Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/wTiLBx3d6nArSMvvuGONeX8tzoU.roa
File: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (raw, json)
Hash identifier: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=
Subject key identifier: C1:38:8B:07:1D:DD:EA:70:2B:48:CB:EF:B8:63:8D:79:7F:2D:CE:85
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D35CFB40C9B2D775BCFF0EE5BA1FF158E
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/wTiLBx3d6nArSMvvuGONeX8tzoU.roa
Signing time: Sat 28 Mar 2026 18:58:17 +0000
ROA not before: Sat 28 Mar 2026 18:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147293
IP address blocks: 178.214.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:cf:b4:0c:9b:2d:77:5b:cf:f0:ee:5b:a1:ff:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 28 18:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1388b071dddea702b48cbefb8638d797f2dce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:28:06:d2:c8:80:92:a7:3a:4f:29:70:78:
c2:59:82:3b:44:0b:f6:8c:41:e2:24:24:50:92:ff:
bf:1e:3a:8e:76:62:d3:ef:ae:41:03:f7:74:30:db:
f8:9a:11:d9:af:76:ae:ee:46:37:7c:2d:2c:d9:49:
a3:1a:d0:ed:03:44:e3:5b:72:15:99:6b:27:91:70:
7e:54:da:fb:bb:a2:a6:a7:7b:84:55:f2:12:d6:00:
37:f4:a6:21:9b:a1:dd:7e:5d:32:95:40:89:71:ec:
8b:d5:d9:2e:15:4c:bf:4d:b1:f3:93:85:4a:65:8a:
59:61:e7:3c:74:46:c7:b5:89:2a:cf:da:6a:e4:d6:
7c:7b:58:3b:bb:a4:53:d6:56:ca:40:e5:27:32:56:
ef:8b:30:ce:d5:83:26:58:36:50:3e:cb:d4:19:a9:
0f:72:d2:ae:fe:da:70:36:1e:98:85:19:e0:78:89:
69:d7:d4:fa:b7:73:e6:f2:45:d0:ba:ec:3c:c4:4f:
a8:5d:99:3d:68:6b:c5:5f:3e:57:70:13:b6:c3:89:
94:c7:9a:fd:b0:b9:5d:cb:8e:43:b6:56:f1:ba:d2:
7a:6a:2b:14:b3:c3:9b:3a:07:bf:cd:a1:b2:cd:35:
3c:5d:00:09:07:cb:29:80:b0:28:9b:54:c2:2d:9c:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:8B:07:1D:DD:EA:70:2B:48:CB:EF:B8:63:8D:79:7F:2D:CE:85
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/wTiLBx3d6nArSMvvuGONeX8tzoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.220.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ee:3d:20:4a:ea:5d:78:52:e6:8d:04:e3:64:e7:4f:eb:cc:
0c:c8:65:66:f8:0d:28:6c:d7:64:59:91:85:31:08:fd:7e:12:
65:fc:6d:5b:6a:54:23:ff:ce:96:e5:63:88:0a:81:1b:9f:42:
2f:fb:df:fa:b6:91:21:3e:04:0d:53:e6:6d:17:d5:49:a4:89:
24:ab:14:86:9b:e6:bc:91:bf:1d:8f:38:f6:af:69:55:54:a9:
af:d5:f4:4b:58:26:56:46:37:c0:b0:94:35:54:52:88:a1:ed:
91:a1:eb:9d:96:56:77:cc:51:e0:8f:5a:1b:5a:0c:4d:25:ac:
57:31:c1:54:f4:02:69:da:27:cc:bd:0f:fe:6c:ca:e3:0a:11:
ac:5a:25:75:c3:38:30:bf:74:7c:ba:7e:37:e1:aa:af:ad:c7:
c1:55:9b:ba:ee:89:84:6c:a1:db:1b:e9:49:48:cb:72:a8:8f:
d3:24:ce:90:d0:9e:c1:56:9a:bd:a0:cb:a2:74:ba:92:a3:92:
ba:f9:25:aa:7d:48:02:c6:2d:9e:5c:fb:5d:80:7f:17:1e:e3:
e2:41:c3:1a:b3:35:88:81:59:cb:e0:98:2c:0e:66:c5:70:0c:
7d:6b:4a:0d:76:0b:f9:2f:ea:2b:2b:2c:99:66:5c:7a:85:5f:
37:78:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:16 2026 by rpki-client