Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa
File: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (raw, json)
Hash identifier: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=
Subject key identifier: 22:09:8B:5A:0C:43:A1:37:92:BB:86:63:D4:8A:BE:B2:6D:A4:80:C3
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019B79ED02066869F02A706D5F9959872CFC
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa
Signing time: Thu 01 Jan 2026 14:18:54 +0000
ROA not before: Thu 01 Jan 2026 14:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216423
IP address blocks: 178.219.157.0/24 maxlen: 24
178.219.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:02:06:68:69:f0:2a:70:6d:5f:99:59:87:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 14:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22098b5a0c43a13792bb8663d48abeb26da480c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:c7:1f:c8:dc:87:e2:e5:b5:c0:47:4c:5c:
ef:8f:75:91:57:fb:7c:ad:78:a7:d7:96:79:f1:c6:
77:9a:5f:bd:da:07:35:5e:5e:7e:82:5a:b7:d4:60:
fd:f0:38:1f:01:02:17:51:45:e2:3a:8f:ef:88:f7:
81:6e:87:a7:f4:1e:1d:cb:c7:e7:1b:bf:8b:3b:94:
8b:4a:a7:e2:97:24:86:2d:3b:8d:8a:be:b2:94:14:
b8:ac:63:0f:84:eb:ff:a7:15:c0:ce:e8:bd:ad:29:
1f:e3:f4:66:5b:fa:a9:63:8b:a6:68:92:30:3e:1a:
8e:4b:d5:b3:4c:66:0f:fe:2a:c9:97:ae:22:57:29:
f2:8f:f2:ce:2f:f2:e2:42:42:6e:20:8d:aa:a6:4b:
93:41:e8:e2:04:38:33:b4:80:16:26:07:90:15:b8:
6a:27:f7:11:fe:24:c6:52:dd:5d:e9:4f:d9:0a:88:
b2:26:be:c6:8d:28:76:1b:78:51:7f:56:79:20:29:
47:ce:7e:b2:b9:8e:1f:fc:12:31:12:46:76:1d:1b:
0e:1b:69:05:da:52:af:17:a7:6c:78:08:5c:9f:ba:
79:c9:e0:91:d0:ca:c2:e1:dd:2b:9a:3e:72:c7:ef:
41:47:c2:fd:75:45:aa:2a:be:c7:83:71:b9:65:55:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:8B:5A:0C:43:A1:37:92:BB:86:63:D4:8A:BE:B2:6D:A4:80:C3
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.157.0-178.219.158.255
Signature Algorithm: sha256WithRSAEncryption
b4:70:26:ee:ff:fd:8d:96:d7:c7:05:62:f4:88:37:6c:8c:b3:
12:cd:58:63:66:0d:72:9d:40:f1:08:e5:a7:72:de:27:06:f8:
d3:62:d5:c0:9e:76:33:67:33:b2:93:96:4b:6a:43:75:b2:21:
77:87:85:2d:f1:ee:8a:f5:0c:56:6f:a0:45:9d:7c:67:c6:cd:
e7:cb:25:c0:9a:e3:df:a6:40:f7:12:96:7a:e9:4f:c8:d0:77:
20:f7:e5:72:4a:20:db:b6:d3:26:e9:d6:47:f0:ca:f9:fe:f5:
a7:70:0a:e3:f8:7a:ce:ba:cf:ef:2e:76:e7:3b:b2:d6:81:98:
0b:a6:1d:a8:36:cd:4a:06:48:9a:1d:25:bf:2f:92:60:73:6d:
ee:13:92:7e:dc:40:4e:04:b0:39:77:33:91:a4:c2:ef:d5:9c:
a1:c8:f6:c4:43:47:4d:18:16:08:62:06:d9:12:15:01:3a:43:
88:20:f9:07:c9:ac:73:58:19:87:59:e7:7b:6c:69:83:3a:7b:
95:b0:12:ff:fa:33:8c:ae:ce:65:d5:d6:68:40:f3:4a:bf:7d:
4c:48:18:73:73:4b:ea:6e:4e:a5:19:a2:39:a9:14:e5:3f:6c:
17:c4:19:76:d5:16:99:15:5c:e7:37:d1:bd:ee:a3:71:24:af:
73:0d:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:47 2026 by rpki-client