Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/hRU-I7VYBBSVdVSepj3lB_SbNbo.roa
File: hRU-I7VYBBSVdVSepj3lB_SbNbo.roa (raw, json)
Hash identifier: QFiqe79GtYZBZg6GY0hgWLy4V/DB651N8dcO63zb6yk=
Subject key identifier: 85:15:3E:23:B5:58:04:14:95:75:54:9E:A6:3D:E5:07:F4:9B:35:BA
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019F045523D40D5F90002019942C90607651
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/hRU-I7VYBBSVdVSepj3lB_SbNbo.roa
Signing time: Fri 26 Jun 2026 14:28:36 +0000
ROA not before: Fri 26 Jun 2026 14:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:55:23:d4:0d:5f:90:00:20:19:94:2c:90:60:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jun 26 14:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85153e23b55804149575549ea63de507f49b35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:5e:57:a9:fc:25:a0:83:23:07:89:67:10:
4c:10:69:af:1e:af:f2:00:96:13:b9:25:3b:bb:77:
10:a8:f3:c7:73:ac:82:76:05:f5:01:6d:03:08:6a:
c8:8c:77:11:47:af:b7:76:24:e6:d0:3d:69:73:e4:
7e:d8:3e:2e:4d:cc:89:cf:97:27:4f:ea:a8:50:3d:
49:b4:44:f2:09:99:e6:2a:ed:49:26:f0:87:67:eb:
4b:82:16:ab:af:19:df:c2:de:22:47:83:87:ae:2e:
44:e3:6c:84:27:01:9a:ed:ba:d5:14:20:40:ac:bb:
12:c2:f0:4f:40:8c:4d:97:d3:80:2a:9d:8c:7d:7e:
fd:cf:c9:f7:83:94:fa:4c:f7:ff:fa:54:7a:95:6a:
67:6b:f1:f2:96:77:5e:6b:66:42:5d:db:ba:48:f9:
d5:1c:4b:82:22:e5:73:d4:89:8f:24:ed:4b:de:c4:
c8:f9:d5:d5:da:1f:02:1f:87:ce:a6:d2:df:2c:e7:
a8:59:7d:29:b6:66:e7:b0:3c:26:61:69:00:39:e9:
db:07:3b:ab:d4:76:06:6c:32:89:59:3a:0d:a3:86:
56:d1:63:ee:63:a4:3a:6d:b5:d8:42:e4:c9:5d:91:
79:be:8b:9c:8d:f3:9e:c9:8d:5d:1b:7e:22:31:ca:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:3E:23:B5:58:04:14:95:75:54:9E:A6:3D:E5:07:F4:9B:35:BA
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/hRU-I7VYBBSVdVSepj3lB_SbNbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:83:16:a4:66:51:f6:26:ac:0a:3c:88:f8:f8:ef:84:c7:a5:
5f:45:4a:3c:31:01:fc:39:fc:89:6f:bb:73:21:f9:7e:e2:3f:
38:27:d2:62:53:90:de:51:1e:95:21:13:6d:cb:cb:6e:86:87:
00:56:ce:5c:2d:db:04:9e:c5:bc:b4:9d:f7:44:fb:5f:fd:87:
08:41:19:fe:f7:77:65:e4:c0:f4:ee:e1:1d:c3:36:98:3a:c4:
58:33:9e:43:7f:68:9b:ad:88:d6:b8:4a:fd:31:5d:aa:7a:96:
7a:9c:28:c6:70:ac:1e:f8:b7:11:f6:21:ad:67:2c:91:3f:64:
8d:2e:c5:31:54:2a:67:10:ea:33:18:1c:74:a7:8c:29:98:26:
19:91:01:43:36:af:4d:14:a9:a9:03:dd:a5:9f:e9:29:7a:3a:
f1:7a:a3:dc:67:e3:76:c8:8f:0c:8e:9f:ba:62:ba:40:39:be:
6c:49:9c:23:3a:d4:73:9c:81:bc:ce:ad:9a:f3:45:03:b9:0c:
1d:3f:a2:85:62:8b:56:fb:70:00:50:bf:9f:3f:50:cf:cd:01:
e6:80:f4:20:98:83:71:83:04:c1:21:48:4b:ac:fc:60:c1:d5:
3d:bf:f8:bd:fd:db:e1:6c:5c:aa:63:a3:13:c9:58:6d:7e:87:
08:23:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:57 2026 by rpki-client