Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/3dy1HMIwGt9PO86hkfVYH6b6erQ.roa
File: 3dy1HMIwGt9PO86hkfVYH6b6erQ.roa (raw, json)
Hash identifier: O7PPGssfC+RkfmUHmAFb4U/BX6/Fhjv8ji6P4qd11m0=
Subject key identifier: DD:DC:B5:1C:C2:30:1A:DF:4F:3B:CE:A1:91:F5:58:1F:A6:FA:7A:B4
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019D10D0C1A9649709C731E27D809B35D41F
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/3dy1HMIwGt9PO86hkfVYH6b6erQ.roa
Signing time: Sat 21 Mar 2026 14:33:29 +0000
ROA not before: Sat 21 Mar 2026 14:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 178.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:d0:c1:a9:64:97:09:c7:31:e2:7d:80:9b:35:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 21 14:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dddcb51cc2301adf4f3bcea191f5581fa6fa7ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:f9:4c:da:63:fe:9f:25:d9:b0:1f:f1:9e:
14:c6:26:63:6c:55:cd:1e:14:89:a2:19:1f:c0:80:
d3:20:e7:bd:48:d7:62:1e:d4:8e:af:4c:7c:d6:03:
bc:a6:62:52:8c:0f:df:cb:d0:6c:54:f2:4d:60:84:
bc:59:c0:37:d0:7b:25:9a:cc:c1:ae:10:25:99:d6:
89:2d:28:ce:05:e1:ac:6f:f8:ba:8e:3b:14:4f:e3:
33:30:de:73:7d:cf:c7:dd:33:c5:6f:60:c2:a2:b5:
7b:c2:20:8b:13:61:ca:c8:0a:1d:06:28:a5:b6:ba:
f5:4a:4a:08:25:17:66:06:d9:85:e7:3d:76:79:78:
1d:6f:d5:f5:bb:e8:a3:2b:3a:1d:fa:54:82:9e:27:
c8:ff:be:70:05:05:dc:87:bb:77:d9:47:e6:93:50:
32:b6:e3:92:4a:ea:a7:dd:2c:e8:bc:11:b5:36:fe:
08:cc:02:51:7e:58:e8:a7:8d:1b:ea:42:4b:96:e9:
f3:fd:d3:7c:bb:fa:07:36:19:ae:f1:e6:26:8c:dd:
80:7a:bb:56:e6:84:0f:e2:2f:df:8c:c1:07:63:80:
ad:c5:17:eb:39:36:a2:88:e2:7f:6d:8f:6f:a8:e7:
87:01:1b:1c:d9:fd:86:80:84:d8:53:42:60:a0:e1:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:B5:1C:C2:30:1A:DF:4F:3B:CE:A1:91:F5:58:1F:A6:FA:7A:B4
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/3dy1HMIwGt9PO86hkfVYH6b6erQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c5:15:0d:9f:68:10:b4:08:fe:81:dd:ca:a7:4a:d3:be:a0:
5a:83:b5:1d:80:8e:b4:9f:29:c4:94:a1:6b:cc:26:60:4a:2e:
61:7e:0b:4a:c8:bc:61:21:60:9f:dd:01:6f:ee:a5:08:99:9e:
65:18:93:e0:fa:12:dc:ba:1b:35:8e:8a:36:9f:f0:69:2f:22:
4f:30:d9:b0:5a:d4:fb:5a:d6:fb:96:58:b0:6c:d6:3a:25:55:
11:9a:1b:93:61:cb:5b:e4:dd:9e:b1:49:9f:2d:17:b4:f2:7c:
7e:d3:72:96:32:1d:d9:cc:8b:16:be:5e:96:4d:08:63:71:a8:
df:e2:9f:04:82:1c:3b:c0:07:4b:d4:a5:1f:62:de:00:65:08:
e0:01:93:c1:60:24:85:5f:80:a4:47:65:31:44:3b:c9:81:1f:
ab:ac:91:6b:b9:b1:eb:64:25:cb:f6:6e:6b:b1:d5:c5:6e:ed:
99:ca:e3:d8:ae:4e:a1:96:dd:91:4f:87:22:40:e2:36:7f:50:
b0:aa:eb:71:7a:c8:80:4c:8a:22:22:17:86:25:65:e2:7b:a9:
8a:3f:a9:e0:ef:16:dc:b5:57:7f:ef:0f:22:d0:e2:89:5e:b4:
9c:5a:e4:a3:5f:06:16:84:de:eb:1e:5c:5b:45:87:e6:4c:20:
e5:4c:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:07:02 2026 by rpki-client