Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/7WUTE9pU1199KJ_hi4eOGNUu5OI.roa
File: 7WUTE9pU1199KJ_hi4eOGNUu5OI.roa (raw, json)
Hash identifier: 7xnnvuOXepqj2uBgDLanzqYg7moSYIqYLDWunBAuoAQ=
Subject key identifier: ED:65:13:13:DA:54:D7:5F:7D:28:9F:E1:8B:87:8E:18:D5:2E:E4:E2
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A0FE5BE6A6F5ACBD963EE52C560D132133
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/7WUTE9pU1199KJ_hi4eOGNUu5OI.roa
Signing time: Fri 02 Oct 2026 20:43:50 +0000
ROA not before: Fri 02 Oct 2026 20:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 178.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:5b:e6:a6:f5:ac:bd:96:3e:e5:2c:56:0d:13:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Oct 2 20:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed651313da54d75f7d289fe18b878e18d52ee4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:54:46:69:7a:bd:34:5a:15:f2:7e:1f:ce:
aa:e5:ef:6f:ec:19:75:02:94:6a:23:23:39:18:63:
e2:bf:5f:47:85:1e:c3:a1:02:74:26:9c:ef:57:6b:
fb:5d:b2:b1:4d:f9:ed:dd:46:7c:97:5a:a9:e0:ea:
b1:02:da:d0:62:01:85:77:9d:c2:38:44:a3:38:a0:
e1:5b:ef:6b:b3:b5:e5:b4:c9:e9:ca:1a:cf:ad:d7:
41:92:52:56:b5:5a:2e:42:d8:c1:68:d4:4a:c1:8d:
b7:2c:ef:6f:cc:6e:a3:1e:88:db:49:96:b5:8c:80:
b9:ba:f0:d8:62:04:01:03:45:26:d7:50:4a:f6:24:
2a:13:7b:47:78:1c:88:4b:2c:88:43:8b:62:68:21:
d9:45:6d:19:1e:32:ec:88:16:d1:23:53:cd:07:c4:
ef:69:98:d4:01:50:99:42:d3:44:98:9b:74:d9:5e:
85:5d:99:ca:30:f5:fe:71:53:d0:85:95:ca:e2:f0:
f9:19:6c:c1:9a:eb:aa:c2:71:9c:bc:62:0c:a4:b6:
01:19:b4:fe:ae:92:2a:37:63:21:2f:14:26:9d:b6:
b4:c3:f0:2e:d7:06:ae:a1:36:6c:d4:e5:ea:0f:40:
8a:9f:19:80:fa:6e:91:9c:3a:68:ea:df:be:46:be:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:13:13:DA:54:D7:5F:7D:28:9F:E1:8B:87:8E:18:D5:2E:E4:E2
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/7WUTE9pU1199KJ_hi4eOGNUu5OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1f:b7:42:c0:40:93:ec:c1:2a:b4:09:59:1f:d2:7c:7a:57:
72:59:b5:f3:15:c6:6b:7e:61:aa:ca:4a:0f:f3:0f:41:8e:e0:
5a:17:12:90:de:f5:e1:77:12:4f:e9:62:61:66:3d:48:ca:2e:
cd:b5:67:af:13:25:9e:d0:23:7b:e0:fb:4d:ee:92:23:36:9b:
8c:14:55:70:54:0c:ae:88:4d:56:5e:c7:90:42:56:78:d1:d9:
11:38:d9:57:2b:09:3d:7d:4d:8c:8d:e8:8c:25:e4:fa:f2:37:
8a:35:8f:05:33:46:4e:e6:f3:12:82:03:52:e4:cd:3c:57:9a:
67:65:ad:8d:62:89:89:09:ad:dd:63:d9:d0:bc:c1:40:9d:48:
87:14:97:b2:0e:51:86:a0:d0:20:68:61:74:03:85:83:91:0e:
c1:c5:02:20:92:fa:7f:24:70:38:25:95:3c:51:e7:9b:cb:16:
9d:6c:d0:2f:18:2d:18:54:77:f2:57:db:81:a8:b2:f3:26:96:
9b:87:7a:6a:87:aa:af:d3:54:46:dd:bc:cf:3b:42:95:37:3b:
94:88:ff:71:80:c5:74:e5:e6:83:18:ce:67:b9:a1:47:5b:a5:
ef:bc:20:18:00:56:3d:ed:7d:98:c3:53:d0:30:cc:65:be:63:
4a:a6:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:43 2026 by rpki-client