Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j7VMgC-Y7kBl15IOmRdK1TRhfDY.roa
File: j7VMgC-Y7kBl15IOmRdK1TRhfDY.roa (raw, json)
Hash identifier: rV91JveXZv0q0j0HsBthL8MUzxJDZZnC9/vmFxnlmD8=
Subject key identifier: 8F:B5:4C:80:2F:98:EE:40:65:D7:92:0E:99:17:4A:D5:34:61:7C:36
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019CC2AA0AC5F5155C4E9E4F84A28E715CB2
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j7VMgC-Y7kBl15IOmRdK1TRhfDY.roa
Signing time: Fri 06 Mar 2026 10:20:49 +0000
ROA not before: Fri 06 Mar 2026 10:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35545
IP address blocks: 178.254.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:aa:0a:c5:f5:15:5c:4e:9e:4f:84:a2:8e:71:5c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Mar 6 10:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fb54c802f98ee4065d7920e99174ad534617c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:fc:8b:9c:79:02:40:ec:61:d7:f0:74:20:
c0:19:60:78:6f:2a:35:d2:40:4f:d9:89:84:6b:d0:
4d:f7:ff:f5:4d:de:d2:8c:16:42:05:dc:f6:66:1d:
16:07:90:dd:52:c4:2d:b6:96:76:95:8f:a7:41:9b:
e7:d5:4b:0f:a4:d3:32:18:00:08:42:f9:0b:c6:e4:
9f:2a:6e:aa:e8:7b:1f:68:1b:19:7d:f0:2f:d0:f8:
d4:e3:1f:dc:a2:ae:70:be:5d:a5:9f:3c:eb:5f:a2:
cd:54:9e:f4:4a:48:9e:8c:b3:fa:f3:35:25:82:1f:
65:81:9f:64:87:c3:e7:84:d6:d8:41:18:2f:0e:8c:
5f:59:07:0f:b3:08:62:9b:2c:14:fa:e6:b9:0e:df:
3f:d0:f2:38:fb:6d:26:be:f5:b6:16:31:07:22:aa:
dd:05:1f:3b:69:ef:15:a5:ca:19:b0:02:01:cc:a8:
22:5f:7d:1c:51:6b:b4:87:ad:da:f2:c1:ff:b6:a8:
f7:52:35:31:87:f9:bf:8f:20:b9:d0:57:72:98:4f:
8e:58:59:08:fc:01:18:8f:84:bc:cc:17:05:2b:a6:
fe:20:7e:de:40:c2:b8:b3:22:74:5c:59:b4:a3:9c:
64:cc:36:9a:c4:ad:0a:aa:a8:40:5d:fe:e9:ab:b3:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:4C:80:2F:98:EE:40:65:D7:92:0E:99:17:4A:D5:34:61:7C:36
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j7VMgC-Y7kBl15IOmRdK1TRhfDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.181.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b7:a9:81:04:d5:52:96:83:c6:53:17:cb:0a:60:ed:17:81:
93:e1:94:d8:43:fe:c4:69:81:1e:b2:09:dc:f2:5c:6d:90:38:
97:dc:76:5f:92:b2:a5:8b:72:a0:9d:a3:72:cc:6b:0f:07:5c:
48:66:73:7c:7a:47:0c:b3:10:3d:51:38:16:b1:0a:2f:b6:77:
ec:08:40:b9:12:a6:9f:5b:41:d6:80:b2:59:8c:83:73:de:44:
a8:ca:4d:18:9d:67:de:99:fc:68:ad:ee:85:6e:58:e6:fa:22:
80:61:18:ef:78:b1:ee:0c:f2:98:6e:51:51:56:85:cf:d2:82:
a5:c4:b4:98:ac:20:3e:a4:8f:78:c9:27:37:1b:99:5f:8a:5c:
cd:be:39:7a:75:62:64:7d:d9:6a:b7:97:2b:18:85:96:d9:3c:
21:b2:f3:61:d0:29:8b:ca:0c:3b:73:33:87:1d:3b:83:e0:79:
31:c6:42:1e:2c:82:69:25:60:04:7d:4d:1e:4e:2b:c0:4b:ec:
cc:e4:a4:0a:0d:2e:24:6c:df:27:34:0f:72:81:e1:25:8c:84:
cf:62:9b:37:48:a4:a4:c5:32:f8:64:ef:85:fc:8f:6b:83:41:
fd:69:39:45:d7:8a:1e:b1:33:75:62:c4:ae:89:9f:76:c7:7b:
58:88:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:27:11 2026 by rpki-client