Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa
File: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (raw, json)
Hash identifier: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=
Subject key identifier: 6A:4F:F3:A4:17:82:CC:5E:E4:FA:C6:59:E1:4A:A5:BC:9E:21:0B:24
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D1C78998D117533480EB70A0BFA47E2E4
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa
Signing time: Mon 23 Mar 2026 20:52:38 +0000
ROA not before: Mon 23 Mar 2026 20:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 178.214.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:78:99:8d:11:75:33:48:0e:b7:0a:0b:fa:47:e2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 23 20:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4ff3a41782cc5ee4fac659e14aa5bc9e210b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:22:43:3d:00:85:1b:ac:d7:8b:af:97:5e:
14:fd:81:ab:c7:32:b9:e5:78:b5:df:31:d6:6e:4c:
b9:7d:3d:05:ba:ef:46:c2:b3:5f:94:42:dd:dc:0c:
3f:c7:b3:54:c9:80:dc:51:11:de:45:d7:3a:7f:94:
71:ce:0b:40:5e:4c:e2:a8:01:23:0c:6a:49:30:6c:
d3:d4:0f:2a:a6:cb:29:4f:55:b5:2a:5e:fe:a7:af:
9b:95:08:68:c4:dc:6e:98:0a:26:0e:33:a1:71:9f:
e9:8a:29:78:a8:b2:11:25:ec:1a:a0:19:8c:5e:bd:
7e:4d:d9:86:46:ab:63:f5:ca:0b:f0:80:21:90:b9:
11:a4:4b:3e:bb:31:f6:d6:8f:9b:b3:5d:ba:8a:00:
8c:76:9c:13:62:7f:ad:74:de:16:71:c1:5e:16:4a:
7a:d6:d5:5b:f9:15:bb:72:7c:3f:d1:fb:f4:8e:6d:
01:3e:f1:e2:dc:83:47:ba:58:fb:da:cc:ef:ea:7e:
46:a7:51:96:83:c2:65:d8:fe:40:be:47:4a:21:86:
1b:62:98:86:d1:9c:ea:21:39:36:53:a7:32:1e:14:
95:c0:63:68:17:ad:c7:c7:76:31:82:d9:23:56:de:
60:e1:b4:ef:bd:66:65:29:53:3c:f8:2a:fd:29:ed:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:F3:A4:17:82:CC:5E:E4:FA:C6:59:E1:4A:A5:BC:9E:21:0B:24
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.215.0/24
Signature Algorithm: sha256WithRSAEncryption
58:74:bb:19:c9:f8:cb:77:d4:bb:5c:ed:8c:89:53:de:a2:84:
bb:cb:a9:17:d0:34:e9:f2:fb:9b:bd:9f:ce:da:ca:1b:d0:b4:
af:d1:6b:50:d9:f8:43:57:b0:72:d8:f8:ca:9c:2d:db:2a:4f:
00:64:9a:39:18:91:61:09:fc:56:02:7c:e1:8a:90:70:1a:f5:
35:4b:24:c6:62:82:88:f0:ed:47:67:4e:a7:5a:bb:2b:64:d4:
76:71:0d:3a:5b:5f:5d:cc:ac:95:9e:20:39:0b:e3:f0:a0:a9:
75:bf:39:a1:d3:3e:f9:83:50:d7:48:18:5f:b4:96:ef:ee:e4:
9a:ed:1b:0d:b3:27:71:c9:92:8c:da:dd:31:37:6d:96:d7:4d:
48:65:ea:cb:1f:78:0d:98:fa:49:b1:e7:09:ba:ba:7e:2c:9b:
c9:a4:2b:59:3f:55:13:ec:5d:09:57:2f:59:e4:81:0e:56:7a:
cd:56:f0:98:b3:29:ca:46:33:b6:65:07:22:fd:b0:7d:6a:b1:
66:40:ea:6b:59:dc:91:9c:56:69:5a:67:f0:94:db:55:6f:42:
f4:cd:c9:f9:2f:3a:36:e6:95:9a:88:1c:49:61:03:ae:22:e0:
47:7c:54:d9:8b:48:c8:f4:dd:5d:c1:ed:c2:fd:b6:c9:18:2f:
d6:4d:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:42:48 2026 by rpki-client