Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/64WxAotveVdVsSoBvUEbAURPats.roa
File: 64WxAotveVdVsSoBvUEbAURPats.roa (raw, json)
Hash identifier: dAodtjBvkYzTylhjJxuoonF/W4XS2j7I506eCUfg1vk=
Subject key identifier: EB:85:B1:02:8B:6F:79:57:55:B1:2A:01:BD:41:1B:01:44:4F:6A:DB
Certificate issuer: /CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Certificate serial: 019F2368F18EB55DB6BDB87F0507619280E2
Authority key identifier: 00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/64WxAotveVdVsSoBvUEbAURPats.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29286
IP address blocks: 178.132.56.0/23 maxlen: 24
178.132.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:8e:b5:5d:b6:bd:b8:7f:05:07:61:92:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb85b1028b6f795755b12a01bd411b01444f6adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:cf:d0:41:d3:2a:b2:8a:c3:a3:13:11:4c:
8c:a7:3d:90:2e:17:b6:15:b2:2e:f1:41:77:c7:90:
57:04:c3:9d:c5:44:43:0c:77:8b:08:a5:8c:26:2d:
81:e3:b5:3f:45:2e:9e:90:df:e6:8f:80:ee:ad:62:
76:eb:52:da:c5:b0:cb:c1:82:2f:f9:d4:1a:1d:27:
aa:e6:34:9b:ee:a1:4c:f3:8c:ed:83:f5:22:7d:fb:
7f:d7:ea:c2:e5:63:1d:18:e3:01:ab:2f:b6:cd:8f:
b5:ee:92:e8:35:22:20:47:4b:38:b5:e9:41:b8:1c:
10:e5:d6:ca:6f:4d:4c:ed:0c:08:eb:17:9d:2a:e3:
66:26:14:eb:94:08:9f:c3:b3:5f:4b:8b:4e:0b:bc:
82:3a:d4:88:eb:ad:9f:43:b1:83:b7:1e:ee:12:6f:
b8:30:da:99:7a:cb:76:7e:5b:87:e8:1c:0a:00:f5:
db:70:f1:3e:13:be:85:f9:f9:f4:a8:61:2a:56:69:
9b:f0:73:b6:ad:7d:4c:71:5c:6c:13:88:f4:06:ca:
98:af:f5:1c:ce:0a:6e:fb:40:2a:30:8f:75:11:44:
1c:46:9e:16:a4:37:a0:58:dd:96:0e:4c:50:9c:0f:
3d:f9:ee:f8:b8:96:37:1c:e1:06:12:98:9e:47:ac:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:B1:02:8B:6F:79:57:55:B1:2A:01:BD:41:1B:01:44:4F:6A:DB
X509v3 Authority Key Identifier:
keyid:00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/64WxAotveVdVsSoBvUEbAURPats.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.56.0-178.132.58.255
Signature Algorithm: sha256WithRSAEncryption
a9:da:57:8f:85:29:63:d7:0f:9d:90:9d:b2:ac:e4:f2:b9:2f:
fd:6c:4f:0d:a6:e1:fe:71:7c:1e:cb:6f:ce:8b:54:96:35:fb:
06:c0:7b:eb:b1:48:56:d1:42:0d:5c:44:df:21:1e:1e:52:15:
a9:cd:ff:d2:ba:81:7d:8b:71:68:bd:07:66:83:ca:2c:41:b2:
d2:08:54:14:df:03:0a:d9:ff:e6:23:b4:76:0d:5c:2d:dd:8b:
73:d8:6a:c4:13:b3:52:d8:dc:d9:06:c0:61:bf:37:cd:df:51:
61:fa:dc:35:86:2d:37:66:85:c8:12:86:e1:02:27:15:a5:c3:
6f:a2:75:78:0f:64:ac:20:76:0a:8e:c8:10:ba:c7:98:17:78:
ca:3f:65:dc:9d:e8:f6:b7:96:7c:3d:b6:e2:2c:1d:c8:91:ae:
89:c6:5e:d5:15:50:88:25:31:7d:4a:c8:85:3d:23:c6:e1:7c:
a2:29:12:9f:0c:9a:81:f7:c0:fb:54:63:98:64:91:f5:65:0c:
9b:c9:7b:b3:5a:0d:04:ad:6a:ba:55:81:3d:6e:8a:ab:75:b6:
08:be:a5:72:27:1c:8f:e0:7d:48:cb:d9:91:36:9a:90:15:7d:
a4:3a:21:67:86:be:72:96:e2:bd:4a:4c:34:c1:97:4e:93:8a:
32:6c:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:08 2026 by rpki-client