Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/V_rKYxhknpgw0_eZF8X41mpWM9E.roa
File: V_rKYxhknpgw0_eZF8X41mpWM9E.roa (raw, json)
Hash identifier: leGPk+SwJtiixlgMTPD5YmmPKKMoVsiY7W4Pkn2Sz5w=
Subject key identifier: 57:FA:CA:63:18:64:9E:98:30:D3:F7:99:17:C5:F8:D6:6A:56:33:D1
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019FEB0AF35264FE2165B12C83A9F19ADCAC
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/V_rKYxhknpgw0_eZF8X41mpWM9E.roa
Signing time: Mon 10 Aug 2026 09:39:51 +0000
ROA not before: Mon 10 Aug 2026 09:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:0a:f3:52:64:fe:21:65:b1:2c:83:a9:f1:9a:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Aug 10 09:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57faca6318649e9830d3f79917c5f8d66a5633d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:53:36:fc:2e:da:9f:9b:dc:35:80:cf:c5:
a4:be:f3:4c:10:9d:e4:dc:f1:b1:45:07:38:c6:78:
a8:fa:ba:2b:5c:2b:9c:b4:0b:9b:d9:5b:26:52:e1:
2e:89:8a:57:6b:a6:33:84:7b:8c:cb:92:2a:3a:c1:
de:b9:bc:2e:71:24:b0:4c:d0:43:dc:d1:0f:38:4e:
fe:6a:40:96:6e:82:67:c5:64:b4:64:f0:40:3e:b3:
7e:bb:a4:81:10:d4:12:e0:32:19:bc:e7:b9:04:74:
62:6a:49:ce:a5:f4:3a:17:39:19:ac:4c:74:e2:c0:
16:b7:ad:11:32:43:b2:0f:cd:fa:25:2a:75:cb:e2:
cc:c9:84:81:bf:e5:47:23:d5:b9:4f:f0:50:eb:cd:
d8:16:c8:2a:1d:97:4c:b9:ea:ae:03:1f:84:ba:12:
db:59:16:8e:6a:be:33:9c:bd:7a:4f:99:14:c7:3f:
86:f2:2b:ec:9a:ba:09:d5:38:87:3f:2d:86:2c:64:
9d:1e:b2:6a:2f:42:a7:6f:4f:4b:2c:fa:ca:9e:6b:
98:4c:33:27:d8:e2:cd:be:13:2e:76:56:91:e0:3f:
b6:39:b8:8b:9d:67:5b:ef:61:c7:08:fd:62:20:35:
33:48:cf:fd:94:d9:0f:df:ca:cc:c8:8c:f9:80:59:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:CA:63:18:64:9E:98:30:D3:F7:99:17:C5:F8:D6:6A:56:33:D1
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/V_rKYxhknpgw0_eZF8X41mpWM9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7c:7e:14:a4:02:a2:f2:ed:b6:8f:97:c7:dd:88:99:35:91:
0e:b6:a7:80:89:e7:ba:51:14:f1:27:ca:50:3e:cf:08:37:f2:
ef:3a:64:60:81:30:fe:e1:c6:aa:69:49:ac:0c:d3:d8:bd:2d:
44:51:90:63:2a:ce:55:e8:ba:56:b6:93:40:62:a1:90:42:85:
29:ae:8b:f7:26:3e:ea:a9:31:9b:35:9a:7f:41:df:99:ae:26:
16:15:70:ee:69:58:b8:65:d5:03:cc:3c:18:24:59:96:9d:40:
4c:db:8f:9e:b9:22:a0:3e:c0:53:73:73:c9:e7:0b:de:ba:b6:
fa:6b:05:a0:d2:e6:f3:5d:3a:83:97:18:9f:7e:cd:42:e6:8a:
a4:9c:b5:79:4f:91:4a:5d:fa:d7:b1:49:3e:f8:e9:c9:82:95:
1b:1e:e1:ee:ae:86:cc:94:24:9d:99:5a:24:cd:b2:9d:b4:13:
0f:ae:b3:58:fd:2e:0e:52:27:c5:ff:c5:e7:de:67:0e:7e:1a:
36:99:68:16:d8:12:86:8c:6c:1f:92:db:fa:92:99:b3:e3:fd:
b0:64:cd:43:a8:26:f0:e8:a6:c3:3c:c9:5f:5e:cf:f4:2d:45:
03:1b:e5:fb:b3:c8:1f:d3:bb:14:82:cb:fd:63:64:02:76:c6:
2a:9c:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:53 2026 by rpki-client