Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa
File: RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa (raw, json)
Hash identifier: JBuYTD0WubZn6moVgquEFt/qvUgskccLt/1IQgz3zQw=
Subject key identifier: 46:C0:3F:51:5C:31:59:0F:89:F4:92:19:9B:18:0E:29:5A:E2:8D:E5
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019DF96189856571CD372194F0329A9051FC
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa
Signing time: Tue 05 May 2026 18:23:32 +0000
ROA not before: Tue 05 May 2026 18:23:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199967
IP address blocks: 178.218.136.0/24 maxlen: 24
178.218.137.0/24 maxlen: 24
178.218.138.0/24 maxlen: 24
178.218.139.0/24 maxlen: 24
178.218.140.0/24 maxlen: 24
178.218.141.0/24 maxlen: 24
178.218.142.0/24 maxlen: 24
178.218.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:61:89:85:65:71:cd:37:21:94:f0:32:9a:90:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: May 5 18:23:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c03f515c31590f89f492199b180e295ae28de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:f4:17:82:d9:b5:cf:4d:93:13:4e:5c:a6:
7c:1b:be:19:3f:53:e0:ce:9b:c8:ab:c7:d4:2e:fc:
b8:b3:af:96:fd:cf:39:7f:cb:97:b1:95:70:37:6f:
ad:87:c7:e5:51:b5:21:24:9b:90:ea:ec:bf:f6:11:
c9:c8:3d:76:c7:6f:20:ca:bf:4a:64:a6:c3:71:20:
53:6e:39:bc:95:b9:cc:bf:bd:59:01:a5:d1:5a:69:
b4:da:e0:55:65:e5:1c:97:de:92:a8:0f:40:a8:cc:
b3:e0:9a:e1:87:99:50:83:c3:c5:c4:b8:21:66:fe:
a2:48:f7:10:ea:c4:e8:e0:03:f3:fd:7a:cf:d0:94:
1a:cd:ca:08:4c:ec:5b:1b:08:80:42:02:e0:32:78:
9f:7f:d2:92:55:d5:3f:ea:99:d7:12:3e:33:d2:fd:
9c:71:b1:ed:3e:05:27:d3:1b:c3:2c:41:7c:1b:54:
e4:f3:7b:ba:c1:bf:16:fd:19:19:3d:de:9a:ed:40:
31:bd:3a:08:6a:f9:99:82:a6:94:55:33:3c:75:a6:
b4:e5:ae:34:3b:47:b4:66:9d:fb:e8:cf:c3:49:12:
52:6c:05:6f:74:9b:fe:8e:d0:e6:56:8b:01:8e:35:
c3:9f:53:76:1c:88:23:36:7c:7d:fe:e5:9d:54:68:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:3F:51:5C:31:59:0F:89:F4:92:19:9B:18:0E:29:5A:E2:8D:E5
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c8:74:04:86:3e:1d:d5:93:93:b3:ba:70:40:2f:5f:7d:40:
97:ba:1a:a7:2b:38:c8:31:a6:4b:db:16:52:f2:d9:49:bc:b8:
2b:e7:9c:b4:05:83:c6:c8:d4:c7:e1:45:72:3b:35:48:5f:d1:
03:ed:0b:40:cc:8d:6c:ff:31:ec:fa:e9:cf:0a:ff:67:d1:5c:
60:02:2d:26:b6:57:3a:56:59:44:b1:95:f3:e1:33:15:fa:e1:
d8:15:c0:ce:eb:2f:92:58:bd:f5:b2:c6:74:8a:a8:8b:cc:d3:
f9:25:29:6d:a2:53:7d:51:36:9c:ec:3d:53:79:e1:6f:8d:cd:
a0:6c:6e:a4:49:5f:b7:3e:af:72:9d:29:d1:e0:3b:80:11:c3:
9c:ce:6e:13:3f:48:cd:53:80:53:e6:c7:1a:1a:f9:86:0d:1c:
d3:b5:0e:6e:b3:22:62:63:41:1f:ad:73:93:44:dd:28:89:cb:
36:89:0a:e4:f1:20:6d:ac:5e:56:03:3c:a8:d8:63:cf:7d:6d:
d7:00:91:df:19:4f:bf:dc:a8:cc:a0:20:6c:76:26:38:34:0d:
69:4d:37:55:ac:49:d4:19:37:e0:d6:ff:c8:56:6d:82:62:60:
77:c7:19:22:90:1f:2f:60:a9:f2:d5:0f:2d:93:0c:bb:5f:c3:
96:b0:a7:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ35YYmFZXHNNyGU8DKakFH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjYwNTA1MTgyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmMwM2Y1MTVjMzE1OTBmODlmNDkyMTk5YjE4MGUyOTVhZTI4ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mn0F4LZtc9NkxNOXKZ8G74ZP1Pg
zpvIq8fULvy4s6+W/c85f8uXsZVwN2+th8flUbUhJJuQ6uy/9hHJyD12x28gyr9K
ZKbDcSBTbjm8lbnMv71ZAaXRWmm02uBVZeUcl96SqA9AqMyz4Jrhh5lQg8PFxLgh
Zv6iSPcQ6sTo4APz/XrP0JQazcoITOxbGwiAQgLgMniff9KSVdU/6pnXEj4z0v2c
cbHtPgUn0xvDLEF8G1Tk83u6wb8W/RkZPd6a7UAxvToIavmZgqaUVTM8daa05a40
O0e0Zp376M/DSRJSbAVvdJv+jtDmVosBjjXDn1N2HIgjNnx9/uWdVGjsHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbAP1FcMVkPifSSGZsYDila4o3lMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvUnNBX1VWd3hXUS1KOUpJWm14Z09LVnJpamVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstqIMA0G
CSqGSIb3DQEBCwUAA4IBAQCtyHQEhj4d1ZOTs7pwQC9ffUCXuhqnKzjIMaZL2xZS
8tlJvLgr55y0BYPGyNTH4UVyOzVIX9ED7QtAzI1s/zHs+unPCv9n0VxgAi0mtlc6
VllEsZXz4TMV+uHYFcDO6y+SWL31ssZ0iqiLzNP5JSltolN9UTac7D1TeeFvjc2g
bG6kSV+3Pq9ynSnR4DuAEcOczm4TP0jNU4BT5scaGvmGDRzTtQ5usyJiY0EfrXOT
RN0oics2iQrk8SBtrF5WAzyo2GPPfW3XAJHfGU+/3KjMoCBsdiY4NA1pTTdVrEnU
GTfg1v/IVm2CYmB3xxkikB8vYKny1Q8tkwy7X8OWsKeU
-----END CERTIFICATE-----
Generated at Wed May 6 01:17:30 2026 by rpki-client