Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa
File: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (raw, json)
Hash identifier: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=
Subject key identifier: AE:32:5F:3F:E7:0C:93:B1:28:D6:07:1F:E0:62:6F:FB:A7:D9:F3:00
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DCF9FC375E1532D974995FC4385F2AA37
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa
Signing time: Mon 27 Apr 2026 15:47:27 +0000
ROA not before: Mon 27 Apr 2026 15:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 178.214.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:9f:c3:75:e1:53:2d:97:49:95:fc:43:85:f2:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 27 15:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae325f3fe70c93b128d6071fe0626ffba7d9f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:b7:31:25:e9:00:a1:4c:da:a5:8b:3e:8e:
cb:b8:ed:55:68:88:c2:b5:46:88:be:6d:7f:bd:86:
9e:85:6a:56:ba:01:2e:1c:f9:2f:a3:d2:90:17:3b:
10:10:e3:2c:ce:3f:8a:b0:12:20:4e:b1:ea:df:0c:
a6:e9:e6:78:fc:fc:22:9a:5c:5d:54:31:57:08:15:
5b:15:0b:26:f8:ab:41:2b:fa:f9:50:c8:ae:9e:d7:
3e:f2:f6:b6:8b:1b:45:20:ea:65:6d:79:57:53:47:
b7:60:16:00:cc:36:54:17:95:89:be:8f:f1:f6:42:
66:74:13:11:0b:bc:f4:37:27:c0:20:55:0a:b4:09:
d5:76:56:b6:9f:7c:fd:09:18:26:08:57:ae:3e:6a:
b7:d7:26:2b:20:2d:dd:b5:2e:55:e3:da:51:07:27:
3c:f0:54:45:c3:5d:44:65:81:ef:99:44:d1:7f:73:
a3:3a:89:cb:f6:4a:81:b8:e2:86:e9:af:62:17:11:
e1:71:da:82:58:e3:83:9a:69:ca:86:70:6d:18:da:
e1:d3:0c:71:63:14:0d:5d:2c:af:74:75:b1:5e:c6:
b2:c4:34:22:0c:87:ee:a1:d8:1c:78:d6:8c:e8:16:
2e:fe:67:38:c0:a3:6d:b3:50:0b:05:8e:63:08:52:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:5F:3F:E7:0C:93:B1:28:D6:07:1F:E0:62:6F:FB:A7:D9:F3:00
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.217.0/24
Signature Algorithm: sha256WithRSAEncryption
59:53:04:b1:80:36:8d:7c:a4:e0:a6:01:fc:2c:45:e8:7f:dd:
a0:b4:04:5b:4d:9b:26:33:93:6c:98:3a:72:78:0b:13:05:98:
1e:a7:76:67:7e:d8:63:1c:cd:4e:32:d1:72:a6:ef:73:1d:17:
5f:76:16:00:84:ae:9d:2b:fe:47:91:1e:3a:4a:e0:4a:63:27:
60:e2:92:cb:d6:96:89:17:c6:e4:12:cc:6e:72:38:8c:60:ac:
08:de:03:b8:af:6c:08:c5:ae:b7:90:d4:d3:58:2f:ba:0c:12:
6e:d2:23:ea:5f:9b:23:e6:35:d2:31:44:ba:9e:35:2d:04:d0:
28:1d:b8:98:b3:e2:d4:3e:8d:80:4c:f6:f6:8c:64:57:8c:d6:
fc:f1:64:64:94:c7:8e:93:09:4a:d2:b9:9e:1d:af:ee:55:ff:
c5:98:e3:48:55:69:aa:89:eb:5d:5f:37:eb:4f:de:2d:45:fa:
86:92:43:ea:00:76:f8:a4:92:39:3b:31:b7:46:6d:01:27:8a:
79:16:c6:ca:b5:4a:4c:a6:0d:2e:ac:a4:ea:92:64:0d:37:ff:
77:57:9c:af:3f:f9:eb:b1:52:c1:c2:d5:21:c6:3a:c6:78:b9:
42:c5:d2:b2:80:01:81:23:e9:a2:19:28:6f:15:9c:c3:c5:2c:
a7:98:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:36 2026 by rpki-client