Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/4_6jU2h65naygP3NnyjMqJJnZx0.roa
File: 4_6jU2h65naygP3NnyjMqJJnZx0.roa (raw, json)
Hash identifier: s82jep9t/zYfm07E1BciJjoxkGYTNgdmOJWV+bXV2Qs=
Subject key identifier: E3:FE:A3:53:68:7A:E6:76:B2:80:FD:CD:9F:28:CC:A8:92:67:67:1D
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DCFA36CA0B5BBF171DCAB55B7CF8F42BB
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/4_6jU2h65naygP3NnyjMqJJnZx0.roa
Signing time: Mon 27 Apr 2026 15:51:26 +0000
ROA not before: Mon 27 Apr 2026 15:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.214.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:a3:6c:a0:b5:bb:f1:71:dc:ab:55:b7:cf:8f:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 27 15:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3fea353687ae676b280fdcd9f28cca89267671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:6c:86:8d:52:88:45:d0:c1:95:c0:04:0a:
cf:4d:7b:72:fd:83:03:4f:03:e6:85:54:ef:d4:55:
64:79:c5:43:a5:6e:d3:eb:59:af:c9:f5:fe:1f:5c:
43:16:8b:fb:f7:bc:b3:17:7f:81:09:cd:3e:43:1a:
03:c7:8b:eb:34:f3:c9:ea:a1:c8:b4:37:24:5b:bb:
c8:92:cb:59:ea:bf:53:a0:3c:d4:7b:7a:4d:13:69:
30:8d:b2:39:f4:f6:d2:dc:4f:85:11:1a:04:20:d8:
7a:f2:59:67:b8:45:9b:6f:a5:3e:6f:f3:2c:eb:2e:
fb:bc:5a:d8:8b:6b:59:9c:d5:ce:34:05:8a:1b:ca:
b0:b1:93:ae:4e:9f:e7:9e:3a:d7:92:71:d8:b3:8f:
9b:66:45:79:b7:53:e0:fb:5d:86:bd:6d:1b:e0:4e:
72:97:d1:5d:88:7c:b7:1c:fe:46:44:a2:01:41:e6:
40:b8:3f:45:cc:a3:ea:f9:21:c8:c0:c7:24:b1:9d:
09:9f:ce:96:06:7d:3e:c5:01:65:82:a9:66:34:a9:
c3:e3:57:72:ed:b2:be:5a:c1:2b:0c:75:8a:7b:02:
59:8f:4c:47:cb:c8:fb:23:7e:4b:bb:76:51:da:6c:
46:ee:e0:c2:e8:66:18:73:a6:1d:35:fc:f7:4b:52:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:A3:53:68:7A:E6:76:B2:80:FD:CD:9F:28:CC:A8:92:67:67:1D
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/4_6jU2h65naygP3NnyjMqJJnZx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.218.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d4:16:f6:08:dd:6d:85:29:22:3a:20:3c:2d:4c:5c:d2:cc:
e8:85:80:f2:60:b7:be:d2:dc:94:f3:b3:8e:b3:66:53:2a:a9:
f8:b0:8d:56:71:39:98:35:f0:95:0e:85:8f:88:bb:d6:02:26:
4a:80:27:e8:d3:1d:66:a7:50:14:3a:72:7f:6e:ff:ad:bb:23:
3e:8e:6a:2c:ae:28:86:22:a2:34:0b:bc:09:22:3d:e4:84:0e:
ff:d4:c7:4a:b1:00:4e:04:3f:64:6b:f9:e8:79:6a:6a:45:b9:
01:3b:4a:54:a9:c6:70:6c:c4:21:01:7e:88:d1:8b:6a:a7:ac:
bb:bc:74:e5:d2:c8:e5:99:5c:9c:01:41:b0:e0:b7:6e:fe:7e:
76:bb:81:74:6f:70:7c:44:df:e7:4e:e6:f5:b2:65:59:b1:b9:
65:84:c9:69:d9:b8:cc:4e:65:f5:e5:2e:c7:3e:f1:05:44:83:
71:2c:bb:27:af:34:af:a6:d3:2a:3f:e0:ff:5c:87:57:df:71:
38:19:30:09:04:10:92:e9:9d:c6:a5:9c:9b:37:87:e6:e3:a9:
c0:b3:d9:7f:14:b3:04:06:3a:64:ea:b2:c5:99:ef:cc:79:25:
be:59:d9:ff:40:fd:5a:28:0d:99:df:16:ac:4d:68:95:bc:c8:
c0:9f:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:24 2026 by rpki-client