Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2xrVuST7SfDzoUQLdvyzggC3504.roa
File: 2xrVuST7SfDzoUQLdvyzggC3504.roa (raw, json)
Hash identifier: 6ud+NwAg/xo1I/8zgYcQsUrbIXMZbDyXlr37ZQ8sq8Q=
Subject key identifier: DB:1A:D5:B9:24:FB:49:F0:F3:A1:44:0B:76:FC:B3:82:00:B7:E7:4E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F35EDC96520BF09816F2561C3154B4BEC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2xrVuST7SfDzoUQLdvyzggC3504.roa
Signing time: Mon 06 Jul 2026 05:36:43 +0000
ROA not before: Mon 06 Jul 2026 05:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 79.175.105.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:ed:c9:65:20:bf:09:81:6f:25:61:c3:15:4b:4b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 6 05:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db1ad5b924fb49f0f3a1440b76fcb38200b7e74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:27:1f:5b:3f:66:49:c2:63:9b:af:9c:82:
02:45:bc:60:a5:85:2c:8e:37:43:f7:23:77:8f:bb:
34:9c:55:3d:04:6e:99:2b:4e:9d:35:a8:da:5e:14:
2d:86:fe:56:44:dd:74:a7:a8:b2:73:c6:06:6f:d3:
24:72:69:8b:7c:27:1c:1d:8d:f3:e0:55:ce:9f:48:
7f:87:26:4f:2d:51:ba:b9:e9:38:22:d9:ae:6d:e6:
a8:6b:0c:4c:6c:e6:e9:1b:06:75:4a:1d:fe:35:9d:
4b:8c:b8:c5:92:e7:c8:8f:33:4a:e5:3d:b0:d2:0b:
45:cb:11:9a:ce:37:c9:af:79:e5:69:61:b2:fa:20:
b8:a0:b1:29:ac:e1:82:e9:31:c2:30:b0:2b:40:c6:
44:34:ec:8b:6b:31:0f:b7:cb:b9:32:08:0f:b4:a1:
5b:9f:ec:7f:f6:10:9d:21:55:5f:76:fd:d2:30:34:
37:b5:fd:c9:5c:60:aa:be:cc:0b:5a:e8:73:89:94:
7d:cf:54:e4:46:d0:f6:f0:a2:01:6d:35:db:fe:22:
1c:a6:fd:c9:0e:74:24:ba:cc:44:69:6c:54:d9:a5:
e8:10:3e:df:71:d7:25:e5:fe:a6:b8:f2:a3:0b:ef:
be:b5:62:5f:da:21:12:86:c3:c0:64:6f:00:0b:9a:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:D5:B9:24:FB:49:F0:F3:A1:44:0B:76:FC:B3:82:00:B7:E7:4E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2xrVuST7SfDzoUQLdvyzggC3504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
109.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e2:25:d4:f7:00:8e:ad:89:b8:9e:39:0f:9f:8f:0e:1c:7f:
b0:2f:ba:61:b4:01:ee:32:d0:6f:b3:b5:b8:1b:3b:24:4c:86:
00:40:b7:ac:51:26:27:1a:4f:8b:77:04:14:4a:48:27:02:7a:
6b:5c:66:62:63:55:fe:db:f4:5c:b7:58:28:08:5a:06:d2:f1:
fd:e1:cc:0c:a5:f7:43:fa:4a:f8:f2:cb:d8:dc:3b:1b:15:ee:
ac:7c:8e:79:32:de:59:31:5d:68:29:8a:88:40:9a:f9:b0:81:
be:4f:be:1f:8c:4f:35:49:6d:a7:44:a0:93:97:13:d0:2b:cf:
65:62:e6:de:b3:7e:46:e4:1f:c2:49:a4:f2:c1:37:e1:a3:42:
44:17:27:dd:e1:96:ae:92:32:70:66:47:0d:d5:a1:d6:80:88:
e5:45:88:f4:52:94:24:ac:ca:d1:d8:98:a0:34:b6:27:8f:fd:
8c:a5:71:2e:73:a1:23:6a:1b:17:33:9f:6a:1e:b8:6d:18:8b:
5d:f9:c4:3e:72:51:df:f9:5f:d2:46:6f:6b:e1:1e:82:13:12:
cc:f0:2b:a1:97:70:bf:0d:74:80:03:11:01:05:45:84:48:f7:
1c:d0:57:59:7d:e2:b2:1d:da:ca:5a:40:d8:09:07:fe:61:ee:
3e:3d:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:50 2026 by rpki-client