Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/bTw73Cy10J_6LgZYTPru5SEyPF8.roa
File: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (raw, json)
Hash identifier: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=
Subject key identifier: 6D:3C:3B:DC:2C:B5:D0:9F:FA:2E:06:58:4C:FA:EE:E5:21:32:3C:5F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0669FC0DBF41CA1F5311CEB9D61A5690D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/bTw73Cy10J_6LgZYTPru5SEyPF8.roa
Signing time: Thu 03 Sep 2026 09:35:40 +0000
ROA not before: Thu 03 Sep 2026 09:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208220
IP address blocks: 78.159.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:9f:c0:db:f4:1c:a1:f5:31:1c:eb:9d:61:a5:69:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 3 09:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d3c3bdc2cb5d09ffa2e06584cfaeee521323c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:59:31:3c:1f:ec:c1:18:76:63:e8:72:d6:
6e:7b:eb:01:9e:54:66:2f:7a:5e:34:bc:89:7b:cc:
c3:07:af:ed:7d:36:47:2f:51:44:6c:7b:41:fa:ee:
f8:af:bd:96:41:d2:2c:c5:98:6a:4d:44:bb:37:a9:
eb:d5:04:20:e7:0b:e7:f9:d2:ce:1d:1c:c5:09:c8:
1b:bb:af:5a:66:51:f8:a7:13:4f:93:b2:08:ff:ce:
96:67:e7:7d:56:05:08:af:55:81:10:7f:a9:ed:a0:
09:1a:8f:8b:9e:e9:4d:b0:df:d5:97:b5:75:1c:4e:
4a:a4:eb:98:83:4f:f9:3d:2f:e2:67:cf:93:e5:2f:
14:8e:cd:ce:60:11:63:76:db:d9:f1:f9:99:5b:8a:
41:2e:df:81:76:9a:92:75:35:63:c3:91:eb:b4:bf:
98:75:8f:b6:39:71:51:9b:0a:0f:56:00:a7:4d:4b:
c3:9f:b0:8f:4c:f7:5a:2f:0f:97:b0:53:ed:a8:ba:
16:c2:9a:e1:67:e9:2e:45:a3:35:b6:f1:6b:8a:e5:
b3:58:04:b6:a1:b9:13:54:40:02:62:e5:ae:60:90:
73:38:bf:00:67:f2:70:64:2b:76:4b:30:7d:7a:5c:
58:7e:b3:78:e9:e2:56:ae:98:27:96:66:bc:fa:97:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:3B:DC:2C:B5:D0:9F:FA:2E:06:58:4C:FA:EE:E5:21:32:3C:5F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/bTw73Cy10J_6LgZYTPru5SEyPF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:be:39:b8:26:11:d7:79:cf:3d:e8:1b:01:22:c3:53:e6:fd:
e5:b6:a1:01:29:0b:cc:1f:8b:27:77:21:38:5e:8a:e2:ec:47:
8a:8f:20:af:bb:c0:d7:69:24:73:ed:dd:ba:b2:4e:3b:19:aa:
ed:70:b4:3f:8d:b6:f6:f9:1a:1b:da:02:a1:e6:2c:ee:c7:ed:
cf:34:ac:52:da:c4:94:a3:41:13:f5:23:66:7a:77:2e:a8:b7:
62:91:e3:8e:e7:c6:21:ac:9a:e3:51:22:5a:7b:57:45:31:e6:
cb:b9:06:11:50:2b:75:f2:d4:0c:2d:42:c8:75:e6:ca:02:b9:
62:d0:19:cf:39:a7:6a:39:73:d6:f9:e9:8f:6a:02:f2:dd:8e:
04:fa:48:6f:df:12:60:6d:2a:b9:b0:25:40:34:e7:ed:0c:ed:
b8:a8:60:63:6a:a9:31:6f:c1:d9:e6:23:fd:6a:18:5f:8c:cb:
76:73:1e:a7:f2:1b:c7:f4:9f:72:1a:ca:89:8a:ab:08:0d:15:
6f:0a:47:a3:e9:fc:81:2a:f8:30:13:c8:63:31:e0:02:1b:19:
09:ff:dc:f8:21:2f:a6:48:ea:5d:67:7d:1f:1e:4d:0a:56:35:
67:49:7f:6c:2e:c7:8c:7c:25:cd:f2:8a:af:a1:31:2d:90:48:
63:d0:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:58:00 2026 by rpki-client