Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/sBXE0h-nfhY0aVSr0UrybyFD5aw.roa
File: sBXE0h-nfhY0aVSr0UrybyFD5aw.roa (raw, json)
Hash identifier: tM7b2uWuTencQIn+E0ctaZfEIO5WQmmj9VY8B6PPOxo=
Subject key identifier: B0:15:C4:D2:1F:A7:7E:16:34:69:54:AB:D1:4A:F2:6F:21:43:E5:AC
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D4538B5EAAE4EB0F6434887F8D85F7EE4
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/sBXE0h-nfhY0aVSr0UrybyFD5aw.roa
Signing time: Tue 31 Mar 2026 18:47:17 +0000
ROA not before: Tue 31 Mar 2026 18:47:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203758
IP address blocks: 178.214.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:38:b5:ea:ae:4e:b0:f6:43:48:87:f8:d8:5f:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 31 18:47:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b015c4d21fa77e16346954abd14af26f2143e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:7a:d1:00:e1:c0:96:12:fb:eb:b6:9b:a8:
91:ad:3b:ab:89:eb:61:67:40:4c:cd:58:68:2c:61:
77:5d:24:40:5e:1b:ea:17:19:5b:f0:3d:c3:4b:71:
2f:79:32:37:72:62:ca:47:db:15:de:b9:6c:cb:ae:
a5:83:23:3b:93:49:38:05:f1:36:be:47:94:56:b1:
0f:0e:8f:bd:73:56:2a:8d:43:96:98:47:38:9d:2c:
51:52:fc:fd:41:4d:0b:56:4b:cf:87:c5:41:b5:61:
6a:fa:b6:34:35:f4:69:66:a8:d1:64:54:a1:11:b4:
56:92:09:fd:9b:bc:75:fb:b0:ec:22:f1:40:1d:21:
2b:be:7e:23:5a:f5:22:aa:0f:14:d2:f4:e8:fa:7c:
35:b1:a5:1c:61:03:85:cb:f1:a0:63:4e:84:45:b6:
18:6b:6e:c9:49:4e:65:42:30:91:8e:3b:df:0c:5b:
8b:bf:ca:9b:c4:82:e7:ac:7d:4c:47:14:85:08:c6:
bf:97:55:39:db:ba:90:75:4c:5c:f0:d9:d4:72:5e:
18:78:ea:95:49:b9:b5:ba:aa:6a:41:cf:fc:39:2b:
4a:2c:20:a5:31:a2:df:f1:67:f4:cf:cf:0e:74:dc:
0a:02:0a:f6:a9:6c:88:9f:89:b9:60:c4:fc:56:3d:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:C4:D2:1F:A7:7E:16:34:69:54:AB:D1:4A:F2:6F:21:43:E5:AC
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/sBXE0h-nfhY0aVSr0UrybyFD5aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3d:df:5c:27:e4:67:14:03:63:d3:a3:f5:98:82:27:af:b3:
9c:78:f6:b2:86:64:0c:4a:5e:cb:54:98:32:5b:57:0b:08:3b:
e2:a5:44:ec:d9:34:34:87:bf:36:63:9c:25:75:63:34:19:81:
7f:21:75:f6:c1:d2:ac:10:d0:1f:27:16:54:62:df:7c:5b:f3:
9f:ba:48:c3:4d:55:4f:a5:a8:12:bf:4f:92:5e:d6:3f:f8:b4:
0c:2c:57:c6:52:b9:67:ff:a7:02:8a:98:5a:bd:23:cf:4d:03:
b5:5c:a4:d1:c6:c6:f2:cd:b0:11:50:3f:63:bb:08:b8:75:0e:
f4:f5:04:10:e8:9a:5e:76:1d:f2:cf:ea:f9:e7:32:ac:51:4d:
57:d4:71:d8:48:45:e0:d5:6e:77:07:51:89:4b:1b:b1:21:ea:
3f:e2:04:94:a9:01:d3:e0:f0:0d:0d:e3:e3:86:8e:8a:18:83:
4e:21:7b:b5:80:8a:67:7a:80:bb:15:b0:19:52:4d:09:ce:eb:
9c:38:4f:f7:49:66:4b:b8:83:6d:6f:b1:b1:c9:f7:eb:a8:05:
f5:9b:7c:86:24:18:3b:50:0c:16:f8:ca:a4:5a:d0:8f:17:d8:
b2:5d:5d:a6:9a:ef:64:5b:a2:9d:dc:ba:45:93:cc:4b:c6:4f:
21:30:99:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:15 2026 by rpki-client