Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0PkIY7zROrhsZPfONU2sWlkIQtI.roa
File: 0PkIY7zROrhsZPfONU2sWlkIQtI.roa (raw, json)
Hash identifier: 4++prSgdu1vXGa2+o9dTLyH6RlShQVWpnd4TZtqvHzI=
Subject key identifier: D0:F9:08:63:BC:D1:3A:B8:6C:64:F7:CE:35:4D:AC:5A:59:08:42:D2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0E21223F6C85C755336C53092D5A5A30A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0PkIY7zROrhsZPfONU2sWlkIQtI.roa
Signing time: Sun 27 Sep 2026 08:53:54 +0000
ROA not before: Sun 27 Sep 2026 08:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198077
IP address blocks: 188.255.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:12:23:f6:c8:5c:75:53:36:c5:30:92:d5:a5:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 27 08:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f90863bcd13ab86c64f7ce354dac5a590842d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:bb:c8:2a:10:c5:61:90:61:09:2a:3e:01:
e8:36:f1:04:58:3a:3c:7d:e0:be:01:7a:1b:0b:df:
3b:cb:bf:96:ab:db:d2:b9:b2:3e:7f:5f:cd:72:0f:
3f:c2:6f:cc:e1:c9:c0:93:32:3d:82:ed:e9:b5:b6:
27:69:f7:ad:64:3a:f9:dd:58:fb:8f:f5:56:54:df:
55:34:cd:42:61:36:83:32:20:28:7d:4d:c1:28:ae:
3d:1e:83:40:e4:c3:21:17:69:9a:d7:77:72:ae:e4:
4a:fc:fc:e8:b8:79:75:e6:97:a0:bd:aa:ef:b2:93:
42:ba:bd:6a:74:f3:66:d3:aa:51:6c:2f:6f:df:7e:
2a:f2:34:8e:f3:c7:e2:0d:a0:1a:b7:3e:69:22:2c:
d3:f6:41:be:ee:0d:c0:05:f6:6f:a2:d8:f7:a1:3f:
98:af:3e:f3:0e:89:8d:79:34:3d:8e:f8:0b:5a:35:
8d:b4:cd:e3:09:cb:7d:33:b0:24:d8:71:7f:2b:19:
4d:84:30:87:97:b8:a0:f4:e3:e3:d9:ff:65:b1:b5:
f6:a7:02:b1:f5:26:74:8a:c6:c3:f5:41:b9:cc:a7:
22:e8:d5:32:27:1e:cb:e8:7f:4e:eb:fb:c3:0b:0c:
02:fb:a6:a2:0e:ab:cf:a5:2b:bf:8e:2c:da:0e:67:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:08:63:BC:D1:3A:B8:6C:64:F7:CE:35:4D:AC:5A:59:08:42:D2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0PkIY7zROrhsZPfONU2sWlkIQtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:37:1a:0a:49:e1:cb:0f:43:87:26:be:82:7c:56:1b:bf:5b:
c2:1a:3f:04:98:f8:cc:a0:90:ad:c9:bf:6c:05:80:3c:c1:5e:
a0:51:ef:62:ed:3a:6b:36:fd:18:49:0b:48:73:d5:72:37:22:
fa:26:37:dc:4a:e1:2e:a5:02:7f:48:28:0b:bd:8f:c8:ac:91:
35:91:c1:9c:6e:7f:34:3e:68:a7:54:8e:64:96:4c:a3:02:7d:
2d:fd:5d:f2:40:3f:b0:38:3a:c6:12:f0:99:13:d5:ae:16:ed:
15:64:15:4c:da:19:95:c6:69:46:ea:f6:20:8e:b6:2a:f2:63:
eb:9f:54:dd:2e:00:0d:79:55:8d:13:88:64:7f:71:62:b6:0d:
a6:78:c7:f8:79:08:39:2f:ac:e2:b5:68:8c:67:23:f7:5d:9f:
c4:d0:06:39:bd:45:f9:6b:6e:c9:0a:30:37:05:11:56:8b:5e:
0d:5e:50:b5:c1:90:fc:9c:2a:f2:60:f4:01:e4:d5:1a:27:97:
ef:1e:1e:0f:19:06:a5:c3:23:eb:a3:0f:85:6c:4d:73:84:a1:
71:ee:ca:78:9b:82:2c:9d:35:72:2a:9c:2e:ea:7e:53:0d:1a:
9a:aa:01:d7:ee:2b:64:57:ce:dd:45:91:d9:2d:13:b6:01:5c:
65:56:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:02:11 2026 by rpki-client