Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa
File: XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa (raw, json)
Hash identifier: NnQ4qNdBxaVb0sjnoqmY0qHl2F+ZeA8EdWA8FUpAnMU=
Subject key identifier: 5E:19:A0:2B:D9:34:48:EB:02:4B:F3:85:7C:57:FB:64:CB:2E:A6:1E
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DAB14E5A6A3583B16F793D3E5E9FD205C
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa
Signing time: Mon 20 Apr 2026 13:29:26 +0000
ROA not before: Mon 20 Apr 2026 13:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 178.214.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:14:e5:a6:a3:58:3b:16:f7:93:d3:e5:e9:fd:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 20 13:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e19a02bd93448eb024bf3857c57fb64cb2ea61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:b0:99:3b:98:97:c3:88:b4:60:83:5e:c1:
2e:78:02:30:cb:5d:64:7e:88:15:1a:fe:a1:6e:0a:
c2:b3:77:57:4b:7a:23:fd:f4:b6:77:9e:cc:b2:e9:
97:ed:46:7f:03:30:35:50:c0:87:de:c5:da:f8:84:
3b:09:19:d7:47:6a:db:cb:4b:ea:c7:30:34:9d:6e:
30:1b:dd:7e:65:13:61:e3:da:e8:9e:d0:67:77:96:
5d:66:b6:b3:d2:31:59:b0:2e:30:81:3d:67:da:b4:
a8:9d:ec:47:7b:74:54:0a:7f:0c:fc:64:d9:bf:ec:
29:64:00:24:be:bd:ab:96:dd:2c:6f:19:fa:4d:74:
4f:25:7a:2a:16:ef:49:09:35:93:ff:4d:38:f0:87:
72:af:0d:88:5e:47:30:7f:7d:03:33:a2:61:66:66:
21:85:81:7c:3f:9e:33:c7:94:f8:75:27:e7:b0:74:
b1:ce:a9:80:90:19:ee:79:36:3d:ff:c6:31:88:a6:
7a:f0:ee:4d:ae:2d:35:dc:7c:55:11:58:70:e2:01:
5c:e8:87:e5:9f:46:81:d7:b9:a6:db:82:3f:59:27:
f7:0b:b3:e7:47:bd:26:5a:65:b0:f8:ed:80:5e:87:
a6:d9:d5:b4:4d:bf:a9:58:24:ca:a2:23:50:d2:f6:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:A0:2B:D9:34:48:EB:02:4B:F3:85:7C:57:FB:64:CB:2E:A6:1E
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5c:25:bf:66:71:a5:7c:f0:34:e7:ac:23:89:af:a5:ab:8a:
95:e9:a6:32:df:84:1d:f2:a7:08:8f:84:3c:57:c3:62:1f:d6:
2e:f8:0d:67:b2:f5:41:0e:5d:30:9b:c7:03:cf:ea:31:10:bc:
b0:dd:91:a0:32:e2:12:12:bc:b5:35:67:6e:c2:22:ef:cb:b1:
4d:ca:ad:db:1c:68:dc:32:37:d7:8a:7e:5a:64:13:88:a7:8e:
25:bf:64:0f:79:e1:e0:e1:e1:ac:64:ad:90:b9:93:d8:36:98:
56:4d:d1:9e:d6:ca:7e:a9:7c:42:22:3d:a9:03:a8:ce:83:88:
7b:5c:bc:91:28:e7:80:58:a0:af:39:86:f2:40:5c:2b:92:a4:
9a:6f:d0:5a:40:ac:fc:ac:15:8b:83:32:e5:c9:08:89:db:84:
fa:4a:9a:f8:d3:7a:a0:5b:7d:b3:00:9d:c9:ff:2c:35:88:db:
65:c2:a6:ca:02:fc:23:42:be:a8:b0:05:12:a5:25:d3:4a:3f:
2b:ea:e5:3a:4f:a7:26:d9:fe:8b:d0:8a:7e:1a:88:da:d3:45:
77:ae:26:eb:f5:29:ee:ee:02:ca:b4:35:03:a2:5b:ac:19:fd:
74:2e:d9:74:76:ab:e0:f1:cb:e3:0a:e7:21:62:56:85:06:ec:
84:5e:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:06:46 2026 by rpki-client