Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VhdKFflL6wzVMXCQhX8bkLBALKo.roa
File: VhdKFflL6wzVMXCQhX8bkLBALKo.roa (raw, json)
Hash identifier: GmQzzs1E/5GYPLQuRjYECvhEeGtOhpZPCBL21n8gXMM=
Subject key identifier: 56:17:4A:15:F9:4B:EB:0C:D5:31:70:90:85:7F:1B:90:B0:40:2C:AA
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019E4B69F91670ABD3F47E30FD82795A9294
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VhdKFflL6wzVMXCQhX8bkLBALKo.roa
Signing time: Thu 21 May 2026 16:41:36 +0000
ROA not before: Thu 21 May 2026 16:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203758
IP address blocks: 178.214.209.0/24 maxlen: 24
178.214.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:69:f9:16:70:ab:d3:f4:7e:30:fd:82:79:5a:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: May 21 16:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56174a15f94beb0cd5317090857f1b90b0402caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:5b:f3:02:37:4d:d6:8b:75:f1:e2:65:87:
6d:37:9c:de:b7:5d:75:1f:e9:2c:2e:e3:eb:6e:80:
a7:5e:54:e5:2a:88:8e:d2:f7:f6:07:35:81:97:d5:
85:27:c3:a9:d0:48:55:69:e1:34:88:96:7e:d9:27:
50:48:a8:ea:ad:17:ef:7d:04:5b:6b:76:5d:37:8d:
3f:cf:0f:e6:2a:44:69:60:a1:02:38:7d:74:2a:98:
cf:2a:23:5d:68:5f:21:ee:90:0f:c3:4b:b0:ec:f9:
5a:01:e5:38:6b:a5:72:76:b1:ac:b3:8a:00:b6:de:
96:c2:a2:e7:de:97:23:9b:62:58:96:a6:a4:75:44:
09:4f:6f:55:17:59:9f:8a:14:7e:76:db:0a:ba:fd:
d1:cb:47:cf:fa:c0:9b:e8:bd:dc:fb:88:4d:63:ae:
70:3e:83:53:72:69:f6:c4:46:17:1a:1e:d8:62:a4:
2e:b2:3f:19:af:e9:33:1e:28:c2:ba:1c:84:2c:1d:
ec:9e:19:9a:2b:6d:69:ed:4f:da:14:f9:16:08:1e:
49:a4:e3:eb:c9:7d:8e:70:ab:d8:a5:29:6c:14:9e:
3a:ce:0e:5e:63:05:5a:4d:4d:a6:ef:30:ab:69:f9:
51:a4:3b:2b:3e:6b:c6:fe:bf:52:df:8e:84:a1:a0:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:4A:15:F9:4B:EB:0C:D5:31:70:90:85:7F:1B:90:B0:40:2C:AA
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/VhdKFflL6wzVMXCQhX8bkLBALKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.209.0/24
178.214.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1c:82:c6:13:ec:0d:8f:a6:54:27:a0:0f:7a:07:b7:6d:f1:
92:1d:2f:2e:a5:ae:97:e4:70:78:9d:53:e0:65:dc:96:4c:01:
eb:29:a3:40:fc:a3:ef:12:f4:77:bf:94:77:36:a6:18:dc:9b:
3d:f4:9a:e5:47:eb:f1:8e:61:43:07:cd:f8:82:e3:f5:9b:58:
28:d7:43:2a:c3:58:98:af:aa:a2:82:36:94:35:83:e9:5e:f0:
f5:bd:d4:a6:00:37:2a:04:34:19:36:1e:81:c5:f1:64:4d:1b:
36:db:33:bf:27:19:d8:9f:a9:90:31:63:14:51:c4:55:a8:ee:
aa:2d:5b:ec:35:a7:b6:5c:28:af:30:cf:66:52:41:a8:a9:be:
18:94:68:ae:ef:86:29:8f:1d:81:a8:3c:12:38:74:64:5f:2c:
72:a2:b4:37:2c:7f:3d:2a:cf:04:71:17:16:bb:77:ca:f6:84:
6d:e0:c7:3f:77:78:0c:fc:f5:c3:19:0a:0a:71:3f:8b:2b:2a:
89:fc:35:ac:b5:88:e7:fd:57:16:b9:15:8a:f6:87:b6:b6:aa:
5f:64:4f:6c:3d:f2:52:fa:49:35:75:8b:28:da:a8:1e:c3:76:
85:a7:d0:e2:0c:82:5d:3f:ec:a1:fc:c2:38:e3:1a:ea:90:e1:
a1:8b:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:19 2026 by rpki-client