Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DNvvDv5Dhodys6fLzoU50viEhQ.roa
File: 6DNvvDv5Dhodys6fLzoU50viEhQ.roa (raw, json)
Hash identifier: F3RIfl2hhqzb1yfKmrs2Dt7lKV/77MvKMXS0wDX2hKk=
Subject key identifier: E8:33:6F:BC:3B:F9:0E:1A:1D:CA:CE:9F:2F:3A:14:E7:4B:E2:12:14
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EEEE7944ECB75D5A5C498AE0B739BBC12
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DNvvDv5Dhodys6fLzoU50viEhQ.roa
Signing time: Mon 22 Jun 2026 10:36:54 +0000
ROA not before: Mon 22 Jun 2026 10:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 109.121.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:e7:94:4e:cb:75:d5:a5:c4:98:ae:0b:73:9b:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 22 10:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8336fbc3bf90e1a1dcace9f2f3a14e74be21214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:0e:0f:f3:10:c8:c6:93:f2:3a:da:41:1e:
94:88:bf:71:15:cf:47:68:7a:1e:5e:8f:02:a8:fa:
eb:d8:d8:a9:eb:ac:5d:08:c6:aa:ff:a6:4f:19:ae:
12:5d:83:bc:d7:8e:a7:a5:ba:18:f4:04:1e:d5:bb:
4c:fa:25:62:7e:83:5b:c9:a6:d0:ef:ea:45:02:c8:
a5:90:91:37:19:2d:1a:53:0b:30:43:f4:57:d8:89:
27:64:1e:49:84:d4:34:e4:5e:d8:94:54:c8:dc:27:
a0:ca:14:55:00:6b:9d:02:a6:2a:85:b8:53:79:f7:
d6:21:a3:b8:0e:e5:2b:18:66:f4:94:85:46:0a:78:
f8:c9:d6:0b:8e:71:e7:a2:37:99:5e:2a:eb:54:4a:
c1:ee:ef:90:10:f0:f8:b6:0b:9b:b5:e9:14:91:5b:
4e:d7:f1:e1:33:94:46:0f:52:34:b5:52:b5:38:dd:
b4:16:e8:65:88:58:d9:53:42:7b:c0:ec:1b:50:20:
a3:ac:5d:a4:b4:61:76:d0:0b:83:dc:dc:b7:be:70:
52:ed:9e:77:46:e4:49:78:33:38:14:7a:39:44:51:
ef:62:5a:21:c3:b3:d0:c5:1a:a8:e6:0d:fd:d6:21:
7f:74:4e:05:0d:31:bb:87:5e:4d:45:96:22:4e:cc:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:33:6F:BC:3B:F9:0E:1A:1D:CA:CE:9F:2F:3A:14:E7:4B:E2:12:14
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DNvvDv5Dhodys6fLzoU50viEhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3a:8f:eb:ce:26:bd:4f:95:a3:58:23:59:f8:a4:8e:c4:e9:
26:41:97:eb:9e:b3:c1:07:c3:8b:c1:c1:12:2f:77:22:4a:49:
f8:f5:f1:7b:ec:8e:22:a9:95:7a:e8:7a:8c:4e:c5:d4:b2:02:
17:84:16:6d:42:7b:9d:df:9f:af:d9:ae:0f:c0:40:cf:29:da:
aa:4b:20:c5:65:a1:29:a5:5b:0c:fe:84:68:a8:1e:66:6f:7e:
be:0f:9a:c7:5c:67:26:84:bc:65:65:a5:2e:e6:7a:59:84:b1:
cf:d7:28:dc:be:61:9b:2e:10:e7:76:cb:d7:37:7e:82:f4:d7:
ab:29:5e:15:db:9f:11:7b:e3:50:cb:a5:26:eb:33:7c:d3:bf:
03:00:cb:e0:f2:42:0d:8f:a8:ef:09:65:b4:05:fc:1b:72:71:
b4:43:a4:ce:ca:fd:f4:ba:cc:be:37:53:98:4f:0e:81:a7:e0:
e2:b1:d9:79:7d:ad:9e:3c:eb:18:b5:82:21:cf:f7:24:8f:66:
55:b0:78:91:35:e1:37:73:7a:d2:ec:da:6d:5d:6d:c5:9c:06:
1b:95:bf:f2:06:f6:9d:1c:54:51:cb:b3:4d:9b:08:0c:21:29:
4b:bd:ef:c5:0c:57:74:f8:93:41:1d:0d:e2:04:cf:26:a5:ec:
c0:1a:0b:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7u55ROy3XVpcSYrgtzm7wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNjIyMTAzNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODMzNmZiYzNiZjkwZTFhMWRjYWNlOWYyZjNhMTRlNzRiZTIxMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBMOD/MQyMaT8jraQR6UiL9xFc9H
aHoeXo8CqPrr2Nip66xdCMaq/6ZPGa4SXYO8146npboY9AQe1btM+iVifoNbyabQ
7+pFAsilkJE3GS0aUwswQ/RX2IknZB5JhNQ05F7YlFTI3CegyhRVAGudAqYqhbhT
effWIaO4DuUrGGb0lIVGCnj4ydYLjnHnojeZXirrVErB7u+QEPD4tgubtekUkVtO
1/HhM5RGD1I0tVK1ON20FuhliFjZU0J7wOwbUCCjrF2ktGF20AuD3Ny3vnBS7Z53
RuRJeDM4FHo5RFHvYlohw7PQxRqo5g391iF/dE4FDTG7h15NRZYiTszGAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgzb7w7+Q4aHcrOny86FOdL4hIUMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNkROdnZEdjVEaG9keXM2Zkx6b1U1MHZpRWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkoMA0G
CSqGSIb3DQEBCwUAA4IBAQAUOo/rzia9T5WjWCNZ+KSOxOkmQZfrnrPBB8OLwcES
L3ciSkn49fF77I4iqZV66HqMTsXUsgIXhBZtQnud35+v2a4PwEDPKdqqSyDFZaEp
pVsM/oRoqB5mb36+D5rHXGcmhLxlZaUu5npZhLHP1yjcvmGbLhDndsvXN36C9Ner
KV4V258Re+NQy6Um6zN8078DAMvg8kINj6jvCWW0BfwbcnG0Q6TOyv30usy+N1OY
Tw6Bp+Disdl5fa2ePOsYtYIhz/ckj2ZVsHiRNeE3c3rS7NptXW3FnAYblb/yBvad
HFRRy7NNmwgMISlLve/FDFd0+JNBHQ3iBM8mpezAGgu2
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:54 2026 by rpki-client