Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WlKn2c2Xm3tAFJA_mbMOAD_vUNE.roa
File: WlKn2c2Xm3tAFJA_mbMOAD_vUNE.roa (raw, json)
Hash identifier: HYy1KSeXFukO6bm3Xdz+84Z1bcSJ1YS4fy36SB0krQw=
Subject key identifier: 5A:52:A7:D9:CD:97:9B:7B:40:14:90:3F:99:B3:0E:00:3F:EF:50:D1
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A04D9A4AA14FD138C610C562EB2D053C02
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WlKn2c2Xm3tAFJA_mbMOAD_vUNE.roa
Signing time: Sat 29 Aug 2026 12:59:12 +0000
ROA not before: Sat 29 Aug 2026 12:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 178.214.210.0/24 maxlen: 24
178.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:9a:4a:a1:4f:d1:38:c6:10:c5:62:eb:2d:05:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Aug 29 12:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a52a7d9cd979b7b4014903f99b30e003fef50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:42:4b:5b:b0:f7:4f:76:dc:5b:b4:5d:e7:
03:82:83:db:8d:bc:48:e0:e2:ba:18:3b:53:88:4a:
ab:1f:9e:bf:32:d9:cc:47:94:62:98:68:54:4e:25:
fa:03:15:eb:31:82:9e:bd:03:90:e5:f5:2f:52:78:
17:a2:aa:d1:a6:cf:02:8b:20:ad:d3:25:24:3b:e4:
59:39:cc:a1:a2:96:2c:11:62:cb:a9:5a:a4:5f:00:
8a:e1:b4:ba:7b:17:c3:34:05:46:a2:d4:69:23:55:
71:6f:80:91:bd:3a:34:48:f0:d5:f2:9c:42:3f:0e:
d5:53:59:7c:c8:ba:ed:1d:ce:ed:d1:34:db:c9:d9:
61:96:fb:55:1b:c5:ac:f4:06:0f:be:3c:c9:9f:d8:
98:9c:e9:c5:60:67:13:39:85:9e:7b:a6:1a:76:cd:
10:8d:59:3f:9d:8d:ea:ad:ed:a1:46:e0:bb:4a:6f:
ed:d9:b5:04:e6:85:7f:b1:76:de:3f:62:5a:d8:1a:
33:8d:f3:b2:1d:fb:32:6a:20:c4:a5:a7:b7:c2:6e:
f1:23:07:e7:a5:80:87:5f:de:d5:dd:62:06:18:88:
fd:d4:ea:0d:77:18:62:3a:64:fc:85:41:d2:c1:cd:
5c:b0:80:2e:fa:f2:46:87:0a:3b:39:eb:68:2f:2d:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:A7:D9:CD:97:9B:7B:40:14:90:3F:99:B3:0E:00:3F:EF:50:D1
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/WlKn2c2Xm3tAFJA_mbMOAD_vUNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.210.0/24
178.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9f:cc:f5:a7:de:49:86:2d:45:2d:eb:f8:e0:5b:33:cf:a3:
33:ba:db:f7:44:ec:ad:9d:97:23:b8:68:29:b3:88:46:14:e4:
66:78:ff:52:e4:ea:e0:63:8a:17:21:85:06:e1:72:40:0c:3d:
3b:73:1b:a0:8b:24:a4:b1:9b:aa:43:7c:49:53:a5:83:2c:fb:
af:5a:bf:0a:70:be:83:25:47:c0:b9:84:ce:d3:65:09:e6:08:
fc:97:59:63:7e:e2:52:96:55:0b:73:91:41:3f:63:aa:3e:30:
67:2d:63:25:c1:b6:d3:7d:6d:14:80:1c:55:d4:48:0e:57:49:
1d:0a:77:de:ce:90:cf:95:04:3b:27:cd:c9:00:5e:ea:8c:65:
22:85:86:9e:1d:d8:16:db:dc:f5:78:fc:ed:54:24:a8:f5:60:
9d:a5:6f:18:e8:f5:a5:ac:4a:52:04:b8:6c:cc:e1:4d:91:42:
b8:07:53:ce:0f:cc:2b:cf:3a:9f:3f:e8:e2:41:d8:ec:96:3e:
65:a3:15:0a:22:26:c7:7c:8c:1f:e6:5f:74:ee:04:17:2b:c3:
b3:f7:9c:4b:e2:a9:66:4d:37:96:b3:74:0a:92:e6:cb:95:42:
c7:35:30:06:d1:33:21:02:a7:16:21:3b:f6:70:34:bf:5f:5e:
65:7e:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:09 2026 by rpki-client