Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/609fmZShtftBYz3MonP2d4QwZ8Y.roa
File: 609fmZShtftBYz3MonP2d4QwZ8Y.roa (raw, json)
Hash identifier: JQzfGBg7CcdkHiXYWaaMlnifZYezFZnWO4xFnlDmuj4=
Subject key identifier: EB:4F:5F:99:94:A1:B5:FB:41:63:3D:CC:A2:73:F6:77:84:30:67:C6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DB9109E7DCB855987E56CD096157C52BB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/609fmZShtftBYz3MonP2d4QwZ8Y.roa
Signing time: Thu 23 Apr 2026 06:39:27 +0000
ROA not before: Thu 23 Apr 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 178.253.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:10:9e:7d:cb:85:59:87:e5:6c:d0:96:15:7c:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 23 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb4f5f9994a1b5fb41633dcca273f677843067c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:7e:c8:9b:08:df:ab:04:48:92:cb:35:e9:
9c:a7:80:16:f9:a0:4a:1f:eb:39:76:11:b8:b4:3e:
b7:45:eb:e3:f5:7b:12:64:db:de:1c:96:57:a4:3d:
f6:35:39:5d:2f:c4:66:4c:1d:f8:2e:3e:cc:e8:93:
b8:06:5c:37:78:e7:cc:ef:5f:5c:e6:21:7b:40:69:
f9:94:ab:59:e2:0e:7c:fc:f4:1d:ab:d9:a8:43:86:
e6:ec:80:9d:70:f6:38:ef:53:71:23:7c:16:5e:cd:
d4:7d:b7:9f:5d:5e:c1:48:b1:d3:ce:af:8d:c8:ad:
47:3b:a4:36:81:a0:b5:1e:12:dc:ca:be:5e:f0:b9:
b9:c8:dd:71:47:03:3c:b3:4b:63:15:95:c2:a1:bb:
66:bd:c9:6b:50:15:a4:e5:0d:44:96:54:2c:7d:16:
a9:da:84:eb:b7:27:7b:6f:64:c0:fd:c4:ba:3f:18:
f1:c4:5d:e9:78:a8:2f:23:0f:11:3b:55:2e:08:2e:
87:51:fc:52:7c:89:44:47:0d:6a:ee:f8:9a:8b:05:
a4:ab:69:68:23:ba:51:c2:38:bf:9f:9d:f5:8e:9f:
4b:dd:ed:de:8c:83:03:c8:3e:50:7d:9a:cd:39:cb:
33:fa:f0:b7:a8:df:39:71:7e:e6:3e:50:dc:9f:29:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:5F:99:94:A1:B5:FB:41:63:3D:CC:A2:73:F6:77:84:30:67:C6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/609fmZShtftBYz3MonP2d4QwZ8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.229.0/24
Signature Algorithm: sha256WithRSAEncryption
30:20:38:3c:90:05:9b:29:3f:da:44:3c:ff:b4:ab:c8:d0:44:
c5:fa:bf:7c:a3:0d:19:67:81:03:94:f7:f5:78:53:5a:3b:29:
14:bd:33:c1:e0:70:27:41:7d:7b:87:8b:cf:ff:39:76:0b:5c:
30:c6:9d:28:b6:a7:15:40:b4:aa:b8:61:8f:9e:bb:50:50:3c:
13:f4:38:4e:c4:4d:a3:e3:b6:29:ac:30:96:67:bc:60:64:4d:
6e:5a:08:91:fd:47:46:22:3b:0a:a9:f4:df:1b:1e:d4:e2:bc:
86:79:12:09:88:dc:36:96:9a:54:17:65:5f:4f:47:a9:19:02:
45:e9:bc:55:40:9e:e5:e4:ef:02:4a:e2:de:87:39:a7:c0:a9:
6f:67:f0:7d:58:15:ac:1e:4d:b3:39:7f:90:d1:69:a3:bd:01:
c4:0a:c3:73:6f:ad:d8:c7:2d:f7:b2:14:af:62:95:96:94:2d:
37:28:86:18:ff:13:99:ad:61:13:7a:bc:d3:72:4a:37:cf:fa:
86:d9:0c:b9:94:e7:00:7b:c9:53:ed:61:6f:5c:df:1e:77:37:
c8:72:56:c7:75:60:89:6d:1e:7c:ef:cf:82:ae:92:1c:28:83:
c9:9b:4a:24:e1:40:b8:0d:df:ba:67:b2:73:4e:80:4c:47:5b:
43:b7:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:24 2026 by rpki-client