Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rSVgQOVnou3IvMcbxtNZj63aDxo.roa
File: rSVgQOVnou3IvMcbxtNZj63aDxo.roa (raw, json)
Hash identifier: N08uS8yhbq32k6Y6AxZV3/3a7qrM3yNcRi03H0AHgKw=
Subject key identifier: AD:25:60:40:E5:67:A2:ED:C8:BC:C7:1B:C6:D3:59:8F:AD:DA:0F:1A
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D19FDC848DD2A7FA7754794730052CE9B
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rSVgQOVnou3IvMcbxtNZj63aDxo.roa
Signing time: Mon 23 Mar 2026 09:19:15 +0000
ROA not before: Mon 23 Mar 2026 09:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 178.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:fd:c8:48:dd:2a:7f:a7:75:47:94:73:00:52:ce:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 23 09:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad256040e567a2edc8bcc71bc6d3598fadda0f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:d3:06:32:29:d6:f3:a3:bc:72:12:ad:35:
5c:53:c0:1f:46:9d:f5:48:0c:5b:d3:ee:2c:0b:09:
ea:3f:2f:83:23:2e:ca:7a:d3:4e:b6:f9:32:f6:be:
16:74:f1:b5:e1:0c:cb:d1:53:a8:13:8f:40:1e:fb:
0e:73:59:28:20:9f:cb:75:1c:5e:17:dc:3c:a2:b8:
aa:0f:88:af:f8:dc:4a:2e:dd:fd:c0:70:12:3e:93:
62:fa:7b:62:85:66:9c:da:e1:19:8b:f6:cb:9e:90:
39:b1:d6:c4:0c:7f:43:86:f7:2a:0c:d8:51:47:c8:
21:2c:3d:89:1b:af:04:37:81:f7:db:df:aa:8b:80:
f5:e3:26:a7:56:b4:3c:a5:8d:26:39:0b:0c:00:57:
52:fa:b9:d8:51:93:c1:6a:ef:0f:6e:63:69:be:21:
3d:5a:7d:79:ad:75:4f:64:fb:34:8d:58:c2:39:df:
4a:31:36:76:11:09:f5:48:6c:84:44:77:02:e1:ff:
8e:ac:22:50:7f:18:2c:9c:b2:54:48:cb:aa:9b:0b:
8e:7d:06:59:82:21:01:7e:a6:ab:b5:6a:28:7e:b6:
18:03:fd:8b:06:45:d9:0e:fb:d5:41:e6:08:e1:47:
df:ac:fe:73:f3:76:c9:24:ba:fd:82:2b:08:61:13:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:60:40:E5:67:A2:ED:C8:BC:C7:1B:C6:D3:59:8F:AD:DA:0F:1A
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rSVgQOVnou3IvMcbxtNZj63aDxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2e:a9:06:b9:2b:41:4c:38:60:a4:ac:29:36:a7:f3:65:a6:
50:36:75:29:3c:da:96:a0:05:fa:52:ea:fd:0e:8f:02:2a:b0:
d0:84:6d:c2:06:ad:6d:bb:77:78:58:38:b4:b2:79:cf:94:fb:
a7:96:c1:28:43:36:a2:38:b6:fe:f0:14:a6:c8:03:6d:89:36:
ae:2f:8c:e0:2d:1a:9d:2e:81:79:e6:00:c3:86:13:bc:1e:7a:
e7:04:71:cf:0b:a1:0d:56:c6:b9:34:45:03:4c:60:13:7b:e3:
c9:8f:38:7a:28:0f:41:58:93:2a:fe:e8:59:b5:f9:2b:b9:75:
60:ec:2f:86:e6:dd:62:f8:1d:4d:dd:f4:6b:9b:a4:2c:60:1e:
75:67:f0:7c:3b:15:27:63:46:17:5f:f1:c5:91:36:f8:4b:eb:
b7:bb:36:27:bd:fc:80:93:30:da:0a:d0:44:08:92:a7:65:d7:
13:85:46:3d:85:e7:2f:3c:fa:72:a3:df:22:8c:5f:69:4d:00:
dd:63:3c:c2:1b:d8:27:87:c4:cc:a7:dd:ff:a2:af:3a:3f:2f:
96:2f:b7:00:d4:a5:eb:da:db:76:d9:ad:14:f9:45:e6:3e:e5:
2f:04:cb:bf:8e:67:32:ef:36:62:15:ca:00:04:fd:29:ff:3c:
d4:6b:b9:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0Z/chI3Sp/p3VHlHMAUs6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjYwMzIzMDkxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDI1NjA0MGU1NjdhMmVkYzhiY2M3MWJjNmQzNTk4ZmFkZGEwZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnTBjIp1vOjvHISrTVcU8AfRp31
SAxb0+4sCwnqPy+DIy7KetNOtvky9r4WdPG14QzL0VOoE49AHvsOc1koIJ/LdRxe
F9w8oriqD4iv+NxKLt39wHASPpNi+ntihWac2uEZi/bLnpA5sdbEDH9DhvcqDNhR
R8ghLD2JG68EN4H329+qi4D14yanVrQ8pY0mOQsMAFdS+rnYUZPBau8PbmNpviE9
Wn15rXVPZPs0jVjCOd9KMTZ2EQn1SGyERHcC4f+OrCJQfxgsnLJUSMuqmwuOfQZZ
giEBfqartWoofrYYA/2LBkXZDvvVQeYI4UffrP5z83bJJLr9gisIYRP87wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0lYEDlZ6LtyLzHG8bTWY+t2g8aMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvclNWZ1FPVm5vdTNJdk1jYnh0TlpqNjNhRHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstbWMA0G
CSqGSIb3DQEBCwUAA4IBAQA2LqkGuStBTDhgpKwpNqfzZaZQNnUpPNqWoAX6Uur9
Do8CKrDQhG3CBq1tu3d4WDi0snnPlPunlsEoQzaiOLb+8BSmyANtiTauL4zgLRqd
LoF55gDDhhO8HnrnBHHPC6ENVsa5NEUDTGATe+PJjzh6KA9BWJMq/uhZtfkruXVg
7C+G5t1i+B1N3fRrm6QsYB51Z/B8OxUnY0YXX/HFkTb4S+u3uzYnvfyAkzDaCtBE
CJKnZdcThUY9hecvPPpyo98ijF9pTQDdYzzCG9gnh8TMp93/oq86Py+WL7cA1KXr
2tt22a0U+UXmPuUvBMu/jmcy7zZiFcoABP0p/zzUa7n8
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:21 2026 by rpki-client