Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/357aU_Bqeo-ITfxpfS1ObGT8NWc.roa
File: 357aU_Bqeo-ITfxpfS1ObGT8NWc.roa (raw, json)
Hash identifier: Z+bg5FEYPpuQIHyIUg6M6hUHzHWDATdAb8rEM4x7d4A=
Subject key identifier: DF:9E:DA:53:F0:6A:7A:8F:88:4D:FC:69:7D:2D:4E:6C:64:FC:35:67
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A00034CC329CEB8E2CC4FFC6DACE995224
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/357aU_Bqeo-ITfxpfS1ObGT8NWc.roa
Signing time: Fri 14 Aug 2026 12:17:35 +0000
ROA not before: Fri 14 Aug 2026 12:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.175.105.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:34:cc:32:9c:eb:8e:2c:c4:ff:c6:da:ce:99:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 14 12:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9eda53f06a7a8f884dfc697d2d4e6c64fc3567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:a8:59:b4:f1:ca:56:80:44:16:1d:f9:f7:
67:50:3e:d7:cd:f4:a5:91:fb:ed:99:a7:11:2a:bc:
bd:fc:66:82:2b:06:0a:29:cb:e5:b1:6b:b9:ed:6b:
dc:35:43:82:46:c8:b7:49:c1:58:c9:f6:7c:e0:aa:
64:b8:f8:c1:5e:0e:95:08:a8:5d:e2:2c:0f:f2:92:
7d:76:8b:3e:2c:10:18:96:f7:15:03:55:0a:aa:90:
73:bb:46:a6:e6:2b:41:26:61:41:02:79:cb:b1:fa:
87:e3:b6:e0:1f:5b:c4:31:64:a2:59:b3:2e:54:35:
4a:c9:09:32:35:21:3e:44:b4:38:d5:5c:52:3b:48:
3d:da:72:00:2d:55:fe:19:73:c9:5b:8a:c4:b8:86:
85:b8:d2:c2:67:1c:68:c2:b2:84:2f:1c:87:9b:2d:
d5:64:7e:ba:0a:f8:8f:dc:8f:80:84:06:34:f2:95:
0f:99:d8:55:95:41:dd:07:1f:64:4c:94:24:d2:2a:
f1:92:33:7f:83:23:e7:8c:11:cf:d4:03:b6:26:7c:
56:db:00:e2:9b:22:c1:ac:49:e8:76:6a:40:5e:25:
f3:d4:2a:49:30:0f:30:a8:c9:e8:5a:6b:f5:68:33:
41:46:b8:19:63:9b:99:e9:2d:02:de:76:fb:4e:78:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:DA:53:F0:6A:7A:8F:88:4D:FC:69:7D:2D:4E:6C:64:FC:35:67
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/357aU_Bqeo-ITfxpfS1ObGT8NWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
81.18.48.0/24
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.198.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:67:c7:60:f5:ab:f4:5f:e4:5b:25:59:ff:07:d9:6a:76:0e:
a3:b7:b7:ba:41:5a:4f:1e:08:55:22:33:6e:f0:37:c7:4b:f6:
97:e3:92:07:09:89:71:09:11:15:88:a2:03:69:2f:f8:19:07:
e6:b4:ac:f5:3a:5b:5b:4f:e4:90:9f:7e:1b:6b:9d:ba:29:56:
c7:a5:1d:29:ff:07:97:54:1a:82:45:ae:0c:b0:b5:0f:25:10:
c3:d6:78:85:1a:d1:2e:30:62:5f:e1:90:c0:43:35:f3:07:f2:
10:6a:c1:92:ce:a0:ab:bc:c5:04:6c:d5:c4:0e:99:f7:09:53:
43:13:0a:ff:70:6c:37:0c:bb:e6:8c:71:8e:37:11:35:c5:7a:
91:94:b8:69:a9:3b:11:93:19:ca:f2:8a:a1:61:8d:39:22:67:
0d:a3:f1:27:0c:57:3c:2a:5a:da:55:ed:64:4b:16:97:1d:5c:
bd:44:f7:73:df:84:1a:b4:89:8b:27:5d:aa:7c:16:b7:6b:ae:
8d:1b:0d:b2:98:78:0b:5f:1d:43:02:1f:88:48:16:9c:e1:b4:
e5:64:9e:6a:e7:3f:ab:08:16:c5:a0:91:0c:7b:d3:44:aa:d1:
da:7a:09:b7:48:79:d2:2f:d9:51:28:b7:54:15:d7:83:e4:ad:
88:26:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:38 2026 by rpki-client