Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/K92PqBwvgEkNne5-6mAr80PsJAQ.roa
File: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (raw, json)
Hash identifier: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=
Subject key identifier: 2B:DD:8F:A8:1C:2F:80:49:0D:9D:EE:7E:EA:60:2B:F3:43:EC:24:04
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D07FD3BA8335E8BF0B445016EB69DE718
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/K92PqBwvgEkNne5-6mAr80PsJAQ.roa
Signing time: Thu 19 Mar 2026 21:25:29 +0000
ROA not before: Thu 19 Mar 2026 21:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 178.214.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:fd:3b:a8:33:5e:8b:f0:b4:45:01:6e:b6:9d:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 19 21:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bdd8fa81c2f80490d9dee7eea602bf343ec2404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:33:3c:0d:9d:58:4d:ce:91:de:b4:54:85:
f5:eb:bd:7c:3b:38:dd:95:a5:e9:74:38:3f:25:3d:
63:ca:b6:24:78:bf:7f:f8:b7:bf:c9:30:2c:14:7f:
7c:be:18:85:c5:29:ef:79:fd:05:ae:b4:7e:db:25:
4f:2c:07:53:f8:59:93:35:b0:9a:28:de:52:b2:e5:
66:b0:6b:06:bf:d5:94:65:1a:da:eb:e8:f6:7b:63:
42:52:8b:2b:5b:9f:54:ce:92:9f:87:6d:8a:fa:de:
5c:ee:e8:62:47:f7:7d:ee:9a:3e:35:b6:ad:ba:9f:
55:aa:0e:96:07:38:5f:e0:94:50:74:05:4a:ee:b8:
84:71:6e:d8:cc:49:98:26:24:28:24:b2:ab:40:8d:
9c:6d:78:70:9f:16:00:a3:fe:26:a8:54:ff:89:1a:
3e:d0:4b:f4:3d:4d:46:39:fe:6c:05:00:26:66:1a:
e5:80:57:ed:56:5a:7d:ad:37:10:a7:da:2b:65:4a:
8c:41:f4:67:d2:7f:f0:1a:21:9d:f5:ed:68:2f:cc:
4a:e6:41:14:15:36:d0:d2:83:3a:a2:eb:4b:20:46:
f1:bc:a7:9c:3d:86:02:f0:2d:07:84:f4:e9:e7:ef:
1f:3a:63:54:28:4c:2e:42:88:83:f7:b9:15:4e:d8:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:8F:A8:1C:2F:80:49:0D:9D:EE:7E:EA:60:2B:F3:43:EC:24:04
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/K92PqBwvgEkNne5-6mAr80PsJAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.210.0/24
Signature Algorithm: sha256WithRSAEncryption
11:86:8c:87:ec:ed:58:24:d7:30:81:56:7a:68:97:a4:50:0b:
4c:8e:ed:ff:de:b7:3e:1b:0b:83:5e:c6:69:19:07:44:52:86:
ab:2d:d4:a5:65:fc:07:cf:ca:41:61:56:45:57:b6:a3:57:34:
eb:93:8f:25:4e:7a:a3:07:cd:5f:78:ad:98:dc:7e:15:75:55:
e2:c1:74:87:70:47:36:bb:9b:a7:37:f7:7d:f5:71:f2:75:02:
06:5b:e3:ff:37:38:ed:c9:dd:cf:d9:ed:f3:ef:b6:ac:ba:bd:
8c:43:c1:8a:4d:fd:d6:9b:26:52:75:04:ab:34:b8:ec:3e:a0:
f5:9e:29:0a:80:ae:07:fc:6e:72:99:cc:40:35:37:07:9a:9d:
14:8f:3f:33:57:f9:0e:fc:6d:73:59:61:f1:4a:d9:af:e2:aa:
48:fc:d9:b3:a0:fd:f1:e5:7b:9a:da:7b:fb:66:1d:98:9b:e5:
62:a1:0d:12:88:9e:1c:98:9b:a3:97:54:3a:d9:36:86:d2:02:
cc:24:86:8e:b2:1f:f5:41:b9:e6:fa:cd:df:3b:6c:96:da:99:
0e:87:84:d1:d4:7c:5f:2f:d0:cf:41:fc:51:16:4d:08:ad:c0:
80:f5:28:f1:e9:69:34:bc:5a:98:fa:a0:12:c0:22:a1:06:da:
1d:83:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:40:59 2026 by rpki-client