Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/pi93HR63QqDm4vYs8__cfV-mRIA.roa
File: pi93HR63QqDm4vYs8__cfV-mRIA.roa (raw, json)
Hash identifier: 4groAW9TFeX5nxWJtzeWbIzoDm9EvKAKae9voc8caHQ=
Subject key identifier: A6:2F:77:1D:1E:B7:42:A0:E6:E2:F6:2C:F3:FF:DC:7D:5F:A6:44:80
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F6728FA5B7F040B4E7797FAC23D5B58E8
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/pi93HR63QqDm4vYs8__cfV-mRIA.roa
Signing time: Wed 15 Jul 2026 19:02:46 +0000
ROA not before: Wed 15 Jul 2026 19:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 178.254.178.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:28:fa:5b:7f:04:0b:4e:77:97:fa:c2:3d:5b:58:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 15 19:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a62f771d1eb742a0e6e2f62cf3ffdc7d5fa64480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:7c:b7:76:09:c3:5d:00:48:67:f2:bd:92:
ef:de:25:12:9b:08:25:e4:ee:50:f5:9f:84:c8:57:
38:b2:31:c6:60:34:cf:d4:b5:ea:91:f8:b8:98:0c:
c0:40:3a:d9:02:84:d9:7a:ee:92:d6:52:dd:e8:8e:
1d:61:37:f8:56:45:06:82:6d:5f:4d:2e:e2:b4:01:
61:61:b3:ab:62:12:3b:3e:0b:f0:8e:1d:c1:d4:43:
95:34:48:58:6d:77:43:1a:18:ac:36:a4:61:fc:c9:
57:7a:38:a6:28:03:37:8d:05:3f:92:8a:9e:13:68:
c9:75:3d:c0:4e:b7:09:98:04:2a:b7:df:c6:93:88:
f4:60:31:c7:b2:2e:50:d2:70:9c:ed:55:76:51:d6:
e9:ae:15:2e:89:7f:da:b7:a2:10:b2:93:5d:cb:1c:
4e:10:12:46:f9:38:9a:35:81:76:aa:dc:19:d0:a3:
86:15:7a:8a:aa:51:ef:69:14:25:25:76:56:61:9d:
96:90:0a:16:e4:27:9b:29:0a:bc:6e:96:16:72:ef:
40:5a:7b:4b:3f:7d:b7:d5:13:9f:47:54:d1:9e:bc:
cc:41:3a:d0:dd:f9:32:93:7e:4e:e0:d0:16:ee:1b:
4b:ea:03:97:2f:85:4e:a2:c3:f4:20:96:3b:ec:1e:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:77:1D:1E:B7:42:A0:E6:E2:F6:2C:F3:FF:DC:7D:5F:A6:44:80
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/pi93HR63QqDm4vYs8__cfV-mRIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.178.0/24
178.254.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d7:35:35:50:45:a2:f8:64:27:a6:f3:c6:b1:d8:e2:f0:e4:
55:56:3e:42:f7:c4:98:1c:d1:74:2a:e4:bd:50:ca:45:e8:6c:
59:3c:0b:06:53:9a:54:37:1d:13:80:03:4a:87:34:f3:c6:1a:
5a:ab:29:4c:ba:63:e4:bb:11:2b:2e:11:6c:12:40:31:a0:6d:
16:2a:95:6d:2b:31:c5:d8:28:00:e9:1c:f8:1d:36:4c:6b:8b:
9f:6e:d5:5c:c3:5e:a0:28:74:68:b1:86:67:b7:de:2c:12:b2:
d3:62:00:fe:94:c9:f0:f7:35:88:49:cb:7d:42:57:a9:9a:1e:
4b:9d:77:c5:3e:8e:b9:b4:22:7d:88:a7:a4:68:a3:4f:1d:c6:
37:2d:3d:6a:e7:93:13:77:b7:ca:82:9b:89:bc:02:e9:d2:70:
c7:8a:c1:20:b8:79:1e:c4:1d:b8:5b:85:3b:c4:bc:0a:42:8c:
fa:a0:b2:e0:48:de:f9:8b:98:c1:7f:25:3e:db:96:c2:1a:fa:
8e:39:59:0b:6f:2d:10:72:a5:1e:22:65:cc:1e:33:a9:fe:38:
51:a8:40:2f:fd:50:75:63:83:8d:00:8f:fc:9f:b1:b3:85:6e:
57:5b:84:ea:15:69:15:23:9e:73:f5:33:66:88:85:a6:d8:c9:
75:77:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:46 2026 by rpki-client