Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8rQs6enkRh7B8ZmMCA_BuYnxHLc.roa
File: 8rQs6enkRh7B8ZmMCA_BuYnxHLc.roa (raw, json)
Hash identifier: W1/ZaVuKMkU102VUkPGBFXtZ8dzMznRX7NftAyxBAAA=
Subject key identifier: F2:B4:2C:E9:E9:E4:46:1E:C1:F1:99:8C:08:0F:C1:B9:89:F1:1C:B7
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019DDCA2CA14EEFB1DCB2E0AB0F814BEED43
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8rQs6enkRh7B8ZmMCA_BuYnxHLc.roa
Signing time: Thu 30 Apr 2026 04:25:49 +0000
ROA not before: Thu 30 Apr 2026 04:25:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402298
IP address blocks: 178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 08:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:a2:ca:14:ee:fb:1d:cb:2e:0a:b0:f8:14:be:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Apr 30 04:25:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b42ce9e9e4461ec1f1998c080fc1b989f11cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:7e:02:31:24:3f:a2:e0:22:6a:fc:b0:18:
29:e4:44:0a:db:61:07:a0:e4:a9:ee:5d:89:b5:73:
02:3b:64:83:8a:60:b2:ea:8c:d3:9e:28:db:91:11:
e2:8a:a2:eb:5e:14:10:24:0e:49:4a:75:11:1d:2a:
ae:fa:4e:de:a2:bc:84:20:02:89:46:1a:86:68:f9:
cf:2d:18:a1:2c:da:6b:1e:ba:e6:21:66:a9:28:9a:
4c:a8:ea:47:be:0f:fa:70:41:24:34:c0:7a:94:10:
fb:ad:db:28:9f:94:dd:c6:ec:76:c9:3a:90:21:1f:
2f:c6:7d:49:5b:68:20:d6:31:ef:f2:7b:72:8c:6f:
e3:2c:c1:54:35:8c:4c:bc:04:45:60:98:46:ec:97:
cf:92:7e:bd:b0:0e:dc:2b:47:d8:1e:1b:bf:1f:0a:
57:83:cf:16:80:35:04:4f:79:f8:b4:53:86:fb:63:
1f:d2:28:3b:b8:91:ae:63:3a:e8:a1:a1:b6:7c:ca:
08:92:8e:85:94:27:20:1c:e0:50:02:49:70:8a:91:
a5:66:b2:c4:10:c9:53:8c:da:c0:d9:a5:0f:e9:dd:
9d:10:f6:c1:e0:82:05:d3:68:7a:78:50:07:5f:70:
bc:b7:50:f1:7f:bd:97:84:cb:49:9b:48:45:52:73:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:2C:E9:E9:E4:46:1E:C1:F1:99:8C:08:0F:C1:B9:89:F1:1C:B7
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8rQs6enkRh7B8ZmMCA_BuYnxHLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b6:b6:31:ba:ae:39:0a:8b:30:d8:63:b2:b9:1d:28:07:0a:
a5:c6:c5:48:82:b1:90:61:3f:ac:3b:ee:15:ef:22:ef:af:d2:
32:ce:95:f6:aa:0c:fb:39:c6:07:1f:1a:d8:e3:d2:a3:fe:57:
ac:70:60:30:11:fe:1c:a4:fb:2e:5a:c4:a7:26:ee:61:82:94:
0d:af:b6:58:1a:b0:14:80:57:4e:e0:cd:0f:29:02:2b:c4:6e:
9a:f4:13:37:9b:99:a3:ab:d9:3d:0e:e1:43:d1:e7:b6:14:53:
8c:0f:17:92:ec:73:c1:69:c9:f6:6d:a3:7e:33:1a:3b:72:05:
83:c7:42:74:53:3c:01:39:af:ae:56:07:e5:62:ba:90:d4:88:
2d:e4:77:67:09:e6:71:0a:40:28:91:0f:cb:b4:81:75:e0:44:
33:09:8b:b9:94:44:3b:48:a8:3f:3e:e3:ee:63:cc:a0:3b:0d:
f3:ec:34:31:dd:52:9c:9d:62:e4:57:1c:04:dc:9a:f9:78:8f:
5b:99:54:bb:a8:b6:6f:f7:1c:19:ec:50:7a:6b:92:b4:55:60:
57:2d:5a:05:e1:d4:59:ca:5d:f8:60:85:43:d2:4b:b4:a1:48:
98:a6:7e:ae:de:42:90:53:73:da:45:ce:4a:44:59:72:de:a6:
3f:59:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:59 2026 by rpki-client