Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u56XFToVd6zQguF_8gzi8B1ZTSs.roa
File: u56XFToVd6zQguF_8gzi8B1ZTSs.roa (raw, json)
Hash identifier: /HnbXpeps4bAuN5oIJhhkS3SVV0pw7813MO7vLqyIC8=
Subject key identifier: BB:9E:97:15:3A:15:77:AC:D0:82:E1:7F:F2:0C:E2:F0:1D:59:4D:2B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F4BF485833C3AD4F6F98362405955394B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u56XFToVd6zQguF_8gzi8B1ZTSs.roa
Signing time: Fri 10 Jul 2026 12:15:43 +0000
ROA not before: Fri 10 Jul 2026 12:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 178.219.7.0/24 maxlen: 24
178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:f4:85:83:3c:3a:d4:f6:f9:83:62:40:59:55:39:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 10 12:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb9e97153a1577acd082e17ff20ce2f01d594d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:e2:ca:c1:ad:64:98:85:e4:4e:fc:ba:d8:
e2:51:51:f1:0f:99:42:27:48:17:61:7d:b6:7c:62:
4a:35:ff:19:33:48:da:af:a7:8b:d5:86:e7:5c:88:
b1:e7:80:f0:b9:d1:d9:d9:45:c6:f6:1c:4e:ce:13:
b3:95:c6:b7:7a:7e:f1:7a:b9:34:6d:57:96:8a:af:
9f:20:8b:20:8a:37:c7:e2:fb:b9:08:7a:c5:1f:53:
c8:ac:d3:a3:0d:6b:4b:0b:87:2a:9c:1e:01:16:45:
ef:b0:d5:ee:27:60:b3:83:09:50:36:41:42:7f:67:
5c:c7:dc:9e:c4:52:9f:f2:5f:7e:e3:ea:4a:76:e4:
0b:f6:38:6d:dc:ae:53:00:c3:32:37:6d:d7:6f:94:
83:c1:c2:1f:49:25:de:3d:d1:a4:b4:da:e5:13:ff:
a4:90:e9:e5:2a:99:fb:14:72:5e:8d:24:52:6a:75:
e0:4c:ae:a5:e0:38:8e:de:32:f4:62:8b:78:bc:8d:
3a:99:19:8e:6b:c4:a8:b2:7a:a0:d6:e9:df:c5:92:
c2:99:f9:d5:15:2f:7c:02:a4:1a:5e:ce:19:c3:62:
ff:69:17:30:00:a7:25:8d:4e:bb:48:fb:bb:91:a9:
89:d7:9a:a2:41:7f:7b:cc:9f:c9:cd:e4:d6:26:ee:
7c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:97:15:3A:15:77:AC:D0:82:E1:7F:F2:0C:E2:F0:1D:59:4D:2B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u56XFToVd6zQguF_8gzi8B1ZTSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.7.0/24
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1c:df:0b:42:32:62:e3:cd:6b:27:6b:9d:cd:64:14:96:b0:
c1:cb:df:24:af:fe:6a:3e:20:6a:76:fe:81:88:4a:0f:e7:28:
fe:84:35:a8:4d:1e:e0:1b:39:81:c3:22:fb:c5:dc:bc:dc:47:
1d:7c:e7:81:f3:d1:37:56:43:90:81:e6:2a:08:1b:4b:99:7f:
e1:ba:dd:6a:f1:f7:82:9a:e4:6b:67:9c:8b:55:01:5e:41:54:
61:70:6f:5e:00:a3:69:26:f6:3e:c8:26:dc:b0:f9:88:72:67:
73:bf:80:fe:f9:00:35:93:fd:52:d7:ea:4a:e2:94:4b:c2:13:
6d:50:d6:e2:65:44:5e:db:50:6c:70:6d:d0:34:39:3b:b6:af:
ad:74:cc:7d:0f:c8:0c:d2:6a:a3:d9:61:2b:e7:0b:65:64:12:
7d:4b:02:ac:97:4e:ec:9a:8d:a3:0e:f1:79:43:99:61:6b:c1:
a4:d5:9f:5c:be:65:ba:89:55:ce:70:16:29:24:79:f3:38:75:
72:0b:18:ad:da:4c:ad:3d:84:5e:22:83:83:13:73:62:dd:46:
8d:c5:d6:fb:74:0a:ee:7f:22:d0:9f:f8:ea:e3:5f:de:4c:60:
42:99:16:dc:57:1b:8c:c0:45:22:b5:45:92:5f:cc:dc:50:cc:
84:05:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client