Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ww9vl2ut2kKPrRMFsC5ZjKseCwg.roa
File: Ww9vl2ut2kKPrRMFsC5ZjKseCwg.roa (raw, json)
Hash identifier: rcJC50ubc3p3bqb0nQC0SaLon5/f0VpeeX2IreW3lDk=
Subject key identifier: 5B:0F:6F:97:6B:AD:DA:42:8F:AD:13:05:B0:2E:59:8C:AB:1E:0B:08
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D06354CCF1521848E15FE0384A9E5490B
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ww9vl2ut2kKPrRMFsC5ZjKseCwg.roa
Signing time: Thu 19 Mar 2026 13:07:29 +0000
ROA not before: Thu 19 Mar 2026 13:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 178.214.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:35:4c:cf:15:21:84:8e:15:fe:03:84:a9:e5:49:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 19 13:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b0f6f976badda428fad1305b02e598cab1e0b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:29:37:3c:54:db:8e:f8:48:c1:ca:53:98:
1a:2a:d0:7f:83:aa:1a:64:28:96:90:71:fb:d2:c0:
51:1b:5a:a3:2f:bc:63:8d:58:26:e3:a7:e8:b8:f2:
8c:41:29:b2:0b:77:34:37:17:ab:3c:40:a1:e3:8c:
5f:59:45:7b:1a:78:d7:0c:7b:72:4e:33:2f:a2:6e:
c0:ec:44:d5:36:72:62:ef:37:0d:c4:1f:b0:5d:cf:
dd:03:98:b9:53:f4:a9:16:74:d5:90:0b:c2:24:cc:
1a:1a:f3:a8:38:7c:eb:07:be:d1:f5:f1:f8:f5:c8:
66:44:f1:57:f5:fb:65:84:66:51:a4:4e:dc:f5:14:
cc:a4:33:16:e3:aa:da:1e:08:70:85:65:01:96:30:
a5:ea:7f:6c:21:3a:00:f4:1c:57:46:27:eb:3b:b1:
b3:8e:c0:62:4a:df:be:ba:5b:1c:5f:f6:dc:f1:bd:
2d:7d:ab:66:6c:91:ca:da:e8:eb:b1:df:db:9f:35:
3a:4b:8a:6c:7c:40:6e:79:2d:18:d4:46:21:9c:be:
12:8d:4f:0d:a3:82:65:7b:8e:ea:00:be:1d:83:24:
e9:8c:84:79:84:2b:48:92:17:d7:fe:e6:64:db:a0:
e7:f4:f7:e5:fb:6d:3a:3c:b2:52:28:b0:e5:68:83:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:6F:97:6B:AD:DA:42:8F:AD:13:05:B0:2E:59:8C:AB:1E:0B:08
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ww9vl2ut2kKPrRMFsC5ZjKseCwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8e:6f:db:d1:d1:4a:35:4a:c6:70:86:d1:18:3a:e9:fe:03:
34:ec:64:4b:45:0d:e0:a7:32:4d:65:f7:85:20:e1:d4:20:9c:
76:8b:eb:47:9f:db:31:47:5d:84:1a:28:a9:b1:71:0a:8c:c3:
20:f8:4d:08:62:a9:32:ae:69:a3:53:54:32:3b:bc:bd:dd:e9:
e9:2c:db:48:30:f2:57:f8:1a:3e:11:03:eb:a9:be:1a:04:05:
84:48:35:8c:fa:e8:f7:eb:9d:29:50:05:2d:98:5d:5d:ae:d1:
fc:5c:97:5f:0e:d9:02:b1:8f:5c:df:0c:5d:a1:fe:03:8e:d9:
53:ef:4e:d1:71:96:dc:59:fa:15:91:36:9b:66:f8:56:b8:62:
a7:6e:c2:f3:bb:71:6c:b4:88:73:05:7b:de:2c:be:38:fb:e8:
84:bb:20:5b:d3:a7:89:52:c2:25:34:d1:e9:3f:7d:5b:07:77:
14:d0:af:4d:bf:af:a8:80:f3:cf:08:59:00:8d:0e:df:d8:f9:
46:b3:12:b5:2e:de:b1:67:b0:80:c2:95:3d:76:f7:2b:24:34:
e8:c6:cc:91:97:28:c4:e8:2b:12:60:03:89:06:77:b1:94:db:
c2:59:01:46:eb:fb:19:7c:b5:99:54:f6:17:d7:a0:38:a9:b4:
c8:ba:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:41 2026 by rpki-client