Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/6u9rURNU6VvYHuW7vFnRvUDoADg.roa
File: 6u9rURNU6VvYHuW7vFnRvUDoADg.roa (raw, json)
Hash identifier: 44sYLviMZntmxUuJC7HZlMHe6l/wnpvKpUkuOeagBts=
Subject key identifier: EA:EF:6B:51:13:54:E9:5B:D8:1E:E5:BB:BC:59:D1:BD:40:E8:00:38
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019FACE62EA554E05A85DA90487C9C25BEC3
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/6u9rURNU6VvYHuW7vFnRvUDoADg.roa
Signing time: Wed 29 Jul 2026 08:03:14 +0000
ROA not before: Wed 29 Jul 2026 08:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e6:2e:a5:54:e0:5a:85:da:90:48:7c:9c:25:be:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jul 29 08:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaef6b511354e95bd81ee5bbbc59d1bd40e80038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:6c:2e:55:21:32:05:98:40:b2:89:89:5f:
b0:0d:70:9d:13:25:14:55:a1:bf:54:f1:06:d6:13:
d6:15:4a:f9:52:78:6a:32:a4:a2:eb:95:94:19:da:
77:7e:d1:89:96:37:45:e1:34:6b:1b:36:ff:0d:ce:
18:c5:4f:10:7e:18:76:a4:fa:67:39:46:39:4d:c9:
85:13:65:a2:2f:fe:98:69:9b:6d:42:4d:b6:0e:66:
c2:aa:20:5d:18:72:2f:72:9c:3e:c4:78:69:7a:94:
54:4e:e2:e1:d2:6a:bf:6f:b9:bf:c6:af:c3:fa:89:
cc:1f:da:be:0e:b2:f0:24:5d:bc:8a:6b:93:89:4f:
4a:45:39:ec:eb:98:52:fd:d1:fc:d2:af:ba:20:6d:
b4:d5:e4:75:ee:2e:a8:73:7b:48:e2:d2:84:8f:0a:
1a:c3:76:51:50:dc:ae:81:da:ed:52:46:30:f4:d3:
b8:45:da:14:6b:62:3c:d5:0a:f2:a7:d8:81:3c:3d:
2c:f0:c4:94:9b:4d:fe:1d:a8:94:a8:38:d4:07:8e:
c5:08:ef:38:b5:a3:98:b9:0e:31:e9:96:cc:d3:9d:
9e:27:a2:96:ac:7c:42:d6:4c:8e:de:f7:7f:56:29:
99:c7:e1:7f:0f:0f:fb:ee:7c:9e:a1:7f:45:78:85:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:6B:51:13:54:E9:5B:D8:1E:E5:BB:BC:59:D1:BD:40:E8:00:38
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/6u9rURNU6VvYHuW7vFnRvUDoADg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
43:bf:1e:d9:53:f5:d7:5e:34:5f:65:6c:d8:eb:54:d9:c9:3e:
2e:6b:f1:cb:b3:b8:3b:79:f5:11:5e:d3:3f:89:c6:dc:54:f9:
22:f2:17:5e:43:4f:3c:1e:e0:12:00:d0:4c:ed:20:27:e1:88:
46:21:6f:3d:14:93:4f:27:1d:10:84:f4:15:ea:4b:95:2a:35:
10:00:3c:9b:57:a9:4f:7c:f0:f5:1f:bc:a0:6f:98:90:36:f6:
e4:64:97:e9:d4:20:a3:82:04:6d:cd:52:2c:a8:d3:50:93:c2:
2a:54:8c:49:43:9f:63:bd:bc:62:32:65:0b:df:af:7d:db:9a:
72:79:d0:36:f7:cd:33:00:d9:a4:d3:54:7f:92:91:e7:35:df:
b8:c7:9c:1b:00:10:a7:2d:77:6b:64:af:5f:4e:61:13:c6:09:
35:c5:61:8f:b6:59:80:24:c3:50:a8:49:15:ba:cb:4e:3c:53:
72:18:e2:44:4a:70:30:31:00:38:f1:dd:62:e5:37:eb:8c:f9:
eb:7f:bc:d2:ea:7e:01:46:a6:4c:ae:cb:f9:d6:98:63:31:5e:
dd:88:99:f8:e6:ce:88:c0:eb:14:11:d3:aa:60:06:d3:d0:3e:
e1:6b:51:74:7b:d4:7f:ed:55:83:b1:52:1d:cf:53:a3:1b:e6:
98:14:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:42:41 2026 by rpki-client