Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/695CEvCWtd68HcEQ1to_g8bmma8.roa
File: 695CEvCWtd68HcEQ1to_g8bmma8.roa (raw, json)
Hash identifier: R7zsyfBzCTHymA5dn78KZaAHJABwh3m1BT2rT0cZOio=
Subject key identifier: EB:DE:42:12:F0:96:B5:DE:BC:1D:C1:10:D6:DA:3F:83:C6:E6:99:AF
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DA76E0CE3663EE212DA00760BACF93C65
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/695CEvCWtd68HcEQ1to_g8bmma8.roa
Signing time: Sun 19 Apr 2026 20:28:20 +0000
ROA not before: Sun 19 Apr 2026 20:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:6e:0c:e3:66:3e:e2:12:da:00:76:0b:ac:f9:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 19 20:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebde4212f096b5debc1dc110d6da3f83c6e699af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:f6:5c:c4:c8:d5:20:c3:ac:47:30:c1:4b:
c5:23:7f:d1:f3:5a:43:4a:eb:0e:30:3a:6b:5b:08:
2b:d9:97:0d:05:40:94:96:58:05:69:dd:e6:48:f9:
90:c7:cd:23:d4:8c:27:e5:23:a4:ab:20:af:73:8c:
3d:8d:71:c8:46:89:e8:52:1a:3a:3c:f8:9c:c6:cc:
18:62:62:7b:44:ee:56:31:31:2e:4d:2b:02:bd:30:
f4:69:37:9c:46:b4:da:b2:73:dc:7a:e2:7f:5f:46:
93:b9:38:d5:50:72:69:4c:1f:cc:80:23:44:b1:92:
a3:b5:b2:4e:d8:03:87:fc:7b:9a:2c:6c:60:73:2b:
a2:2d:83:dc:2a:54:8a:a4:d2:3d:06:80:6e:60:4e:
5e:bc:bb:30:ab:c4:5b:06:b5:fb:50:e6:bd:38:56:
1e:e6:a0:9d:1d:d2:01:79:63:bd:7c:90:83:09:c0:
06:82:f9:30:31:81:56:a0:a8:7a:1c:72:c0:ef:c8:
29:e6:aa:e4:e1:07:d6:44:82:86:93:14:7a:a2:29:
69:a5:f2:ca:6f:66:0f:20:39:76:55:7a:2d:9a:f7:
72:a0:22:c7:82:12:d5:0f:78:8a:24:7b:9d:db:8c:
1d:8e:78:72:fc:29:a4:01:05:11:af:75:2e:08:eb:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:42:12:F0:96:B5:DE:BC:1D:C1:10:D6:DA:3F:83:C6:E6:99:AF
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/695CEvCWtd68HcEQ1to_g8bmma8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
12:be:c9:b4:8e:bd:5f:32:15:c8:e6:49:31:23:ca:38:f0:80:
fc:11:e9:0c:2e:ee:7d:d5:5e:bb:42:10:fa:01:6c:2e:c7:29:
ee:2a:8c:2b:ed:03:63:b0:55:e5:00:1b:a9:35:5b:a9:16:88:
3d:e4:02:38:15:d1:e7:88:a2:77:bf:80:c5:be:6c:fc:38:e0:
89:4d:87:ac:3c:d6:2c:ed:b1:bc:6d:6a:9a:a5:5a:e4:d0:4a:
db:46:1d:64:7b:5a:dd:e4:da:12:20:04:87:d2:9a:d4:13:a5:
74:2f:7e:22:38:e0:9f:fd:23:69:e3:57:03:fc:9e:f8:ac:f2:
68:fe:e8:13:f0:06:4c:d6:85:99:4d:66:90:cb:ed:be:03:f3:
8d:4e:81:e8:bd:1f:d0:e9:3b:6c:46:4f:17:d3:fa:da:d0:d9:
6f:fb:f2:62:55:49:3f:4a:71:34:12:21:04:b1:eb:b9:53:3d:
5c:6b:5e:8f:a1:ac:5a:e6:dc:9c:87:d9:36:09:fd:1c:bd:8a:
86:87:9b:cd:6c:84:33:a0:eb:6f:b4:4d:5b:4d:ed:a0:b4:df:
40:8f:8f:8f:7c:68:c1:41:ee:62:6b:ea:44:4f:6e:f8:53:40:
f8:e9:89:41:e9:55:b0:d9:7b:b2:8e:02:f8:5a:ed:32:33:7f:
b1:43:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:53 2026 by rpki-client