Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AHSymTpNitVhZDbSUaVxiuzHTCs.roa
File: AHSymTpNitVhZDbSUaVxiuzHTCs.roa (raw, json)
Hash identifier: cx31qXVWRfXZU++nHLD1a08arynNxPRz5Jimwhpnv8s=
Subject key identifier: 00:74:B2:99:3A:4D:8A:D5:61:64:36:D2:51:A5:71:8A:EC:C7:4C:2B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A144271650A10B32F3391DC289D63570C8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AHSymTpNitVhZDbSUaVxiuzHTCs.roa
Signing time: Fri 16 Oct 2026 09:59:34 +0000
ROA not before: Fri 16 Oct 2026 09:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:27:16:50:a1:0b:32:f3:39:1d:c2:89:d6:35:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 16 09:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0074b2993a4d8ad5616436d251a5718aecc74c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:ec:95:e6:8c:b8:c1:24:6b:1d:dd:81:e5:
82:e0:7b:17:77:fb:a0:99:25:aa:26:ad:1d:09:c6:
ff:7b:41:92:ce:56:d8:3d:cb:13:72:98:5a:97:46:
56:2b:05:da:f8:d8:9a:42:7b:ae:84:72:5a:c1:87:
2c:5e:59:6b:39:86:e4:87:31:1b:ee:06:18:51:af:
8a:84:7c:bf:8f:c4:a6:34:d9:fb:67:69:c0:3e:48:
38:ed:62:b5:eb:56:16:2d:63:b0:9f:1a:5e:6c:dd:
59:22:79:33:e8:71:74:2b:a8:46:1b:39:c5:79:36:
df:25:bb:24:fc:3f:19:b8:a0:a0:1d:3d:02:7d:da:
df:d2:0e:44:4d:98:e1:44:54:64:96:c0:0f:1b:da:
25:21:c7:2f:a0:e5:be:e2:48:5f:2c:0a:a1:16:fe:
54:96:13:81:f2:6d:09:d4:8c:dc:da:8f:dd:a0:9f:
9f:1a:f7:94:14:39:39:03:d8:2a:9c:6d:7c:9c:a7:
dc:35:4c:91:aa:88:47:be:2e:96:c0:4a:fa:54:bf:
12:91:b1:2a:9c:ae:be:7b:a4:84:09:a0:48:20:ed:
a9:46:d5:27:51:45:b1:b3:a4:17:c5:59:07:fa:ac:
48:50:c0:50:c7:f2:bc:63:a9:d4:04:b8:c0:6a:6e:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:B2:99:3A:4D:8A:D5:61:64:36:D2:51:A5:71:8A:EC:C7:4C:2B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AHSymTpNitVhZDbSUaVxiuzHTCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.198.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
48:16:99:25:3c:b3:77:4e:1a:74:b5:44:3a:6f:ff:bd:ea:bd:
f6:7b:91:b2:83:c9:05:60:43:35:02:27:b2:72:86:b2:18:21:
43:c6:ef:ce:73:bf:41:7d:49:d9:81:5d:7f:b0:fe:37:74:f4:
36:2f:83:4e:ea:e6:17:1a:75:f2:13:01:5c:42:61:0c:08:0a:
92:a3:ec:26:4c:4b:5f:9b:20:7b:a6:07:81:58:27:54:ea:63:
1c:d8:35:3e:01:86:9a:a5:63:6d:71:a4:9c:c7:76:e7:64:2f:
1e:42:fc:c3:f1:08:80:cf:f2:92:93:05:1b:d3:1d:1c:74:11:
b2:93:37:8d:ac:74:0b:8a:f3:b7:21:ba:a5:98:76:8d:97:4e:
27:ef:4f:77:8b:a7:c4:89:5b:11:f8:f9:63:d3:ed:90:d9:e2:
53:fb:4c:c4:f7:ec:61:49:d3:14:4b:41:06:7c:1b:54:27:ea:
6a:b6:40:15:0b:a1:99:50:47:80:40:fb:2a:ae:ac:1a:29:4f:
b7:7b:d3:a5:b0:1d:1d:09:3b:19:34:53:81:2b:71:2c:bf:44:
0b:dc:cd:72:d2:1c:8b:07:f2:cc:c4:35:e3:7b:e7:6a:66:98:
88:9a:73:7d:60:eb:c4:1e:79:7c:7d:09:fc:d9:84:de:03:61:
2f:e2:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:18 2026 by rpki-client