Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/uDc2pV6zqfjwI-4br5JK6tiGG5E.roa
File: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (raw, json)
Hash identifier: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=
Subject key identifier: B8:37:36:A5:5E:B3:A9:F8:F0:23:EE:1B:AF:92:4A:EA:D8:86:1B:91
Certificate issuer: /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial: 019D7219B3147BEDFC8DA0F2EDF56E6ED2CB
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/uDc2pV6zqfjwI-4br5JK6tiGG5E.roa
Signing time: Thu 09 Apr 2026 11:56:19 +0000
ROA not before: Thu 09 Apr 2026 11:56:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21060
IP address blocks: 178.20.216.0/24 maxlen: 24
178.20.217.0/24 maxlen: 24
178.20.218.0/24 maxlen: 24
178.20.220.0/24 maxlen: 24
178.20.223.0/24 maxlen: 24
2a01:7cc0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:19:b3:14:7b:ed:fc:8d:a0:f2:ed:f5:6e:6e:d2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Validity
Not Before: Apr 9 11:56:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b83736a55eb3a9f8f023ee1baf924aead8861b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:96:0f:1e:11:e3:c1:57:c5:1d:41:bf:3a:
91:78:e5:02:93:b4:b1:08:43:5a:bd:cc:96:09:64:
1f:be:ba:14:49:25:6c:60:e5:bd:20:43:87:93:3e:
71:a0:8c:e8:9f:26:5b:5d:65:32:a5:52:96:71:99:
81:66:ae:ba:15:75:33:72:51:ee:0d:3d:ae:74:7b:
45:70:a1:27:78:35:f3:cd:e0:30:d8:a6:98:22:f2:
eb:4a:4e:5b:fd:73:a5:fd:34:9a:9a:09:be:34:81:
8c:57:d4:52:f7:45:0e:f6:95:e7:ae:06:47:7b:1e:
9a:04:b3:2d:77:ec:a1:88:a8:1f:1a:af:b7:b0:f1:
f4:45:e4:b1:81:00:53:e6:4e:9f:4f:66:6c:1d:22:
fe:ef:fc:5c:52:5f:2a:dd:a7:c0:1c:d0:8f:e8:ed:
ea:4e:f9:4d:04:45:0a:70:3c:85:c5:b8:29:7b:3f:
f1:d5:03:88:e9:52:e2:4c:e0:0f:5d:d1:95:02:e7:
aa:80:7f:05:09:af:8b:fb:f8:82:f6:32:ad:04:fc:
6c:e7:8c:1a:6d:21:86:8d:e2:ed:46:cb:93:22:9a:
a4:53:41:f5:b5:d8:93:21:3a:c8:a7:e8:2b:66:db:
12:15:60:e4:fc:5c:ae:c2:32:bf:69:71:1c:67:67:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:36:A5:5E:B3:A9:F8:F0:23:EE:1B:AF:92:4A:EA:D8:86:1B:91
X509v3 Authority Key Identifier:
keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/uDc2pV6zqfjwI-4br5JK6tiGG5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.216.0-178.20.218.255
178.20.220.0/24
178.20.223.0/24
IPv6:
2a01:7cc0:100::/40
Signature Algorithm: sha256WithRSAEncryption
91:1b:3b:2c:6b:d7:0d:81:97:68:03:8c:14:e8:2e:f8:f0:a5:
16:ba:40:67:b4:d1:83:56:31:19:1f:64:9a:a3:43:49:16:41:
17:66:18:fe:6f:2c:57:8c:8b:32:43:0c:b7:ac:be:aa:58:b2:
f3:8d:02:8c:8c:7c:c2:c8:e6:c5:04:1a:c7:a0:34:b1:45:8e:
3f:70:15:70:a1:76:da:ef:a3:0c:d9:b1:bc:0d:ed:8d:cf:54:
c7:20:51:53:98:d7:e2:da:0a:80:7e:76:38:04:af:bc:6a:d8:
6f:99:96:de:09:95:4e:bc:5f:56:78:01:f0:23:59:82:7a:95:
9f:6c:4d:9f:d5:d2:0e:a3:a9:77:32:d0:f8:e3:96:e3:c6:1a:
dc:7c:cf:06:5a:e6:19:91:37:b6:df:82:53:5a:f5:a6:8d:f3:
71:b5:3f:8f:ad:fd:8f:56:f9:57:2f:e2:ff:c6:fc:85:0e:64:
7e:8f:81:4a:47:76:c0:5a:8e:c7:b6:74:f4:41:13:ff:53:38:
e7:3e:ca:91:46:f1:06:98:4f:8a:03:e5:19:00:62:b2:7c:d4:
d6:de:d4:c1:fd:ee:7b:44:ed:aa:52:80:e0:04:1c:77:69:e3:
ac:8a:96:8b:ce:cf:0e:f6:01:15:29:19:c1:50:03:47:22:c4:
4d:c9:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:17 2026 by rpki-client