Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/URQ0ixwikEDnD5vaplcoCL7PWCE.roa
File: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (raw, json)
Hash identifier: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=
Subject key identifier: 51:14:34:8B:1C:22:90:40:E7:0F:9B:DA:A6:57:28:08:BE:CF:58:21
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019B79ED00461FF6A92523C5AA1373810725
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/URQ0ixwikEDnD5vaplcoCL7PWCE.roa
Signing time: Thu 01 Jan 2026 14:18:53 +0000
ROA not before: Thu 01 Jan 2026 14:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57803
IP address blocks: 178.219.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:00:46:1f:f6:a9:25:23:c5:aa:13:73:81:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 14:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5114348b1c229040e70f9bdaa6572808becf5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:64:8c:8b:db:38:00:a1:9f:d7:97:cd:14:
9b:e6:db:57:bb:e4:a6:3d:c7:4d:5f:40:63:31:e8:
b5:75:9b:f8:9e:12:14:23:22:26:2f:80:f8:fc:60:
63:b0:bb:c0:c0:68:eb:76:b2:5f:87:d5:eb:48:97:
f5:c8:66:3d:1e:59:ca:5e:95:06:6b:13:92:3e:3c:
b0:3e:76:4c:90:4e:70:7c:ac:d0:e4:4e:f8:30:25:
d6:54:5f:03:b9:b0:61:3a:37:a7:1e:e8:93:18:2c:
a8:16:67:e7:02:5b:35:7e:c0:71:ac:44:81:bb:cb:
55:58:40:36:91:9e:8a:5a:35:33:00:2b:42:63:8b:
5b:f3:0a:b4:03:8a:71:2b:64:dc:a4:f7:c6:a3:92:
ef:a8:81:17:63:ce:e2:68:08:0b:3c:a9:e9:7f:01:
c0:28:3a:40:3f:14:c1:fd:c5:ab:ff:5e:71:f9:f9:
58:94:74:85:29:de:dc:a9:c0:c7:4a:18:27:a9:53:
2e:c0:47:66:0f:2c:d1:83:d6:d7:1e:31:83:b5:95:
65:67:92:d6:e0:d1:f5:95:a7:cf:56:46:b2:f4:cf:
7d:4f:03:df:31:cc:69:be:b7:3b:d1:de:24:23:cc:
00:83:c2:7a:4a:47:06:d7:ec:05:ce:da:72:dd:19:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:34:8B:1C:22:90:40:E7:0F:9B:DA:A6:57:28:08:BE:CF:58:21
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/URQ0ixwikEDnD5vaplcoCL7PWCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.152.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bf:ed:e0:1c:50:83:3c:d1:4d:26:08:27:07:05:05:ef:60:
f8:25:1f:0c:44:dc:14:6d:50:6d:6c:45:98:2f:d3:86:e1:ee:
e1:25:97:08:e7:61:61:69:cf:c9:94:42:c5:e8:be:1b:70:53:
a6:a7:d5:f0:c3:59:97:57:0e:70:4c:4b:70:f0:c5:80:13:89:
fc:54:16:80:92:64:21:8c:f4:49:a6:4d:9b:3c:ff:45:e4:40:
8c:21:7d:1f:f2:9a:8c:2c:6a:b1:c3:11:17:52:a3:63:cd:bf:
95:86:45:78:4d:de:47:0f:b5:bf:55:71:68:75:cb:50:cb:cf:
1b:84:64:14:d9:10:87:42:4b:85:81:a0:56:cd:a6:53:66:db:
12:0b:55:3a:03:2b:8a:b1:17:d6:1e:c2:f8:8c:d7:97:0c:e3:
5d:de:a4:c3:21:e2:39:90:17:8e:3c:a5:19:2a:cd:57:35:92:
d9:53:53:aa:28:bb:7a:d6:8a:f5:1b:e6:36:72:e2:c6:75:fc:
c1:f7:82:fb:a6:f3:3c:7d:66:ce:a0:6b:f7:3a:fa:d4:a6:27:
e8:fe:f7:65:fb:46:9d:b5:74:e1:11:a7:0c:07:e6:70:b9:ff:
07:6a:07:3f:f0:62:d0:fe:3e:8e:3e:3d:b5:0e:1e:7f:f0:81:
69:37:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:11 2026 by rpki-client