Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/L80ffBUzMwpk7MjcUl5D8FtwMcs.roa
File: L80ffBUzMwpk7MjcUl5D8FtwMcs.roa (raw, json)
Hash identifier: KgvEQXJdmqT8V6CDsyrhu5oqJUXkR8KjW0qCpNk8G1Y=
Subject key identifier: 2F:CD:1F:7C:15:33:33:0A:64:EC:C8:DC:52:5E:43:F0:5B:70:31:CB
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A1C0D6C9AD8C0A78D452B30F3A5347EBD9
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/L80ffBUzMwpk7MjcUl5D8FtwMcs.roa
Signing time: Mon 09 Nov 2026 15:04:24 +0000
ROA not before: Mon 09 Nov 2026 15:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201407
IP address blocks: 178.214.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:d6:c9:ad:8c:0a:78:d4:52:b3:0f:3a:53:47:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Nov 9 15:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fcd1f7c1533330a64ecc8dc525e43f05b7031cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:5c:18:d7:41:d7:c0:d1:55:13:b8:e8:1c:
2b:ee:6e:c1:bf:83:8a:04:9b:03:0c:fa:e5:d8:8c:
fe:81:97:7d:c8:92:7c:5c:55:35:c2:1d:71:fa:d7:
ee:ee:32:63:cc:ba:88:51:38:eb:f2:4c:3c:c7:dd:
f3:5e:06:61:cb:c6:c3:79:91:ad:28:e6:5d:bd:b4:
5b:59:18:d7:a6:12:00:f7:15:c7:a4:db:7e:a5:e0:
c4:c8:4b:c3:07:95:50:26:8c:15:3e:ec:fb:97:60:
ce:7f:36:34:80:ef:28:f1:79:b9:f1:b6:1c:40:fc:
00:37:cc:db:10:98:21:88:7e:43:43:d7:6a:4f:cb:
21:0f:c6:98:23:66:bc:cc:cc:80:3a:74:97:3f:57:
65:6a:ba:99:ed:22:21:5d:93:61:9b:a1:c3:a3:c4:
19:b1:dc:fb:33:a9:6d:d5:3a:ef:40:02:8d:74:26:
aa:04:cf:05:d0:c9:73:0c:22:47:a9:a2:ed:54:27:
12:e1:6f:bb:34:17:42:a9:c5:fc:4d:62:d0:8c:c0:
7b:e2:86:b8:b2:81:38:f6:4f:0a:c0:c5:64:20:ba:
56:fc:c3:24:83:4f:f9:8b:dc:53:6f:23:bc:23:c6:
ce:ff:31:6c:0d:f6:99:83:3c:9b:b4:a6:1a:47:be:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CD:1F:7C:15:33:33:0A:64:EC:C8:DC:52:5E:43:F0:5B:70:31:CB
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/L80ffBUzMwpk7MjcUl5D8FtwMcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.222.0/24
Signature Algorithm: sha256WithRSAEncryption
18:04:79:79:0d:f7:bf:2a:f8:31:15:fd:c6:5f:d5:aa:78:5e:
3c:1f:ba:27:9d:ee:e2:78:4c:43:37:88:4c:67:53:a2:00:66:
a5:38:53:cb:83:41:96:e3:b6:ea:f7:bb:4e:1a:86:00:e4:3e:
b8:eb:75:d0:3c:23:36:1c:33:20:27:3d:34:27:ae:1c:c1:cf:
b9:7a:75:e1:77:6d:ac:f3:c4:0c:09:12:3f:6e:6d:81:0c:f1:
46:f0:c6:6b:db:73:6c:46:bc:80:f7:7a:f6:d2:a2:09:f9:3a:
84:66:42:e2:97:3f:78:76:6c:af:f7:ab:fd:60:02:99:9f:4f:
e4:a0:a7:21:24:f2:16:7e:76:ea:21:d7:1a:23:98:5c:df:18:
b2:96:f4:24:74:a0:95:07:f9:74:29:71:33:fc:6a:2b:16:5f:
55:81:7f:62:8d:95:17:26:fc:0a:6f:2d:bd:44:28:0b:00:c3:
c4:48:85:71:f4:8b:35:4a:50:10:44:c1:84:c4:ac:4d:f2:4e:
4f:d7:6c:61:7a:df:2e:ac:3b:f3:53:c5:a3:40:8f:6d:51:22:
ea:e4:9a:fa:c2:32:98:6d:d8:55:95:6b:19:70:f3:ca:f0:37:
b7:04:85:95:57:70:3a:77:d7:95:12:d4:28:c8:43:ab:fe:00:
84:51:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:38:31 2026 by rpki-client