Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/H9L6_6x2hId55TmALa95rri1bEE.roa
File: H9L6_6x2hId55TmALa95rri1bEE.roa (raw, json)
Hash identifier: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=
Subject key identifier: 1F:D2:FA:FF:AC:76:84:87:79:E5:39:80:2D:AF:79:AE:B8:B5:6C:41
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CA408A2D6B2EB09CF4DB63DFBB1A
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/H9L6_6x2hId55TmALa95rri1bEE.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62047
IP address blocks: 178.216.40.0/21 maxlen: 21
2001:67c:778::/48 maxlen: 48
2001:7f8:5b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:40:8a:2d:6b:2e:b0:9c:f4:db:63:df:bb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd2faffac76848779e539802daf79aeb8b56c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:b1:00:13:d5:38:fb:45:2b:90:8c:cd:7f:
3b:8d:b0:26:a0:a7:c7:e3:9e:45:14:d9:43:a4:9b:
ca:84:d5:bf:a1:60:95:54:51:04:e5:8b:99:6a:65:
f1:8a:4f:5c:26:3e:b0:ac:b0:07:93:f0:7f:2d:f8:
da:bf:0a:22:e7:b8:bc:3e:12:6c:fb:6a:7d:68:52:
97:10:ce:6b:8b:91:8c:06:25:b0:72:70:81:66:f6:
b2:93:d8:a4:06:ab:89:bf:cb:a6:3e:14:3a:94:d2:
b7:f4:43:6f:47:13:63:76:2b:fd:51:c9:e6:8e:d0:
88:e9:57:da:b0:0c:7f:1f:23:c9:1c:68:3a:e7:3e:
76:b1:ce:b1:15:2b:37:09:5a:3c:2d:a0:96:e7:8a:
52:cd:c9:28:ab:ef:6d:57:10:a0:77:d3:49:84:0f:
ab:1b:b5:7b:83:17:1b:34:a5:c6:f2:fc:1f:94:f9:
ba:ae:e7:15:fe:6b:ea:c1:e2:27:96:71:4e:be:81:
e0:b0:d0:ee:35:5b:ac:24:4e:f8:ee:52:d3:0b:46:
ba:17:e0:42:ec:b3:7e:cd:08:3e:c6:90:8d:77:13:
e0:65:4f:ad:23:70:17:a3:61:ec:75:f2:d8:1f:e2:
02:89:9a:32:4c:be:ac:df:11:a2:8d:22:a0:4e:9f:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:FA:FF:AC:76:84:87:79:E5:39:80:2D:AF:79:AE:B8:B5:6C:41
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/H9L6_6x2hId55TmALa95rri1bEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.40.0/21
IPv6:
2001:67c:778::/48
2001:7f8:5b::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e2:31:98:64:28:e1:4b:6a:48:80:c0:7f:83:70:ad:76:8d:
7f:13:b6:02:52:93:fa:9c:2d:63:d3:24:a9:5b:68:51:b6:18:
a4:a6:e9:c8:17:fe:f6:90:74:6c:aa:49:11:84:f1:8c:6f:1c:
23:bd:03:e1:51:b4:01:b8:6d:e3:85:d2:aa:11:ab:4a:a1:57:
26:67:f7:5f:ec:17:35:95:af:86:fb:94:c0:6c:b5:4e:c0:1c:
dc:0a:d2:8a:02:fa:1a:57:9f:9c:9f:04:3d:2a:22:a2:7a:9c:
50:1c:8a:98:fd:b5:31:08:4f:96:ad:8b:22:f7:07:5d:5b:d4:
b5:38:fe:12:f2:ed:73:7d:86:bf:73:1f:9d:5d:1a:30:46:ef:
1a:f5:93:d4:06:32:5f:22:32:f8:2c:91:2f:b7:87:97:9e:e6:
76:77:f7:96:68:70:bf:38:b8:4a:e4:2c:29:ac:8c:03:84:f3:
e7:86:c0:8d:9c:0f:7a:13:5e:30:dc:d9:41:5c:e2:9a:1e:1e:
1b:96:87:6f:9c:8f:a8:11:5c:6f:71:37:2c:19:ec:d3:e5:7d:
95:39:94:b8:3e:85:87:98:2c:83:c8:56:e2:2e:06:77:cb:cc:
66:d6:8f:6b:b5:27:72:de:76:c9:a1:b7:00:99:60:e8:1e:3c:
b0:ca:26:e1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ8jaMpAii1rLrCc9Ntj37saMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm
NmExOTAwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQyZmFmZmFjNzY4NDg3NzllNTM5ODAyZGFmNzlhZWI4YjU2YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkSxABPVOPtFK5CMzX87jbAmoKfH
455FFNlDpJvKhNW/oWCVVFEE5YuZamXxik9cJj6wrLAHk/B/Lfjavwoi57i8PhJs
+2p9aFKXEM5ri5GMBiWwcnCBZvayk9ikBquJv8umPhQ6lNK39ENvRxNjdiv9Ucnm
jtCI6VfasAx/HyPJHGg65z52sc6xFSs3CVo8LaCW54pSzckoq+9tVxCgd9NJhA+r
G7V7gxcbNKXG8vwflPm6rucV/mvqweInlnFOvoHgsNDuNVusJE747lLTC0a6F+BC
7LN+zQg+xpCNdxPgZU+tI3AXo2HsdfLYH+ICiZoyTL6s3xGijSKgTp/AtwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFB/S+v+sdoSHeeU5gC2vea64tWxBMB8GA1UdIwQY
MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvSDlMNl82eDJoSWQ1NVRtQUxhOTVycmkxYkVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDstgoMBgE
AgACMBIDBwAgAQZ8B3gDBwAgAQf4AFswDQYJKoZIhvcNAQELBQADggEBAG3iMZhk
KOFLakiAwH+DcK12jX8TtgJSk/qcLWPTJKlbaFG2GKSm6cgX/vaQdGyqSRGE8Yxv
HCO9A+FRtAG4beOF0qoRq0qhVyZn91/sFzWVr4b7lMBstU7AHNwK0ooC+hpXn5yf
BD0qIqJ6nFAcipj9tTEIT5atiyL3B11b1LU4/hLy7XN9hr9zH51dGjBG7xr1k9QG
Ml8iMvgskS+3h5ee5nZ395ZocL84uErkLCmsjAOE8+eGwI2cD3oTXjDc2UFc4poe
HhuWh2+cj6gRXG9xNywZ7NPlfZU5lLg+hYeYLIPIVuIuBnfLzGbWj2u1J3Ledsmh
twCZYOgePLDKJuE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:14 2026 by rpki-client