Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9QJyPE47ILJ_6u8UEKC9mJIa2xw.roa
File: 9QJyPE47ILJ_6u8UEKC9mJIa2xw.roa (raw, json)
Hash identifier: gtdRQ13RLWL8v19ULjdG2KaYr/O1Bt0FTUBB/cHZ/a0=
Subject key identifier: F5:02:72:3C:4E:3B:20:B2:7F:EA:EF:14:10:A0:BD:98:92:1A:DB:1C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019CB787A94A46AEC6735C4D50B649BE5EDB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9QJyPE47ILJ_6u8UEKC9mJIa2xw.roa
Signing time: Wed 04 Mar 2026 06:27:27 +0000
ROA not before: Wed 04 Mar 2026 06:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
178.253.239.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:87:a9:4a:46:ae:c6:73:5c:4d:50:b6:49:be:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 4 06:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f502723c4e3b20b27feaef1410a0bd98921adb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:b5:ab:39:73:d7:62:64:5b:35:1e:66:5d:
89:3c:99:ed:63:ab:23:73:01:55:c8:60:a5:76:0f:
b1:26:2c:6b:6e:f9:42:ce:e1:ce:62:46:f4:78:2b:
e4:aa:fe:e7:62:51:36:5b:4a:4c:6c:fc:ed:a5:3d:
a2:e7:44:c6:26:90:2c:db:20:6e:70:78:80:bf:ab:
d1:17:b8:4e:81:bd:74:0b:bf:89:f0:2f:34:98:0c:
90:31:b0:64:e9:17:83:5f:42:84:ab:b4:0c:55:17:
25:26:f6:f9:47:b5:dd:15:b3:9b:05:01:1a:67:47:
e1:fb:86:c7:13:76:34:f5:7e:6c:00:f4:f7:fa:e5:
8f:1f:ee:d1:bd:19:9a:5b:34:0e:2c:9c:a5:99:8e:
4b:36:7a:fe:53:9f:ba:91:e1:91:6a:6a:21:21:a6:
ec:3d:c5:ef:68:76:05:c3:37:be:54:70:bd:be:bd:
5a:2b:40:f2:ee:5d:cd:0f:3e:60:32:d4:de:d8:ae:
77:89:7c:b8:aa:22:57:4e:83:6f:e4:d0:ec:af:3f:
0a:60:1d:c1:10:9c:cd:c1:c1:67:29:12:8b:b9:dc:
a7:18:33:5f:de:be:f8:92:99:4a:ff:77:ee:47:6b:
e9:55:f6:af:1f:ee:bb:c4:a1:74:a3:cd:f1:0c:fc:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:72:3C:4E:3B:20:B2:7F:EA:EF:14:10:A0:BD:98:92:1A:DB:1C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9QJyPE47ILJ_6u8UEKC9mJIa2xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.45.0/24
109.121.47.0/24
178.219.6.0/24
178.253.229.0/24
178.253.239.0/24
185.47.91.0/24
188.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8f:49:b5:c4:f4:1c:7f:4d:9a:00:f9:2b:be:cb:69:56:6c:
76:c6:34:56:ac:7e:e0:a0:53:cd:f8:af:07:ef:fe:41:6a:2e:
d9:dc:9c:4b:c1:53:82:af:a4:fc:14:05:4b:c6:39:d0:05:5f:
31:22:b3:03:44:a5:9a:0c:22:e5:4a:4d:25:c8:34:79:89:df:
fe:9e:4b:08:50:b8:ec:a4:e3:be:c6:a5:a8:69:5a:0a:8d:7c:
3b:06:b1:ca:f0:48:43:56:2c:2f:d7:5a:44:eb:dd:49:65:5a:
f4:52:a0:b6:9a:6d:ae:40:e7:d5:81:3f:a7:c4:8d:52:da:6c:
e7:92:01:19:99:04:dd:9e:98:85:3b:d9:3f:08:ff:6a:c6:dd:
6b:6a:cd:f7:ce:59:46:7f:7a:81:07:37:ce:73:85:58:d4:67:
9c:d3:94:fc:59:ec:ba:03:34:74:2f:a5:c5:3b:ad:68:31:48:
bb:7d:dd:59:8d:d9:38:0e:e0:73:b0:4c:40:6c:ca:dc:7f:f2:
4a:53:93:0e:94:69:11:dc:f2:f5:f3:d6:e7:b1:c7:3c:af:ad:
38:ff:19:1e:af:22:4c:ee:46:af:2e:fa:96:98:f9:da:70:54:
05:14:f5:18:c1:65:b9:4e:1f:e9:c1:c0:e3:84:d3:9d:38:a3:
ca:92:14:b4
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZy3h6lKRq7Gc1xNULZJvl7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMzA0MDYyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTAyNzIzYzRlM2IyMGIyN2ZlYWVmMTQxMGEwYmQ5ODkyMWFkYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi+1qzlz12JkWzUeZl2JPJntY6sj
cwFVyGCldg+xJixrbvlCzuHOYkb0eCvkqv7nYlE2W0pMbPztpT2i50TGJpAs2yBu
cHiAv6vRF7hOgb10C7+J8C80mAyQMbBk6ReDX0KEq7QMVRclJvb5R7XdFbObBQEa
Z0fh+4bHE3Y09X5sAPT3+uWPH+7RvRmaWzQOLJylmY5LNnr+U5+6keGRamohIabs
PcXvaHYFwze+VHC9vr1aK0Dy7l3NDz5gMtTe2K53iXy4qiJXToNv5NDsrz8KYB3B
EJzNwcFnKRKLudynGDNf3r74kplK/3fuR2vpVfavH+67xKF0o83xDPx0CQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFPUCcjxOOyCyf+rvFBCgvZiSGtscMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvOVFKeVBFNDdJTEpfNnU4VUVLQzltSklhMnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAURIwAwQA
bXktAwQAbXkvAwQAstsGAwQAsv3lAwQAsv3vAwQAuS9bAwQAvP/GMA0GCSqGSIb3
DQEBCwUAA4IBAQBrj0m1xPQcf02aAPkrvstpVmx2xjRWrH7goFPN+K8H7/5Bai7Z
3JxLwVOCr6T8FAVLxjnQBV8xIrMDRKWaDCLlSk0lyDR5id/+nksIULjspOO+xqWo
aVoKjXw7BrHK8EhDViwv11pE691JZVr0UqC2mm2uQOfVgT+nxI1S2mznkgEZmQTd
npiFO9k/CP9qxt1ras33zllGf3qBBzfOc4VY1Gec05T8Wey6AzR0L6XFO61oMUi7
fd1Zjdk4DuBzsExAbMrcf/JKU5MOlGkR3PL189bnscc8r604/xkeryJM7kavLvqW
mPnacFQFFPUYwWW5Th/pwcDjhNOdOKPKkhS0
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:22 2026 by rpki-client