Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/aWSndv8JM6ItlA56vLPcdmvzO1c.roa
File: aWSndv8JM6ItlA56vLPcdmvzO1c.roa (raw, json)
Hash identifier: x0pdJWSaYGwHh0VCY2ixVw9W61Gkc3hz6OLw4fskxyI=
Subject key identifier: 69:64:A7:76:FF:09:33:A2:2D:94:0E:7A:BC:B3:DC:76:6B:F3:3B:57
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 01A15A82F580E9F26E7E5A0DDCEBF613AEC7
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/aWSndv8JM6ItlA56vLPcdmvzO1c.roa
Signing time: Tue 20 Oct 2026 18:11:34 +0000
ROA not before: Tue 20 Oct 2026 18:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204126
IP address blocks: 178.213.88.0/21 maxlen: 21
178.213.88.0/24 maxlen: 24
178.213.89.0/24 maxlen: 24
178.213.90.0/24 maxlen: 24
178.213.91.0/24 maxlen: 24
178.213.92.0/24 maxlen: 24
178.213.93.0/24 maxlen: 24
178.213.94.0/24 maxlen: 24
178.213.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:82:f5:80:e9:f2:6e:7e:5a:0d:dc:eb:f6:13:ae:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Oct 20 18:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6964a776ff0933a22d940e7abcb3dc766bf33b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:aa:2f:a6:1d:d7:c5:4a:a8:91:6d:59:1d:
ad:76:c0:1a:b6:2e:d3:95:0f:99:d2:9d:57:7b:d9:
6f:52:e8:01:12:47:81:4f:9e:7c:40:25:5d:57:10:
9c:b2:c9:96:72:c3:bc:1a:69:d2:97:66:3b:34:47:
66:20:a1:53:32:e3:30:62:88:c9:e7:84:4a:84:1c:
43:ac:a9:7d:c5:06:b5:d9:73:bb:ad:2c:f3:50:7a:
a5:44:0b:25:a2:03:0f:d5:a0:ab:96:ea:23:67:03:
0a:5a:4c:dc:11:09:a5:ad:c2:58:4e:b7:c3:ab:30:
e0:f1:26:8b:20:d9:29:1f:07:6e:6b:30:83:c6:94:
e0:c7:d9:25:5c:15:63:ef:19:35:09:91:e6:44:50:
83:71:6c:18:fe:35:fb:47:20:0e:fd:e9:a3:8f:93:
83:0e:1c:9a:b8:15:d7:78:1c:24:a8:60:31:50:78:
45:b2:f6:78:03:c6:b2:f2:c1:10:2b:3c:d6:48:82:
76:ba:69:be:d0:44:b4:c0:3e:1a:4a:b0:05:e0:63:
59:9e:d5:80:66:72:4c:4d:74:40:10:f1:b8:8c:b7:
60:5d:84:3f:dc:b5:e7:9f:76:49:6c:10:13:b2:c4:
c4:ce:67:1b:19:b9:f2:c1:f0:16:9a:ee:33:ba:76:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:A7:76:FF:09:33:A2:2D:94:0E:7A:BC:B3:DC:76:6B:F3:3B:57
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/aWSndv8JM6ItlA56vLPcdmvzO1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:3e:bc:ed:cc:72:78:9e:58:00:b9:b9:8f:a4:86:41:d4:9b:
63:6b:31:68:b8:8f:5d:d4:1a:ec:eb:ad:38:56:48:94:e9:68:
c8:91:b3:6f:d0:b2:9d:ff:7f:be:6b:f8:ea:fc:a9:34:b9:76:
c3:ef:73:a6:e8:85:b6:84:13:41:12:a7:2d:81:1c:7b:5c:88:
0a:5e:9a:d0:c7:2c:4c:d6:fb:29:41:78:b7:2b:47:7f:55:c1:
b2:ed:18:7f:02:74:39:db:3c:59:79:b6:eb:c2:f7:a2:81:55:
8b:ea:39:65:fe:14:8b:e5:30:30:34:fb:43:ef:90:28:29:2e:
71:e5:d5:2d:88:07:12:cb:e0:8f:23:f4:87:f1:41:3a:b8:43:
f5:2e:08:42:fb:fe:69:58:37:f7:c3:fe:89:ac:23:32:0d:b0:
0c:c1:2c:b1:4b:5e:72:65:20:93:4f:0f:a8:56:33:3b:51:14:
e5:3e:62:54:20:e1:ff:70:58:c8:ff:7d:72:34:02:2a:73:81:
ef:f4:9a:41:f7:cc:6a:e7:16:18:1c:63:65:b8:67:fd:d7:ea:
1b:ab:c9:0f:5b:dd:f0:fd:af:46:cd:df:c3:81:c6:40:93:d9:
c4:c8:0b:a7:08:7b:e0:5d:fe:b2:86:0c:96:56:36:64:e9:68:
f4:49:5d:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFagvWA6fJufloN3Ov2E67HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Nzk1MjBmYjgxYTQ1ZmNiYzQyYTZlOTM1NTgwN2ViOWE3
NjQxZjkwHhcNMjYxMDIwMTgxMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTY0YTc3NmZmMDkzM2EyMmQ5NDBlN2FiY2IzZGM3NjZiZjMzYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6qL6Yd18VKqJFtWR2tdsAati7T
lQ+Z0p1Xe9lvUugBEkeBT558QCVdVxCcssmWcsO8GmnSl2Y7NEdmIKFTMuMwYojJ
54RKhBxDrKl9xQa12XO7rSzzUHqlRAslogMP1aCrluojZwMKWkzcEQmlrcJYTrfD
qzDg8SaLINkpHwduazCDxpTgx9klXBVj7xk1CZHmRFCDcWwY/jX7RyAO/emjj5OD
DhyauBXXeBwkqGAxUHhFsvZ4A8ay8sEQKzzWSIJ2umm+0ES0wD4aSrAF4GNZntWA
ZnJMTXRAEPG4jLdgXYQ/3LXnn3ZJbBATssTEzmcbGbnywfAWmu4zunZ0MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlkp3b/CTOiLZQOeryz3HZr8ztXMB8GA1UdIwQY
MBaAFCZ5Ug+4GkX8vEKm6TVYB+uadkH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMt
ZmE4MjM5ZjZjNmIzLzEvYVdTbmR2OEpNNkl0bEE1NnZMUGNkbXZ6TzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMtZmE4MjM5ZjZjNmIz
LzEvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstVYMA0G
CSqGSIb3DQEBCwUAA4IBAQAaPrztzHJ4nlgAubmPpIZB1JtjazFouI9d1Brs6604
VkiU6WjIkbNv0LKd/3++a/jq/Kk0uXbD73Om6IW2hBNBEqctgRx7XIgKXprQxyxM
1vspQXi3K0d/VcGy7Rh/AnQ52zxZebbrwveigVWL6jll/hSL5TAwNPtD75AoKS5x
5dUtiAcSy+CPI/SH8UE6uEP1LghC+/5pWDf3w/6JrCMyDbAMwSyxS15yZSCTTw+o
VjM7URTlPmJUIOH/cFjI/31yNAIqc4Hv9JpB98xq5xYYHGNluGf91+obq8kPW93w
/a9Gzd/DgcZAk9nEyAunCHvgXf6yhgyWVjZk6Wj0SV2k
-----END CERTIFICATE-----
Generated at Thu Nov 12 19:17:42 2026 by rpki-client