Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VllzRPRKTVqoKCv6C6XbpsT1mlw.roa
File: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (raw, json)
Hash identifier: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=
Subject key identifier: 56:59:73:44:F4:4A:4D:5A:A8:28:2B:FA:0B:A5:DB:A6:C4:F5:9A:5C
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D151B63F39C7AD16DCE05EB211D3B17C1
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VllzRPRKTVqoKCv6C6XbpsT1mlw.roa
Signing time: Sun 22 Mar 2026 10:33:29 +0000
ROA not before: Sun 22 Mar 2026 10:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198510
IP address blocks: 178.214.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:1b:63:f3:9c:7a:d1:6d:ce:05:eb:21:1d:3b:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 22 10:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56597344f44a4d5aa8282bfa0ba5dba6c4f59a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:61:d2:cc:9f:f2:5f:2a:9b:44:ea:b6:6b:
e4:e3:7b:4a:66:c5:f2:00:35:18:e3:bb:b4:01:c5:
79:77:8b:a1:c2:b8:7b:1b:6f:d6:27:6a:2f:3f:03:
8f:02:b6:5f:76:0b:e3:ae:39:e0:9c:49:44:0c:ac:
96:dd:71:ff:c9:15:73:ac:8e:00:0e:e4:8d:53:45:
75:5e:80:c1:de:c3:94:63:f5:a6:f9:0e:5c:dc:00:
7d:c6:04:b8:ed:41:82:22:86:16:81:14:19:b0:ed:
6d:2b:39:5d:5f:50:ff:32:31:48:ab:14:9b:ba:12:
36:cf:3f:8d:46:2b:36:f8:6f:ed:d1:3f:ef:5f:52:
e0:97:2c:3a:52:82:aa:0c:37:52:bb:67:07:8d:e4:
86:2b:ce:b0:d7:ae:12:15:5a:4e:6c:76:6e:df:4d:
9d:2d:61:8f:1e:43:96:1c:cb:9d:82:6f:4d:48:9e:
48:79:59:88:1e:f4:1f:47:9c:85:54:e3:53:85:60:
e9:27:f9:e1:60:c5:1b:8a:d0:29:8f:d2:f6:39:76:
82:73:a8:23:dc:1b:09:40:3c:9b:23:57:77:2d:aa:
59:1d:37:52:5c:f5:19:d3:89:95:b7:4b:cb:bd:a1:
95:a8:c7:04:b0:3c:e6:bb:c9:c5:5c:5e:57:a6:1d:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:73:44:F4:4A:4D:5A:A8:28:2B:FA:0B:A5:DB:A6:C4:F5:9A:5C
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VllzRPRKTVqoKCv6C6XbpsT1mlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:85:af:d4:69:8e:81:b3:fd:31:aa:17:18:92:62:df:5f:92:
3c:bd:c1:85:a7:2a:99:fe:3d:72:06:99:cc:44:ea:7a:cb:16:
fa:47:83:e0:8d:2d:6a:2e:62:d3:7c:dd:06:54:d4:f1:5e:3b:
3b:bb:8f:e1:82:0c:d3:6e:0d:22:24:0a:65:27:61:50:14:fd:
b9:81:91:fb:5e:3b:66:fd:cf:fc:02:19:d9:54:43:e9:97:2d:
65:16:b9:af:ba:df:e4:06:bc:62:51:f6:91:64:5a:55:e0:bf:
7d:99:bd:85:f0:23:5a:b6:57:12:27:43:1b:20:fc:b0:47:3f:
49:c6:42:8a:aa:84:d6:96:cf:eb:50:fd:31:d9:13:ee:d0:4a:
5e:30:20:b0:e8:36:26:59:e9:05:97:ad:e9:5a:97:11:f8:99:
ad:0a:d7:fa:28:d5:f1:99:db:a8:5c:c9:85:24:28:05:b9:7e:
e4:08:59:19:a3:b9:18:c6:7e:0e:ec:17:65:af:e4:e7:fa:43:
46:40:77:2f:d7:35:ef:5e:9a:03:0e:a8:0a:2f:58:7b:36:4f:
f1:34:be:dd:4c:70:30:88:ac:07:97:c5:17:13:e6:fb:ed:36:
2d:46:59:2f:53:9a:6e:d3:e2:df:f7:d3:72:2f:31:5c:16:9b:
60:60:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:04 2026 by rpki-client