Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa
File: _7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa (raw, json)
Hash identifier: iqPKLFA+g5deNUkHvdEQM9uLDsaW9rYQtZs9LzN5kwg=
Subject key identifier: FF:B5:DA:8A:2C:81:00:9E:44:A9:DE:6F:2A:E0:2A:C7:83:D6:D2:13
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019F3834FA39D4A0D90FCE10D74554A34B62
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa
Signing time: Mon 06 Jul 2026 16:13:43 +0000
ROA not before: Mon 06 Jul 2026 16:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201667
IP address blocks: 178.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:34:fa:39:d4:a0:d9:0f:ce:10:d7:45:54:a3:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jul 6 16:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb5da8a2c81009e44a9de6f2ae02ac783d6d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:b4:09:8d:43:76:b6:98:3c:4f:05:fd:67:
af:aa:dc:6f:65:c3:8a:ec:2a:4a:d1:fd:61:6d:df:
c2:94:35:2b:5d:c7:64:02:4b:79:48:f2:df:03:2f:
c2:f4:4c:04:44:65:69:09:1c:66:9c:6b:fa:18:c9:
03:d8:20:c9:6b:67:07:ac:4b:2a:ac:8a:27:d1:49:
d8:e8:4b:16:6f:17:8b:77:85:69:1e:61:96:1a:bd:
46:4f:34:21:eb:e1:4f:58:7f:7f:c6:0d:6a:99:bc:
73:aa:d7:d6:b8:ab:ae:c2:62:d0:5a:da:19:23:fa:
e0:05:19:7e:42:b5:97:4c:9d:fc:cc:f4:4a:db:25:
0f:87:31:f1:b5:3b:b5:0f:e9:67:86:f5:14:55:7b:
2b:84:60:b1:7c:2f:df:82:de:0a:28:e7:70:2c:0a:
8e:69:f8:17:cc:0f:ae:22:7f:c4:62:3a:1b:73:e6:
ee:4c:d7:0b:cf:d2:aa:76:3f:c6:e5:06:82:14:18:
5f:3b:c3:62:af:ac:55:f2:06:fa:7f:90:f9:5a:4e:
12:28:c9:6e:f4:fe:59:68:18:b7:a8:23:8f:3d:e8:
38:f8:ae:bc:5f:82:6f:ed:6c:7e:ec:f4:bd:e8:d9:
42:6c:0a:2f:44:78:a2:7b:2a:55:96:bd:25:8e:60:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:DA:8A:2C:81:00:9E:44:A9:DE:6F:2A:E0:2A:C7:83:D6:D2:13
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fd:ca:98:d6:60:f0:57:8c:4d:7b:20:79:17:df:eb:2f:73:
cd:e0:b4:43:9a:58:d7:cb:91:e9:d3:9c:6d:6a:e3:56:47:62:
8d:fd:4b:83:79:e1:23:01:cc:95:c0:a6:0b:f6:16:4a:ce:1c:
22:c5:b5:4d:9e:48:1a:13:46:d7:97:4f:22:b9:82:9b:80:cb:
4e:97:80:69:0b:a1:80:35:fc:9c:8a:6f:35:60:fe:d5:6b:2e:
bf:14:0b:47:5a:28:79:56:76:03:c4:cc:c3:f1:c6:a8:8c:0e:
7f:c3:09:2d:61:b6:69:3d:51:6c:bf:8a:12:bc:93:10:00:b9:
c6:32:31:a6:30:3a:be:20:24:fb:81:0e:de:70:76:81:1b:61:
71:21:8a:d8:d5:a8:1c:16:cd:5f:b2:ca:eb:e7:27:6c:dc:79:
2b:e0:33:0f:79:06:77:44:bc:2d:b7:39:0c:84:3e:80:f3:84:
a7:76:8a:c0:9a:73:1a:56:3e:e2:2b:74:43:46:c0:94:77:e6:
7b:ee:88:a1:4e:6c:b6:05:21:2c:7d:ae:9e:21:47:a6:5b:8d:
97:c3:1d:b6:ed:ed:47:8c:c4:b7:6a:c9:f4:ff:7d:ee:c5:5e:
a3:3c:3b:1d:9f:42:8d:e3:53:c5:ca:f6:a4:b6:19:e1:2c:83:
8e:b6:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:09 2026 by rpki-client