Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WVnu4rOAM4bAGwLH54E_u1zyp8g.roa
File: WVnu4rOAM4bAGwLH54E_u1zyp8g.roa (raw, json)
Hash identifier: 3TOzV7uynC12YqD5CfAhfDyAScX2wgYqrWrhBjCdAAQ=
Subject key identifier: 59:59:EE:E2:B3:80:33:86:C0:1B:02:C7:E7:81:3F:BB:5C:F2:A7:C8
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DBF3EA481A143F87682B28DB675794590
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WVnu4rOAM4bAGwLH54E_u1zyp8g.roa
Signing time: Fri 24 Apr 2026 11:27:26 +0000
ROA not before: Fri 24 Apr 2026 11:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 178.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:3e:a4:81:a1:43:f8:76:82:b2:8d:b6:75:79:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 24 11:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5959eee2b3803386c01b02c7e7813fbb5cf2a7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:17:83:f3:b3:c3:d4:0a:35:4f:c2:bd:5e:
82:82:92:9c:98:54:84:d2:47:f4:f9:bc:b6:fb:59:
86:68:d2:64:a0:f2:ea:89:bf:ad:48:a4:fd:4a:7f:
21:46:3b:2c:9f:9c:05:47:c3:3e:12:7e:27:93:0e:
17:8c:be:4b:6e:0c:19:db:a3:ac:13:37:cc:55:ee:
63:8e:de:98:68:8c:b7:47:a1:d3:d0:5e:5a:da:eb:
76:f8:22:fd:3d:c8:e1:2d:e9:f0:57:a8:47:09:e1:
d7:71:a8:ac:f3:bb:ce:92:0d:47:00:48:0b:bb:53:
c8:f5:aa:97:67:b6:94:0e:30:96:40:7d:48:ef:c8:
16:7c:78:72:8a:d3:64:02:d7:6b:2e:33:bd:13:9e:
a1:d3:71:fd:c1:45:9c:75:da:f3:bb:81:e0:71:10:
ad:1e:2f:8c:e9:91:fe:88:35:5a:80:0e:19:95:6c:
59:cb:ce:be:e8:0b:01:dd:2d:de:5d:52:f0:fa:3f:
45:63:5f:6a:ef:ae:e2:03:4e:b0:5e:37:17:84:a2:
1e:53:0c:dd:1c:c2:91:d1:52:3c:e9:20:3d:5b:39:
ee:b1:4f:a8:54:4b:ca:17:c9:dd:4d:c5:83:d0:55:
ee:3d:76:c1:6f:76:21:fa:4b:b0:29:a7:b3:10:c5:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:EE:E2:B3:80:33:86:C0:1B:02:C7:E7:81:3F:BB:5C:F2:A7:C8
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WVnu4rOAM4bAGwLH54E_u1zyp8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
af:33:54:94:fd:ee:02:88:b5:1d:20:82:0a:ce:99:fd:a3:b6:
b2:11:86:58:be:43:b6:a5:a7:4f:d7:74:3c:85:37:aa:d5:6b:
81:93:55:53:a2:3b:0c:e2:3d:83:e5:d9:bd:3d:38:9f:8e:58:
89:1b:f8:26:48:9b:f4:ce:43:c0:57:a6:d9:de:2b:04:51:4a:
1f:a6:48:db:76:66:d2:3b:ba:b0:ab:5a:fe:75:e7:ee:b5:69:
53:31:f8:90:89:c9:2f:6c:9b:4a:ff:f8:59:65:b5:59:11:da:
cd:8e:69:aa:53:63:c8:51:88:3f:b2:4c:e9:5e:91:49:ef:e9:
a2:d6:c9:4a:ad:f6:d0:e5:d0:02:1c:b6:20:8f:45:8c:89:e2:
07:c6:59:43:f7:31:85:f0:31:f4:91:5f:15:af:65:fd:75:49:
cc:5c:ab:6c:58:ff:15:14:dc:8e:44:7c:90:40:8b:81:c9:af:
3d:16:7d:9b:ab:23:8d:d0:c8:3d:45:ee:6a:11:ed:5c:e6:72:
9f:a7:01:ee:e4:c6:0b:42:d8:2e:8f:d5:d4:13:ff:9d:7f:cd:
73:d6:96:ad:84:a7:0a:bf:d6:c4:5a:e0:ce:de:9e:f0:31:df:
6c:c5:6c:8e:4c:70:f3:de:4e:1b:82:61:1c:61:e8:b4:cc:33:
7b:76:b0:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2/PqSBoUP4doKyjbZ1eUWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjYwNDI0MTEyNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTU5ZWVlMmIzODAzMzg2YzAxYjAyYzdlNzgxM2ZiYjVjZjJhN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTcXg/Ozw9QKNU/CvV6CgpKcmFSE
0kf0+by2+1mGaNJkoPLqib+tSKT9Sn8hRjssn5wFR8M+En4nkw4XjL5LbgwZ26Os
EzfMVe5jjt6YaIy3R6HT0F5a2ut2+CL9PcjhLenwV6hHCeHXcais87vOkg1HAEgL
u1PI9aqXZ7aUDjCWQH1I78gWfHhyitNkAtdrLjO9E56h03H9wUWcddrzu4HgcRCt
Hi+M6ZH+iDVagA4ZlWxZy86+6AsB3S3eXVLw+j9FY19q767iA06wXjcXhKIeUwzd
HMKR0VI86SA9WznusU+oVEvKF8ndTcWD0FXuPXbBb3Yh+kuwKaezEMWcCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlZ7uKzgDOGwBsCx+eBP7tc8qfIMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvV1ZudTRyT0FNNGJBR3dMSDU0RV91MXp5cDhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstbWMA0G
CSqGSIb3DQEBCwUAA4IBAQCvM1SU/e4CiLUdIIIKzpn9o7ayEYZYvkO2padP13Q8
hTeq1WuBk1VTojsM4j2D5dm9PTifjliJG/gmSJv0zkPAV6bZ3isEUUofpkjbdmbS
O7qwq1r+defutWlTMfiQickvbJtK//hZZbVZEdrNjmmqU2PIUYg/skzpXpFJ7+mi
1slKrfbQ5dACHLYgj0WMieIHxllD9zGF8DH0kV8Vr2X9dUnMXKtsWP8VFNyORHyQ
QIuBya89Fn2bqyON0Mg9Re5qEe1c5nKfpwHu5MYLQtguj9XUE/+df81z1pathKcK
v9bEWuDO3p7wMd9sxWyOTHDz3k4bgmEcYei0zDN7drBi
-----END CERTIFICATE-----
Generated at Tue Apr 28 17:26:24 2026 by rpki-client