Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jkRp-_i-nDw-ctHbmCB-SpszI24.roa
File: jkRp-_i-nDw-ctHbmCB-SpszI24.roa (raw, json)
Hash identifier: VMluiKRy3ZyrIcXpCPyHe6iAxdnlIHxQpXGdv6vg60U=
Subject key identifier: 8E:44:69:FB:F8:BE:9C:3C:3E:72:D1:DB:98:20:7E:4A:9B:33:23:6E
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A0CAA0225B6B0D6AE034C1D4D8611D36D0
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jkRp-_i-nDw-ctHbmCB-SpszI24.roa
Signing time: Tue 22 Sep 2026 19:38:07 +0000
ROA not before: Tue 22 Sep 2026 19:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:a0:22:5b:6b:0d:6a:e0:34:c1:d4:d8:61:1d:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Sep 22 19:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e4469fbf8be9c3c3e72d1db98207e4a9b33236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:a3:2c:1e:b3:c8:b3:be:d8:dc:7d:51:98:
b7:13:30:ac:f1:b9:02:6b:33:fa:38:71:c6:a3:91:
d3:cc:00:3d:3d:29:7d:9a:37:ad:ad:6e:f5:fb:08:
86:7f:fe:2a:38:5a:0d:f5:02:85:4c:29:1a:59:3c:
f2:82:be:47:63:14:c1:da:48:6d:8a:db:36:8c:e3:
cd:c9:a5:58:df:da:3a:75:aa:04:d6:bc:7b:30:a6:
17:b1:e1:1b:42:13:4c:de:1f:16:c6:e3:a4:21:44:
9f:7f:e7:87:54:bb:c3:ca:54:92:46:5e:1a:df:4b:
6c:d8:0f:8a:4a:45:8c:2e:a3:04:8f:5f:e3:36:50:
9e:97:34:f7:64:51:bd:67:e4:e4:e4:90:2a:7f:2a:
13:f3:cb:b8:98:1a:85:6b:83:2d:91:f1:06:56:35:
26:ed:a6:1e:6c:f8:ab:50:ec:dc:b4:ba:e5:bf:e9:
11:f3:58:82:38:32:de:5b:3e:8a:60:1c:8f:15:35:
19:82:0b:1d:02:a6:04:67:e3:04:7b:39:0b:00:f2:
07:81:dd:35:d3:c4:09:c1:5f:61:c6:5a:dd:be:52:
55:4f:cc:c5:b1:80:76:e7:a9:36:8d:5a:d3:5a:87:
7f:d7:29:12:9d:0f:89:9d:41:3e:50:fa:22:4f:dd:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:69:FB:F8:BE:9C:3C:3E:72:D1:DB:98:20:7E:4A:9B:33:23:6E
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jkRp-_i-nDw-ctHbmCB-SpszI24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:09:4e:48:ac:ef:34:ba:11:e8:34:bb:f0:5d:17:db:9e:41:
6d:67:6c:2b:9b:18:7e:b4:eb:51:cf:53:b2:9f:90:a1:eb:8e:
3a:66:71:50:73:26:0b:b3:b3:d6:a2:b5:60:95:ac:5b:59:2f:
c9:6f:9c:22:04:e7:5f:5d:c5:3c:de:f7:5e:3a:4d:93:c0:05:
0f:9a:b3:93:cc:02:ec:2f:17:54:42:7c:69:7c:2e:98:c7:08:
88:b5:e9:a0:21:37:cc:33:a4:4f:e2:39:c2:db:bb:6d:40:da:
ae:40:d5:93:d2:4b:94:5f:b3:f9:66:0c:2d:4f:03:21:02:c8:
85:7c:d9:df:7c:a7:45:71:ec:1f:2d:9e:08:14:c5:b2:4e:c5:
28:5c:c9:28:00:f3:94:79:20:a8:4e:1b:25:87:3d:b4:9a:dd:
49:20:bf:d5:c4:ba:1b:c8:21:d5:e8:77:cb:1c:8a:21:cf:a0:
41:53:dd:2e:91:da:48:10:8e:c7:90:af:de:fc:d0:c0:3e:3d:
18:12:46:5d:ec:d8:75:8e:18:0c:ef:62:0a:51:fd:76:9f:ca:
f4:4b:8b:bc:09:81:5a:ac:b4:e2:f9:2a:cc:98:fa:c7:00:b1:
da:75:cb:00:8a:03:d6:b3:8c:b8:4d:c4:e8:2d:83:e6:ec:4a:
e2:25:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:31 2026 by rpki-client