Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/o4qZF_-oTplQnx4XRlrvsCPMnyw.roa
File: o4qZF_-oTplQnx4XRlrvsCPMnyw.roa (raw, json)
Hash identifier: PzAIk+WzfufDVzmZzjBFWVTWBRCDXJAjhPMn4fL4U24=
Subject key identifier: A3:8A:99:17:FF:A8:4E:99:50:9F:1E:17:46:5A:EF:B0:23:CC:9F:2C
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A10C93835F2507F532177008945661E43F
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/o4qZF_-oTplQnx4XRlrvsCPMnyw.roa
Signing time: Mon 05 Oct 2026 14:59:16 +0000
ROA not before: Mon 05 Oct 2026 14:59:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 178.214.210.0/24 maxlen: 24
178.214.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:93:83:5f:25:07:f5:32:17:70:08:94:56:61:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Oct 5 14:59:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a38a9917ffa84e99509f1e17465aefb023cc9f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:48:4d:a2:ad:68:ac:2f:4b:65:4b:a3:e0:
40:af:69:04:6b:68:9e:6a:ac:03:56:85:1d:02:98:
17:15:b5:66:c5:2e:4a:74:18:89:16:c4:e5:98:07:
01:c7:7c:c1:a4:0a:41:0d:42:63:06:60:7f:7c:1b:
2b:3a:fe:3c:c8:de:5a:22:dd:cc:12:31:6a:f5:18:
cc:9f:6e:79:fb:25:c3:eb:01:f3:7b:66:1b:8d:7e:
f7:16:9b:f4:00:46:23:7d:e7:e3:24:fb:9f:81:5e:
75:c8:e9:7d:08:ac:af:bf:15:23:9b:1d:fd:12:aa:
e7:2f:ad:7f:60:b2:97:5f:f7:4c:f8:59:a1:5d:55:
f9:ce:84:83:8c:7e:85:b2:c3:09:7a:2e:36:a3:a7:
6f:af:f8:f1:ad:4b:74:84:54:31:30:af:0d:a2:63:
f7:27:4e:b4:78:c5:f1:d2:90:d7:29:0a:77:2b:09:
14:61:4d:a0:97:16:c3:db:52:85:e0:c5:80:56:7a:
18:f5:80:df:9d:c9:78:c9:bf:08:b7:4f:00:ef:88:
13:79:64:e0:b5:4a:64:32:bd:b6:69:44:d1:a3:f7:
b6:81:db:17:96:b5:5a:7f:d9:c7:06:69:4a:90:90:
9a:01:b9:4b:c6:bf:57:a2:17:80:f9:16:52:ef:aa:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:99:17:FF:A8:4E:99:50:9F:1E:17:46:5A:EF:B0:23:CC:9F:2C
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/o4qZF_-oTplQnx4XRlrvsCPMnyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.210.0/24
178.214.222.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3b:2b:d6:5f:37:d2:69:8b:77:5b:57:01:77:d0:62:f5:a2:
b0:81:74:04:ee:cf:e8:0b:45:d8:8d:9a:9e:ac:de:cc:57:4e:
2d:c9:a8:96:2c:e2:45:08:13:b7:42:97:9b:36:7a:3a:a2:6f:
35:6a:76:53:8f:0e:14:00:8c:6b:31:2b:b2:97:c4:da:c0:c5:
ae:81:b8:50:6f:60:c8:b3:df:83:14:97:dd:2e:18:c2:9d:6f:
aa:96:24:14:74:b3:0b:3a:5f:ae:5a:41:31:af:c7:45:a4:a8:
dd:c8:72:d8:fe:19:fe:2c:69:0f:e9:84:ea:4f:24:e7:66:46:
2a:cb:63:75:d1:f2:53:dc:75:e7:bf:76:75:85:b6:4f:2d:6d:
7d:de:f5:4e:76:88:73:68:a2:dd:a0:ff:b3:15:02:64:e5:86:
a7:6a:5e:e9:32:f7:21:e9:29:71:11:8e:82:08:2a:72:4d:da:
b4:22:7c:fe:38:ca:9c:12:f4:6e:c8:82:21:14:66:e5:e0:64:
b5:83:c2:f1:b5:24:45:d9:fc:d1:dd:2c:7a:13:69:4e:35:4f:
ad:c6:d6:60:c0:28:7e:7c:97:c2:de:01:89:f7:44:e9:0a:dd:
ed:15:6e:5a:a0:e6:53:16:7b:f0:46:49:78:be:4d:79:ac:fd:
ac:c7:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:23 2026 by rpki-client