2c:71:f3:86:9d:2b:04:37:b3:8d:49:68:7b:
cf:c8:f4:44:e9:ff:16:4e:5d:c6:da:07:02:2c:dd:
17:cc:ab:2f:90:b3:28:74:35:35:6c:90:27:0f:91:
ea:53:cb:64:1d:97:28:d5:3c:9b:cb:ce:59:50:d9:
ed:98:f2:3f:38:17:eb:fb:15:c8:9b:c0:a8:2d:7a:
26:e1:82:a1:31:52:cf:e5:41:55:35:8d:f4:f6:48:
39:4a:fc:12:37:64:2a:f9:14:dd:f2:06:a4:b1:c4:
bc:72:c8:ff:fe:1e:51:bf:ba:59:85:a9:a1:fb:29:
17:b6:82:5d:fb:10:04:09:db:fc:d5:fc:6d:61:a3:
f9:a8:e4:bf:fe:61:44:46:19:73:20:60:26:d5:55:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:B8:A9:C4:AE:61:9E:31:4B:8F:5C:64:69:FB:FF:15:93:A7:59
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/f124qcSuYZ4xS49cZGn7_xWTp1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.130.0/24
201.78.144.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d0:36:b1:d4:d8:1c:bf:ec:40:b8:4d:51:90:eb:fb:59:63:
48:7a:8b:53:b7:0a:08:62:88:12:a5:c8:99:ed:f1:38:fb:b9:
f0:4a:da:3b:dd:39:2f:98:63:ca:02:4c:17:88:1a:c5:5c:08:
36:06:52:0c:21:0e:3d:99:02:69:d5:4d:4f:d7:6b:f9:10:3c:
b6:04:7e:91:91:c4:7e:61:dc:31:d2:90:d1:56:63:0e:41:fb:
9d:96:a7:59:17:d1:8c:ae:7b:67:73:bb:c6:5f:8d:0d:19:63:
62:7a:90:0e:1f:e3:0a:67:ea:94:82:5c:0a:f6:8e:f9:3e:6e:
ab:ec:a9:b9:66:c8:56:bc:a5:a9:ae:66:cd:e4:18:ed:03:41:
25:58:b4:89:df:cf:76:7c:93:a5:5d:2e:3b:ba:e5:95:da:70:
c3:95:67:3b:f8:38:25:13:c4:8f:f6:3c:a5:27:54:f7:55:4b:
35:f5:af:e3:5d:e9:45:a9:1d:3c:21:d6:9a:1b:16:68:ba:2d:
45:be:d8:86:67:98:f9:f1:7f:b0:46:bc:f6:11:06:18:2f:50:
b2:0a:ee:2b:ab:bf:56:ae:00:12:c9:01:d9:8a:24:48:d7:42:
25:62:1f:76:67:6c:97:f6:51:c0:12:d0:52:d6:0b:e5:66:5d:
c4:97:24:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE0T6/brHskCcChmlrSUed9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDgzODg2NGQ2ODA1MTYyNjkzYmRmMjQ5ZjNiOGFjMzFm
NjgwYmQwHhcNMjYxMDEzMDgwOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVkYjhhOWM0YWU2MTllMzE0YjhmNWM2NDY5ZmJmZjE1OTNhNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+FnTvxvoWSJG0kgnj0scJ5lU+HJ
jnyJmLpfyGnKKHVmSH46YHeX859j3o6SQ77fRuCbFKRVpDrwJmI2kCAZ1SblaOPt
C8zEjrQP+Vj7ALLV0vXGE8EBt1rUIt6O8xRmZqfYdsbp7P0RsCxx84adKwQ3s41J
aHvPyPRE6f8WTl3G2gcCLN0XzKsvkLModDU1bJAnD5HqU8tkHZco1Tyby85ZUNnt
mPI/OBfr+xXIm8CoLXom4YKhMVLP5UFVNY309kg5SvwSN2Qq+RTd8gakscS8csj/
/h5Rv7pZhamh+ykXtoJd+xAECdv81fxtYaP5qOS//mFERhlzIGAm1VXnDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH9duKnErmGeMUuPXGRp+/8Vk6dZMB8GA1UdIwQY
MBaAFHlIOIZNaAUWJpO98knzuKwx9oC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYt
YTBlNzBlNTA1NmVmLzEvZjEyNHFjU3VZWjR4UzQ5Y1pHbjdfeFdUcDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYtYTBlNzBlNTA1NmVm
LzEvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyU6CAwQC
yU6QMA0GCSqGSIb3DQEBCwUAA4IBAQAF0Dax1Ngcv+xAuE1RkOv7WWNIeotTtwoI
YogSpciZ7fE4+7nwSto73TkvmGPKAkwXiBrFXAg2BlIMIQ49mQJp1U1P12v5EDy2
BH6RkcR+Ydwx0pDRVmMOQfudlqdZF9GMrntnc7vGX40NGWNiepAOH+MKZ+qUglwK
9o75Pm6r7Km5ZshWvKWprmbN5BjtA0ElWLSJ3892fJOlXS47uuWV2nDDlWc7+Dgl
E8SP9jylJ1T3VUs19a/jXelFqR08IdaaGxZoui1FvtiGZ5j58X+wRrz2EQYYL1Cy
Cu4rq79WrgASyQHZiiRI10IlYh92Z2yX9lHAEtBS1gvlZl3ElyRV
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:28 2026 by rpki-client