Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zaFoTb-Cz--P2qlskcEQ0P7XHE0.roa
File: zaFoTb-Cz--P2qlskcEQ0P7XHE0.roa (raw, json)
Hash identifier: gAXDRqc5IcmVJnapVHi/NeRgrX+F+F1JeIH/NTIu3N0=
Subject key identifier: CD:A1:68:4D:BF:82:CF:EF:8F:DA:A9:6C:91:C1:10:D0:FE:D7:1C:4D
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019FA400E4B5690E46A11DAAFDEF9DAA38B5
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zaFoTb-Cz--P2qlskcEQ0P7XHE0.roa
Signing time: Mon 27 Jul 2026 14:35:49 +0000
ROA not before: Mon 27 Jul 2026 14:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140185
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:00:e4:b5:69:0e:46:a1:1d:aa:fd:ef:9d:aa:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jul 27 14:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda1684dbf82cfef8fdaa96c91c110d0fed71c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:9e:a0:aa:58:66:87:c9:2b:8c:2c:1b:d8:
f3:46:a2:c4:50:3f:66:a1:e9:d2:2a:12:2f:6c:d2:
bc:64:18:7b:89:2c:d0:c0:9e:24:87:0f:ff:ee:f1:
23:54:9f:f4:1b:78:23:62:9c:2b:28:35:fc:c8:f5:
13:54:b2:28:37:c1:77:e1:43:da:ff:5b:6d:87:7f:
bf:c8:49:87:eb:b0:2f:94:54:17:cf:05:25:e8:fc:
12:da:8c:b4:24:b5:35:54:fa:e1:c7:10:73:b7:b4:
9c:dc:7b:c1:55:4a:ce:1c:47:80:a1:c8:fd:11:5e:
d1:a1:49:4a:1b:5c:e9:dd:4f:5e:d3:bc:6e:27:51:
ab:f1:62:c9:40:9c:82:14:65:fe:c6:4e:0a:39:14:
27:f8:af:ab:41:09:7c:93:e7:c5:ab:9c:19:1a:84:
24:b7:cd:9b:55:f0:04:02:b9:9e:02:f3:93:22:90:
a0:dd:86:cb:68:5d:ff:1e:c2:0b:eb:3c:29:92:7d:
80:28:21:d3:e6:22:59:38:dd:44:6c:1a:dd:f4:fc:
8d:64:ec:3f:10:6c:4e:fb:0c:3c:30:5e:90:30:a2:
e1:09:f8:79:d7:ba:65:44:e9:63:54:0d:d8:fd:7d:
3a:6a:51:c1:09:29:17:e0:5c:d3:be:7c:5f:0f:93:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:68:4D:BF:82:CF:EF:8F:DA:A9:6C:91:C1:10:D0:FE:D7:1C:4D
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zaFoTb-Cz--P2qlskcEQ0P7XHE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ee:b9:92:98:21:bb:2c:6d:32:1d:53:a6:ba:2e:c0:96:79:
96:dc:94:c4:ae:f1:30:42:51:07:af:8c:b7:25:a4:c9:9f:a8:
b0:5a:e9:42:da:62:b8:85:55:2a:2e:58:bc:97:bf:9d:a2:9c:
9c:66:06:e3:10:d2:6a:17:8d:0e:c0:db:ca:eb:f1:1a:60:46:
32:ea:2f:42:90:fc:a7:1f:5d:75:c9:51:8c:75:76:05:b8:53:
e9:28:1b:fb:66:f9:8b:15:3b:00:c3:e0:78:fb:12:ff:5a:7a:
62:2c:50:f2:f7:2c:8f:04:db:20:9c:c6:37:12:ae:b3:2f:a3:
47:63:1c:a2:91:55:45:b1:65:61:75:64:e2:9c:c1:4d:30:03:
05:00:30:a7:16:6b:78:d3:be:7e:8e:08:01:da:3b:2b:95:24:
7d:26:13:af:82:d9:36:03:4a:b9:13:43:8b:83:e3:22:a6:2a:
f3:64:a3:de:70:c9:2d:27:49:3a:44:71:72:a6:ed:3e:ef:fa:
90:66:89:80:b9:be:89:0a:35:25:d3:1b:19:6f:8b:61:1c:30:
32:60:67:13:36:78:99:50:90:37:aa:0a:44:90:1f:06:d8:c9:
34:94:df:5d:96:80:a2:9b:bc:f7:b3:40:60:d9:79:6a:ad:20:
b9:b2:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:07 2026 by rpki-client