Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OI4wKe-9aRe6CWFhao_aFpbU03E.roa
File: OI4wKe-9aRe6CWFhao_aFpbU03E.roa (raw, json)
Hash identifier: eeRsJcA6/jYo7vhbgbBKQ66dejuP8QXb68P2WKphg5w=
Subject key identifier: 38:8E:30:29:EF:BD:69:17:BA:09:61:61:6A:8F:DA:16:96:D4:D3:71
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019CB8CF6CEE4C03B0CF7F3DA6AA6209CC66
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OI4wKe-9aRe6CWFhao_aFpbU03E.roa
Signing time: Wed 04 Mar 2026 12:25:27 +0000
ROA not before: Wed 04 Mar 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200631
IP address blocks: 78.128.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:cf:6c:ee:4c:03:b0:cf:7f:3d:a6:aa:62:09:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Mar 4 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=388e3029efbd6917ba0961616a8fda1696d4d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7f:b6:f9:53:d7:04:1e:b8:4e:7c:bd:74:b0:
18:8a:b9:62:7a:73:56:3a:9a:45:8f:b2:cf:9c:f0:
9a:99:ea:78:7a:ad:80:8b:45:8b:bf:4c:61:01:95:
09:43:cb:e2:46:a9:7e:1e:41:5e:58:75:4f:44:61:
f2:a8:77:ef:13:f4:bf:cc:a3:57:47:13:6e:21:19:
38:05:e7:76:dc:14:36:03:3e:79:bf:24:da:79:55:
f2:c8:55:eb:a5:74:74:0c:e9:c4:1f:9f:73:4c:d8:
b1:55:c4:e3:91:1c:e1:ea:24:36:08:76:46:b0:4a:
21:f6:d0:32:c3:c9:4f:8b:fe:a2:40:98:6a:ed:c8:
cc:be:a1:d4:48:89:cf:38:e6:dc:2f:a8:62:9b:8f:
3e:9b:7e:20:10:7d:92:33:43:eb:84:17:ee:35:ff:
84:b4:60:6a:80:18:d1:b1:8b:31:a0:c7:05:66:23:
2c:e3:b1:e4:9c:4a:ba:8c:00:b5:41:bf:0d:44:61:
e5:ab:76:51:e3:72:11:f6:40:92:1c:90:23:c6:8e:
0c:b0:a4:75:fa:7d:8d:b3:f2:e4:5c:c9:c5:6f:ca:
a9:b7:70:f8:2d:84:26:d7:d2:9c:b3:12:61:fe:1f:
8b:e7:ba:8d:95:a4:33:8b:dd:9a:a9:56:ca:9e:bc:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:30:29:EF:BD:69:17:BA:09:61:61:6A:8F:DA:16:96:D4:D3:71
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OI4wKe-9aRe6CWFhao_aFpbU03E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6f:3c:d6:2b:60:70:72:2f:54:d0:bc:3c:3e:9d:79:4b:55:
ee:b0:83:da:10:ab:68:69:2e:73:28:60:af:5b:62:a5:68:0b:
14:41:2c:a5:cf:89:57:ce:15:d8:cb:6e:99:3c:58:5f:7d:83:
89:b5:78:92:3e:dd:2d:ed:fb:04:fc:1d:26:77:b0:90:9b:10:
97:1d:65:52:a2:7c:7e:f6:73:bd:0f:7d:29:8a:a2:4f:46:ee:
f5:ac:28:4a:af:00:3f:07:ef:8f:7e:f2:4d:85:1f:76:d5:08:
72:5c:9b:b1:af:57:c7:c4:0e:2d:f5:e6:e8:e1:49:17:04:7d:
d5:0a:51:de:5a:c8:16:6e:00:70:76:98:01:bc:88:23:4b:a4:
d4:38:25:dc:9c:50:62:1c:76:bb:d2:39:20:6e:c8:f2:8c:8c:
4c:d8:c8:85:09:e3:bd:5b:f6:e0:89:15:2d:da:31:3c:af:3c:
94:fe:0e:81:80:7b:b9:cd:2a:df:b9:05:a4:fa:db:87:9f:a5:
ff:64:1e:ef:22:b1:3b:bb:5b:1e:1f:7a:b9:15:82:67:9c:18:
de:8a:7c:34:45:ba:88:8a:f7:59:96:9c:3c:f2:c7:af:2e:dc:
6d:38:f8:ce:9a:3d:ee:5e:6d:ba:fd:12:bd:3c:bf:d8:9e:01:
0c:99:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:42:50 2026 by rpki-client