Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/3ceCFhC3pygDoMeY7wDkx7_QzAg.roa
File: 3ceCFhC3pygDoMeY7wDkx7_QzAg.roa (raw, json)
Hash identifier: 6QyVVckbf8MmsNgPj86Q2hfxojCskE4hOKYaAUJOTXE=
Subject key identifier: DD:C7:82:16:10:B7:A7:28:03:A0:C7:98:EF:00:E4:C7:BF:D0:CC:08
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 01A09000334F394065A0527D13788035091B
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/3ceCFhC3pygDoMeY7wDkx7_QzAg.roa
Signing time: Fri 11 Sep 2026 10:25:27 +0000
ROA not before: Fri 11 Sep 2026 10:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 178.18.16.0/24 maxlen: 24
178.18.20.0/22 maxlen: 22
178.18.21.0/24 maxlen: 24
178.18.22.0/24 maxlen: 24
178.18.23.0/24 maxlen: 24
178.18.24.0/23 maxlen: 23
178.18.24.0/24 maxlen: 24
178.18.27.0/24 maxlen: 24
178.18.30.0/24 maxlen: 24
178.18.31.0/24 maxlen: 24
185.211.152.0/24 maxlen: 24
185.211.154.0/24 maxlen: 24
185.211.155.0/24 maxlen: 24
194.60.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:00:33:4f:39:40:65:a0:52:7d:13:78:80:35:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Sep 11 10:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddc7821610b7a72803a0c798ef00e4c7bfd0cc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:13:98:7f:8e:dc:9d:4c:2a:ea:a4:17:57:
20:8b:13:e2:e3:51:20:0d:3e:ff:f5:38:fb:e7:e8:
0e:13:6e:ae:b6:7e:71:bb:a2:aa:9d:96:8b:c0:01:
fa:b1:00:3d:bf:e9:a5:99:b7:32:e3:c4:a6:81:0f:
8b:a7:24:7d:9a:85:08:53:34:ce:09:90:ff:8d:53:
ab:fa:5c:17:90:39:21:1d:ed:db:68:be:35:a0:3f:
a0:aa:3f:b8:83:99:d9:b7:85:a7:67:39:03:78:82:
6a:c2:ba:29:e8:3e:f9:ed:75:68:15:21:66:9a:99:
66:c8:8c:1e:76:1f:39:3c:92:b0:74:57:19:d5:00:
c3:65:f5:76:f9:82:13:bf:97:b9:cb:e5:e8:40:d3:
8a:35:24:6f:36:9b:4e:e7:6d:8a:48:55:ad:47:b3:
55:ec:84:c8:11:9f:92:68:0c:8a:9c:e5:b2:3c:e4:
d2:22:5c:a4:90:93:44:6c:5d:b8:41:1d:73:96:06:
c2:d5:1b:f3:7f:6c:f6:b4:b4:78:f2:8d:24:03:03:
6c:10:97:96:a8:f7:b5:9c:b1:b6:08:eb:8e:dc:ac:
d9:29:8d:eb:a0:07:ac:c6:0d:12:5a:2a:ee:fc:19:
be:af:6a:2d:8b:8f:7b:41:6a:c6:a6:a4:4f:2c:26:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:82:16:10:B7:A7:28:03:A0:C7:98:EF:00:E4:C7:BF:D0:CC:08
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/3ceCFhC3pygDoMeY7wDkx7_QzAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.16.0/24
178.18.20.0-178.18.25.255
178.18.27.0/24
178.18.30.0/23
185.211.152.0/24
185.211.154.0/23
194.60.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a7:1f:fe:4c:8c:0b:fb:b0:ce:52:6e:84:d4:88:3d:4b:ce:
91:ba:2c:3c:b2:fb:30:8c:e1:c7:79:4f:a3:9d:60:da:52:54:
6e:38:21:dd:8d:a9:de:d5:d2:75:bb:fc:37:5c:29:83:50:cb:
90:cc:22:b7:fb:a7:87:cb:ec:8c:1f:c3:04:3b:7f:56:c9:bc:
77:32:09:ff:bd:c6:c6:54:55:97:96:69:af:cf:e8:27:fa:44:
3e:82:28:4d:d9:0a:d0:b5:33:5e:5d:4b:8b:81:0b:4a:77:40:
4a:2e:97:72:1d:ac:81:19:c3:3a:ae:6d:8f:51:b9:e3:ad:26:
bb:5b:90:8e:fd:42:61:1b:95:89:86:18:bf:0e:c6:0e:3b:43:
3c:94:47:59:af:23:83:b3:d7:e4:14:d3:43:88:2a:1f:25:ea:
6d:d6:0a:60:82:c2:5d:11:c7:f4:64:61:c2:1b:ee:af:82:d8:
52:00:81:ef:94:4a:9d:72:36:d8:a2:0e:74:76:e9:0b:ad:02:
f1:51:de:5a:b9:22:8a:d3:d8:47:28:a6:65:22:c9:93:f2:c5:
b2:10:5d:15:4f:ca:68:e8:8c:28:b7:60:6b:49:68:52:3e:c1:
51:85:24:7a:71:a9:e8:29:99:38:c9:70:f0:60:cc:e2:68:2c:
8e:b8:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:43:55 2026 by rpki-client