Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ypr_IU6FhhK3lFvKQ-FjgPmS2jQ.roa
File: Ypr_IU6FhhK3lFvKQ-FjgPmS2jQ.roa (raw, json)
Hash identifier: DdSfe0amfsrQOV/JKPLiRl30tPO1LJ5nGi0Hibv6yU8=
Subject key identifier: 62:9A:FF:21:4E:85:86:12:B7:94:5B:CA:43:E1:63:80:F9:92:DA:34
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019F8E003E276EF968C55CF0C0536467BF54
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ypr_IU6FhhK3lFvKQ-FjgPmS2jQ.roa
Signing time: Thu 23 Jul 2026 08:03:28 +0000
ROA not before: Thu 23 Jul 2026 08:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.214.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:00:3e:27:6e:f9:68:c5:5c:f0:c0:53:64:67:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jul 23 08:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=629aff214e858612b7945bca43e16380f992da34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:b1:c3:d0:b7:f0:8f:e1:33:75:78:1c:c4:
57:98:e8:f4:52:bc:7d:8a:e8:8b:d1:57:11:48:0b:
93:5d:f2:a8:dc:c8:1c:88:8d:ca:50:67:21:0c:39:
82:3c:62:32:11:5d:c9:95:36:52:f0:4e:2e:70:f7:
fb:17:a6:43:f8:b2:7e:44:e9:bc:29:61:26:61:5d:
c3:c5:b9:b9:25:c5:c6:60:84:90:d6:8b:77:1c:6b:
80:ad:7c:b7:7d:e6:a4:90:ec:44:ab:66:51:75:5b:
12:bd:ba:5c:04:12:5e:71:8b:88:83:eb:34:b8:fd:
1f:d7:12:4e:3d:61:28:8e:62:83:55:72:a8:ae:eb:
a8:90:c0:ff:49:bc:8b:62:38:cf:9b:d9:ec:67:33:
6d:01:4f:ba:b2:89:3e:5f:27:1f:11:46:5b:0f:a9:
00:04:83:11:e3:83:d1:31:12:7e:1b:9b:ec:3e:31:
e0:9f:40:8c:fa:86:8d:c7:6f:73:9e:22:0f:aa:b5:
4b:b2:eb:1b:4f:d6:93:7d:61:37:39:87:27:24:bd:
dc:3b:74:28:22:e5:60:95:34:44:75:f4:68:e6:1c:
22:cb:e7:b8:ad:e0:bb:ee:60:1f:db:ce:ee:e2:7c:
20:2c:65:b6:fc:b9:95:6c:1f:ed:0e:9a:6b:fb:0f:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:FF:21:4E:85:86:12:B7:94:5B:CA:43:E1:63:80:F9:92:DA:34
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Ypr_IU6FhhK3lFvKQ-FjgPmS2jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b7:19:ec:b1:96:9f:21:5f:a8:5b:ff:76:c3:d6:e5:92:7f:
9b:fb:6b:e8:cc:a3:ae:59:47:4b:5c:86:ba:01:0c:d8:74:b1:
93:db:74:42:63:ec:cf:ba:98:e6:e7:eb:aa:ae:b8:07:96:80:
64:a8:41:52:50:6d:00:6a:4b:c1:f4:3c:bd:6d:cc:c9:65:4e:
19:ae:26:d4:70:7b:1a:02:df:03:cd:90:3a:c4:22:b7:c7:91:
48:42:d8:e7:cd:bf:6b:d5:9a:37:00:91:b2:fa:ab:3c:12:21:
91:b7:8c:88:ea:fc:0d:21:7d:74:4b:c1:29:b0:c7:b2:5d:5e:
9a:39:b2:1a:3c:53:61:22:9a:13:7b:df:7e:f3:80:c2:1a:26:
19:11:cf:db:a0:ae:32:93:25:e0:71:4b:8e:3d:23:87:ab:0c:
e1:77:70:12:7b:57:2e:75:04:7f:5d:96:3c:93:78:7c:17:30:
65:6e:8c:16:2d:4d:23:c8:a5:6d:a8:25:df:0b:21:0e:56:a5:
a5:c5:f4:d9:5c:c5:44:8d:06:79:04:9d:78:1f:70:7c:06:a8:
e1:28:17:e9:83:47:1e:bd:91:f2:2f:03:91:59:1a:c1:ba:fe:
00:73:cb:fd:78:14:5b:02:4f:c6:a7:3a:40:e8:cf:3c:54:6d:
54:6f:ff:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+OAD4nbvloxVzwwFNkZ79UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjYwNzIzMDgwMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjlhZmYyMTRlODU4NjEyYjc5NDViY2E0M2UxNjM4MGY5OTJkYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEixw9C38I/hM3V4HMRXmOj0Urx9
iuiL0VcRSAuTXfKo3MgciI3KUGchDDmCPGIyEV3JlTZS8E4ucPf7F6ZD+LJ+ROm8
KWEmYV3Dxbm5JcXGYISQ1ot3HGuArXy3feakkOxEq2ZRdVsSvbpcBBJecYuIg+s0
uP0f1xJOPWEojmKDVXKoruuokMD/SbyLYjjPm9nsZzNtAU+6sok+XycfEUZbD6kA
BIMR44PRMRJ+G5vsPjHgn0CM+oaNx29zniIPqrVLsusbT9aTfWE3OYcnJL3cO3Qo
IuVglTREdfRo5hwiy+e4reC77mAf287u4nwgLGW2/LmVbB/tDppr+w8R3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKa/yFOhYYSt5RbykPhY4D5kto0MB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvWXByX0lVNkZoaEszbEZ2S1EtRmpnUG1TMmpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstbQMA0G
CSqGSIb3DQEBCwUAA4IBAQBrtxnssZafIV+oW/92w9blkn+b+2vozKOuWUdLXIa6
AQzYdLGT23RCY+zPupjm5+uqrrgHloBkqEFSUG0AakvB9Dy9bczJZU4ZribUcHsa
At8DzZA6xCK3x5FIQtjnzb9r1Zo3AJGy+qs8EiGRt4yI6vwNIX10S8EpsMeyXV6a
ObIaPFNhIpoTe99+84DCGiYZEc/boK4ykyXgcUuOPSOHqwzhd3ASe1cudQR/XZY8
k3h8FzBlbowWLU0jyKVtqCXfCyEOVqWlxfTZXMVEjQZ5BJ14H3B8BqjhKBfpg0ce
vZHyLwORWRrBuv4Ac8v9eBRbAk/GpzpA6M88VG1Ub/+M
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:29 2026 by rpki-client