Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/F_efPUkbYJiwgXfhbrfqTy7pzl4.roa
File: F_efPUkbYJiwgXfhbrfqTy7pzl4.roa (raw, json)
Hash identifier: DBFGNPIUNOOmBZc6f7YXGHxHQkj2ijxWbr4/ap8nEM8=
Subject key identifier: 17:F7:9F:3D:49:1B:60:98:B0:81:77:E1:6E:B7:EA:4F:2E:E9:CE:5E
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019FF541B2A8DB5131F00FAD09B47A73B832
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/F_efPUkbYJiwgXfhbrfqTy7pzl4.roa
Signing time: Wed 12 Aug 2026 09:15:51 +0000
ROA not before: Wed 12 Aug 2026 09:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 178.214.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:41:b2:a8:db:51:31:f0:0f:ad:09:b4:7a:73:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Aug 12 09:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17f79f3d491b6098b08177e16eb7ea4f2ee9ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:55:6c:6b:72:5e:e6:ce:b4:ea:a2:09:66:
a8:7c:90:a1:9a:51:88:c6:21:16:a1:05:8e:eb:8d:
10:01:db:79:67:c2:7f:bf:c8:58:a0:fd:e3:6e:c9:
5e:c5:8b:ee:ef:97:e1:29:9c:a3:e7:0f:ab:1c:89:
8d:b8:b0:e4:30:e6:10:59:84:21:5e:62:b8:46:8a:
cf:79:5c:93:01:29:0d:9b:e7:d6:d1:9c:05:5a:89:
67:7d:d6:d1:49:f4:56:27:fe:19:c2:7b:fc:91:c9:
01:85:7c:cd:60:64:57:73:29:c5:d7:fa:8e:26:34:
62:a9:d3:a8:33:5b:07:a8:d4:88:4e:0a:88:0c:8d:
77:f6:81:71:ee:0f:1a:47:b6:cb:52:5d:25:fd:bf:
58:6e:77:52:9c:76:92:ee:62:21:ba:5a:50:e3:be:
54:32:79:ed:ac:2c:b8:42:ee:87:f3:b3:c6:92:c4:
37:74:74:73:6e:48:39:19:1c:99:24:09:20:8f:f5:
8c:13:e3:ef:96:a4:5e:d0:d5:82:46:0b:5d:0f:9c:
3a:6a:df:ad:23:db:e9:48:df:39:8b:80:3e:fd:b5:
95:ee:5c:d8:a4:d5:22:39:01:51:4d:81:83:0b:95:
7d:be:02:dd:69:d0:9e:ff:ce:db:4f:3a:15:83:e5:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:9F:3D:49:1B:60:98:B0:81:77:E1:6E:B7:EA:4F:2E:E9:CE:5E
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/F_efPUkbYJiwgXfhbrfqTy7pzl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.208.0/24
Signature Algorithm: sha256WithRSAEncryption
85:09:5a:c9:ff:1b:37:df:20:9b:f4:05:92:c7:ee:dc:7d:b9:
13:6a:a7:41:21:bd:e1:88:4d:1a:70:13:ee:cf:cb:a1:8b:f9:
41:7c:bc:38:c2:45:6a:63:50:98:81:1c:1c:2b:6d:43:70:37:
03:90:c4:82:70:3d:98:79:79:a2:9a:4e:9e:c9:c5:ef:52:14:
26:cd:7a:ee:f1:64:93:85:ac:fb:55:d3:2c:8d:bc:26:95:c9:
69:a1:6e:fe:48:1a:45:36:e9:bf:95:c7:25:d8:60:ff:dc:92:
4e:e0:e7:91:8d:4d:02:01:ac:fd:b0:ab:9e:6f:65:a8:73:52:
56:89:a5:6e:f0:17:cf:92:bf:09:d2:6a:3f:d8:46:ec:96:6b:
ad:1d:74:51:53:26:d8:25:1a:8f:5c:f9:24:99:d1:f1:5f:ab:
94:ec:fd:1e:76:6f:12:90:eb:38:54:53:65:74:c1:20:a2:eb:
3f:f7:4a:96:fc:7f:3f:e6:3a:4b:43:ec:fa:d2:f5:30:3d:b6:
2d:bd:4b:1a:38:ff:66:89:58:2a:ca:e3:a0:79:c4:19:f7:c8:
46:b2:5d:bb:5d:95:a1:9e:be:51:26:35:fa:28:d3:49:77:49:
ea:bd:e4:1a:6d:f4:de:c9:02:3b:86:ef:32:40:3a:4f:db:ec:
d2:42:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:05 2026 by rpki-client