Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0oQRzbwu8tVQuAFNVT76itTB-ds.roa
File: 0oQRzbwu8tVQuAFNVT76itTB-ds.roa (raw, json)
Hash identifier: or8fXiBC88b3XHiCm0lKvoq8OkH14Ur6Lb6V7QHyjpE=
Subject key identifier: D2:84:11:CD:BC:2E:F2:D5:50:B8:01:4D:55:3E:FA:8A:D4:C1:F9:DB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E6E9D5D287A807A12BAB71E61B619172A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0oQRzbwu8tVQuAFNVT76itTB-ds.roa
Signing time: Thu 28 May 2026 12:44:27 +0000
ROA not before: Thu 28 May 2026 12:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 79.175.105.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:9d:5d:28:7a:80:7a:12:ba:b7:1e:61:b6:19:17:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 28 12:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d28411cdbc2ef2d550b8014d553efa8ad4c1f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:bd:ba:59:c4:e9:8b:99:84:66:7f:78:10:
ae:78:f5:7e:3d:fc:2e:e9:52:ec:8f:47:46:9b:ed:
87:c4:8e:54:d0:73:9d:d6:9e:22:7e:8f:87:47:d8:
65:04:46:90:30:78:97:b7:9d:1a:5e:6f:41:c2:b9:
bc:0a:c8:f7:3f:97:86:51:71:5b:e8:0f:4a:07:f4:
19:3b:cc:6e:7c:5e:9a:fc:98:aa:b9:f1:1c:1d:13:
23:49:f8:e3:42:88:ca:b6:ed:cf:4c:69:46:26:9e:
70:49:6a:cf:60:aa:ba:1d:43:74:42:7c:4e:7a:ed:
a7:86:3b:a2:38:e3:58:d2:68:42:32:d4:79:f1:b1:
58:f4:5c:1a:8b:53:63:38:f5:d3:26:d6:0c:8d:d3:
9e:03:3d:e0:6d:2c:f7:11:4e:de:9c:12:4e:af:14:
33:ff:26:1b:4b:19:0e:82:44:d9:57:80:e5:74:5f:
11:16:80:e2:00:c7:40:36:22:63:37:c1:f2:88:79:
02:5d:4f:89:96:52:35:62:81:98:1b:d4:06:d3:d6:
fc:3d:c5:31:df:63:1b:a5:15:5f:21:61:5f:50:cd:
d2:f3:10:1c:a1:f1:42:76:ef:a7:ed:bc:4b:58:9e:
96:d3:53:6b:4b:ed:67:42:51:f9:23:31:84:44:96:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:11:CD:BC:2E:F2:D5:50:B8:01:4D:55:3E:FA:8A:D4:C1:F9:DB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0oQRzbwu8tVQuAFNVT76itTB-ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
81.18.48.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f6:4b:5b:0a:a7:1a:7b:1c:5a:ec:85:07:8e:fc:98:33:08:
a9:00:57:51:85:d0:91:d2:3c:f3:29:36:5b:45:3d:46:1c:7b:
81:83:e9:63:fb:ad:ca:f5:ed:34:4f:f9:c4:c9:3f:69:04:02:
ac:7f:e3:c0:2f:8c:ed:56:8e:e7:be:7e:93:86:74:5e:97:38:
c8:3e:fe:0b:1d:b2:72:68:c0:4c:eb:21:d5:4d:28:75:f6:6a:
b8:90:5e:14:64:25:4c:59:22:3d:de:7f:5e:66:d1:d8:16:b3:
ca:cf:8d:7e:7b:67:5f:c1:99:a4:72:5b:5c:50:03:13:5d:99:
40:79:dc:52:76:c4:4f:c0:41:c9:f3:a3:3d:0a:6b:56:52:4c:
b6:c2:a6:15:3d:d8:89:eb:f9:d3:c9:40:b9:f3:2d:bc:90:d6:
f8:76:87:bb:5e:f3:f8:49:d8:02:d1:ff:cc:de:06:db:31:3b:
cc:01:d3:9d:b6:a9:60:f1:5d:16:e2:af:82:4b:4e:09:46:0e:
e4:f3:04:29:91:31:d5:76:d9:52:03:b9:bc:e2:1a:4e:6d:4a:
8d:4a:3e:11:c7:a0:ca:39:c5:40:ec:58:bf:c3:a4:15:62:b6:
c8:52:75:01:f0:4f:56:b3:05:38:b8:7c:b9:f1:6f:92:f9:90:
e5:59:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:59 2026 by rpki-client