Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa
File: qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa (raw, json)
Hash identifier: e4vTmIa36MwpM5S5DLu7QHR1O71kqBkmpQlt4QzUxjA=
Subject key identifier: A8:78:1B:4C:B2:A1:42:5C:32:0E:7E:16:E3:B3:67:D9:78:6B:BC:44
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019E7533C2DDA05C9F2B7F31306DDD46DAA3
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa
Signing time: Fri 29 May 2026 19:26:26 +0000
ROA not before: Fri 29 May 2026 19:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 178.214.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:33:c2:dd:a0:5c:9f:2b:7f:31:30:6d:dd:46:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: May 29 19:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8781b4cb2a1425c320e7e16e3b367d9786bbc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:67:c5:c7:c5:58:2d:df:46:44:8b:80:d9:
58:3f:87:11:98:a6:61:80:72:c1:2f:73:a0:8c:28:
e3:64:ed:f1:6c:40:a4:7b:d1:65:eb:cd:1d:66:68:
35:a4:52:c3:95:a2:d1:b4:1c:a9:4b:40:7c:9c:72:
08:c3:4d:20:ae:55:95:a0:a2:8c:2a:19:61:7c:47:
d2:80:e9:5c:d4:5d:84:f1:76:87:2d:ab:f3:4d:a3:
d3:2a:b7:f7:9e:cb:93:0b:26:a7:62:8f:e0:24:f7:
eb:91:81:a9:a1:8c:fd:40:9e:52:f4:9e:05:55:43:
c3:28:4a:1b:2d:aa:be:9d:44:0f:22:c1:c9:3a:98:
09:36:7d:e5:b8:52:d3:a4:55:26:45:e2:a3:17:5b:
ba:dd:c2:ce:3d:1f:11:f4:04:37:35:d4:13:0a:2f:
14:e3:99:9b:6d:92:be:c6:1e:72:f5:73:3d:a0:a2:
3f:90:b6:d0:b7:b6:24:42:0b:18:a4:c3:d0:cd:3d:
6a:b1:13:09:c1:96:77:ed:02:6d:28:32:99:f8:4b:
e5:cc:68:28:84:56:37:8d:65:b5:86:9d:3e:74:88:
43:a6:67:69:bb:ac:2c:ac:12:7d:4e:55:29:6a:fa:
54:86:d1:b0:5e:ab:39:b2:fd:6e:3b:a8:00:51:4a:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:1B:4C:B2:A1:42:5C:32:0E:7E:16:E3:B3:67:D9:78:6B:BC:44
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c3:8c:4a:6f:4f:19:5a:db:b0:ff:30:09:25:3f:54:11:c3:
55:60:b6:5d:ae:9d:d7:55:94:3f:06:9e:65:5c:36:c6:51:68:
9a:16:90:41:56:de:2b:d0:a0:a1:5c:60:09:56:5b:d4:98:f0:
24:90:0e:d6:11:42:0e:3a:42:a6:ab:92:e6:7a:89:dc:13:d6:
c9:6d:b3:32:a1:b6:c5:38:5b:f4:a6:f6:ee:e2:2c:f3:83:52:
a6:41:5d:42:ed:cd:cb:30:d9:21:91:70:c6:91:c1:9e:f7:1d:
c0:86:6f:d7:c0:24:8d:af:c2:a3:db:0f:e0:41:bf:47:d9:27:
1f:4b:74:76:bc:85:dd:15:36:51:97:62:77:3f:ea:30:6d:c5:
73:59:25:f6:d6:17:bd:38:40:15:2b:ad:99:b6:b6:16:ed:08:
2c:7e:e2:df:2d:e1:b8:72:fe:9d:94:bc:2e:2e:fc:36:4d:8a:
86:e3:81:d6:15:77:9c:3c:a0:b3:2f:8e:9e:9c:8e:23:e6:cb:
9f:26:7f:ab:de:1c:cc:d9:a9:64:e6:d4:78:a0:90:fd:86:78:
af:21:d8:48:49:c6:c9:65:28:bf:76:42:2e:d5:ac:8e:79:be:
8a:54:ff:69:16:1c:34:49:6d:fc:ad:5c:7a:69:ad:88:88:c1:
f7:5e:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:28 2026 by rpki-client