Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/5ZCQHsgMK-jwvY3N_5znCxjD7ro.roa
File: 5ZCQHsgMK-jwvY3N_5znCxjD7ro.roa (raw, json)
Hash identifier: zOm6SpbKXPghZKa2K4Fg7RefMg5gXoX3D53Fi/1oNFA=
Subject key identifier: E5:90:90:1E:C8:0C:2B:E8:F0:BD:8D:CD:FF:9C:E7:0B:18:C3:EE:BA
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019F8E003ECB167F19434E5403A27708C14D
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/5ZCQHsgMK-jwvY3N_5znCxjD7ro.roa
Signing time: Thu 23 Jul 2026 08:03:28 +0000
ROA not before: Thu 23 Jul 2026 08:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147229
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:00:3e:cb:16:7f:19:43:4e:54:03:a2:77:08:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jul 23 08:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e590901ec80c2be8f0bd8dcdff9ce70b18c3eeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:77:8f:8f:d4:ca:14:19:66:4a:64:7e:c9:
8f:ad:52:34:42:90:87:17:9f:60:32:50:97:60:62:
8c:f8:30:7d:26:38:90:9f:4f:a7:93:63:ca:8c:57:
ba:ca:d3:96:d8:27:e0:ac:03:fc:4e:7a:93:16:7d:
d1:2c:91:e8:8a:43:23:cb:f7:5e:34:07:41:fd:7c:
7c:b1:9b:ce:19:1d:fe:19:87:b4:2f:0e:2a:84:4a:
7f:2f:41:ca:a3:fb:1f:74:b6:76:7d:5e:52:73:be:
fd:06:3e:d7:00:e5:dd:08:34:39:f9:3a:44:d5:c2:
c9:c3:a4:23:13:8c:73:ec:77:e7:9c:19:0f:22:8a:
39:48:6a:b3:f5:85:ae:20:2a:b4:7f:29:54:13:38:
ac:7d:4b:87:91:59:b2:e2:af:bd:55:a0:d5:47:15:
22:87:40:49:c6:75:c0:6d:fe:b4:f9:da:3c:6d:18:
cb:5f:6f:c0:c1:c5:80:50:72:31:bc:7c:f5:b9:55:
db:bc:ef:ef:34:10:c3:a9:00:b8:03:33:87:74:4e:
15:3a:40:02:f2:c5:4e:d9:d9:3d:8e:eb:90:b1:e8:
3d:60:01:57:ed:4c:a8:d8:ba:3d:68:92:dc:b6:1d:
42:04:41:4b:70:71:6b:87:45:38:99:84:6f:cf:8c:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:90:1E:C8:0C:2B:E8:F0:BD:8D:CD:FF:9C:E7:0B:18:C3:EE:BA
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/5ZCQHsgMK-jwvY3N_5znCxjD7ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:20:2d:b5:44:51:ef:7f:03:75:a6:c0:14:01:0b:cc:05:ea:
3e:97:a8:7f:fa:95:9d:92:ec:ac:09:9e:77:41:51:2c:7d:89:
5c:87:78:be:9e:59:7a:5f:f6:c1:d4:85:d5:ff:69:93:31:e7:
79:d3:3e:2b:f3:fb:35:b7:40:5a:66:41:ac:7d:bf:16:5e:cc:
a2:84:94:2a:b3:92:b7:c6:0c:52:4d:75:34:cc:7f:3b:d7:7e:
db:5d:2d:73:c7:1b:e5:96:68:6e:9b:7f:f3:72:fc:67:b7:63:
a0:dd:66:a7:07:27:a3:4e:fd:05:71:83:30:94:32:ad:93:df:
32:53:fc:93:0e:2c:a0:6a:a9:73:26:e1:67:80:5e:9e:7d:ba:
31:7c:d3:98:90:df:a8:57:eb:2d:52:6f:1e:16:83:99:e6:f3:
3d:ed:06:60:2d:7a:51:2a:0c:bd:2d:04:1d:bb:22:0d:75:65:
b6:01:aa:53:ef:88:eb:80:23:9b:d3:29:f0:c9:df:d2:d6:9d:
04:08:67:1b:f1:3f:fe:d7:16:98:d5:46:6e:e0:af:b5:fe:ee:
f5:b5:98:de:29:4e:78:e8:f1:4f:7f:a4:64:9e:0a:b2:6a:fb:
b7:aa:2f:3a:a4:fe:13:31:b4:e2:eb:30:74:44:47:a7:4c:f4:
36:24:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:41 2026 by rpki-client