Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k25zRuYQT3-1sfMlxL_YwfJgQCI.roa
File: k25zRuYQT3-1sfMlxL_YwfJgQCI.roa (raw, json)
Hash identifier: FPUubsCtB7tbZpCopxrii6/wsx2iP32GrLBL1YytMCk=
Subject key identifier: 93:6E:73:46:E6:10:4F:7F:B5:B1:F3:25:C4:BF:D8:C1:F2:60:40:22
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019C8F42D32829E3DA53A5D82F9F7CDB6919
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k25zRuYQT3-1sfMlxL_YwfJgQCI.roa
Signing time: Tue 24 Feb 2026 10:47:27 +0000
ROA not before: Tue 24 Feb 2026 10:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207847
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:42:d3:28:29:e3:da:53:a5:d8:2f:9f:7c:db:69:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Feb 24 10:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936e7346e6104f7fb5b1f325c4bfd8c1f2604022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:9d:1f:66:fd:ff:7e:83:75:33:f3:68:33:
a2:e4:7c:eb:fc:ad:a7:c4:85:f7:3b:71:db:b8:47:
c4:10:da:e4:db:39:ef:b7:8e:6c:72:31:3b:00:37:
b3:5b:14:80:55:e8:c5:08:12:01:84:66:ab:1e:9d:
68:68:c5:af:90:a7:45:d8:0f:f4:8f:a5:b0:54:29:
5b:ff:6d:05:4f:4f:27:03:7a:b0:a4:1b:ef:c1:fb:
2d:79:f2:92:df:21:4d:14:fc:e3:b3:0f:10:5d:99:
b1:db:b4:80:8a:0d:22:1c:8c:30:b8:20:21:0d:6c:
05:76:6c:a3:9d:3e:6c:e7:64:f4:7d:42:70:0e:9e:
3b:e4:00:9a:af:d1:1c:37:28:74:2b:7e:a0:2f:11:
f5:1b:53:25:70:2e:1b:9a:a3:ed:41:d1:35:75:d4:
7a:c4:fe:1c:5b:06:ad:dc:f8:e1:a1:20:ac:30:3b:
df:90:3e:e2:85:30:5c:0d:af:c2:8b:fd:63:60:41:
84:c3:db:ed:bd:36:20:56:5b:44:9e:87:d6:74:19:
42:7a:cd:84:fd:7e:85:b2:3c:39:f9:c3:73:09:2d:
52:b1:04:65:59:1d:21:74:de:e2:23:4c:16:f8:90:
d4:a4:6a:72:f1:68:d4:9d:56:19:ca:00:e0:3e:c4:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:73:46:E6:10:4F:7F:B5:B1:F3:25:C4:BF:D8:C1:F2:60:40:22
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k25zRuYQT3-1sfMlxL_YwfJgQCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b6:90:c8:1a:46:c9:24:2a:3a:3c:17:64:08:4f:17:eb:79:
dd:07:6d:a4:81:3c:3a:4b:f5:4a:76:41:58:d8:8b:ef:2f:b2:
da:ee:50:08:c3:72:67:29:34:b6:2e:07:2f:9c:a3:e3:4a:7c:
a9:20:88:0d:53:5c:3c:a8:07:66:ec:d2:1b:47:81:77:96:25:
d7:01:dd:64:5c:9c:e1:39:29:e9:21:ff:1a:7e:5d:0a:e3:62:
fe:90:62:ce:ab:71:89:1d:ed:51:c3:7c:2d:7f:ac:4c:8f:03:
d2:98:ff:a5:b4:e5:04:aa:80:6e:f6:d1:ac:50:db:b9:c2:cf:
9d:99:01:de:91:0f:67:10:96:df:a9:47:e8:6b:62:54:a6:9e:
0a:4e:27:02:74:72:43:31:56:03:90:aa:35:e1:17:b4:98:54:
b0:c5:86:9d:ba:a5:55:fb:e7:16:73:d8:07:e7:2c:82:60:ef:
a4:25:04:08:54:83:11:1e:e7:05:74:57:7d:8a:46:ec:23:b0:
f7:31:4f:80:69:8c:3c:88:e7:1e:36:4f:f1:65:ba:55:2d:b8:
e7:23:17:42:f7:a4:0d:fa:76:e5:bc:f6:88:bb:d9:5d:30:0a:
e5:de:c5:8f:bd:8c:b9:99:b1:51:fc:7d:2a:0b:f0:dc:f7:6f:
19:e9:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:24:06 2026 by rpki-client