Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/COgXOJzuFkcoIP_PHKtpWZI2Yv8.roa
File: COgXOJzuFkcoIP_PHKtpWZI2Yv8.roa (raw, json)
Hash identifier: xQTf9y2SjuhKTRH9j44ROYjCysBC/ia96PVcpG7/cQo=
Subject key identifier: 08:E8:17:38:9C:EE:16:47:28:20:FF:CF:1C:AB:69:59:92:36:62:FF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E6E7A938876C1480370CE39D00B33E85A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/COgXOJzuFkcoIP_PHKtpWZI2Yv8.roa
Signing time: Thu 28 May 2026 12:06:27 +0000
ROA not before: Thu 28 May 2026 12:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199783
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:7a:93:88:76:c1:48:03:70:ce:39:d0:0b:33:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 28 12:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08e817389cee16472820ffcf1cab6959923662ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:1b:d4:a7:82:ea:72:b0:96:9c:02:25:85:
b5:da:27:5e:87:1c:23:10:6b:be:7e:52:d0:83:2e:
8b:0e:76:e6:7b:2e:6a:cc:77:c0:cb:1e:89:78:63:
bf:92:2e:6c:48:92:e6:ef:b3:86:36:04:2a:74:4e:
28:ea:19:19:ad:c1:d8:ca:d2:49:de:7f:6f:96:aa:
d5:96:f0:34:ff:06:78:a6:2b:63:2c:dd:fb:70:76:
d0:c8:19:8f:42:07:f5:3a:95:1e:a0:32:f1:da:32:
ad:ba:17:c1:6d:77:6b:95:89:71:a3:03:c2:ce:c4:
7e:00:b6:76:2e:9b:77:6c:3c:42:e3:41:f2:10:8a:
89:b1:88:e4:ce:81:68:20:fa:8d:f3:6b:a2:39:78:
c0:e9:39:95:7e:59:8d:4b:4c:2c:59:63:19:a8:27:
6e:0a:b6:b1:f2:91:96:26:8b:eb:0b:5f:06:03:20:
a1:e8:17:d7:b2:df:93:06:d6:b7:f7:b7:2b:8c:6e:
7e:1d:2c:9d:a9:c9:69:72:a1:bc:3e:30:2f:6e:7c:
90:a6:df:74:54:07:95:5b:b8:4e:b9:2a:ce:4e:74:
66:80:1e:e9:6e:2e:94:18:b7:a3:bb:56:df:f6:b5:
23:92:4e:0e:7a:da:4f:dc:0f:00:a9:46:e5:4f:10:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:17:38:9C:EE:16:47:28:20:FF:CF:1C:AB:69:59:92:36:62:FF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/COgXOJzuFkcoIP_PHKtpWZI2Yv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:be:0e:b0:20:b9:a6:07:7d:c0:35:8e:bf:41:c8:b5:40:60:
6b:55:2a:f9:db:30:4d:16:1a:5f:84:98:0f:39:81:f0:64:0f:
e9:74:48:3d:37:6f:88:d5:92:6c:80:88:16:c2:6f:34:50:0a:
f0:be:df:b2:7e:c2:72:f2:ec:97:92:83:9f:7e:3d:66:e7:35:
cd:68:5a:5b:39:48:f7:3e:35:86:a6:33:d2:9d:08:1a:a5:f6:
b9:29:d8:a6:ed:5a:27:7d:51:91:f3:7c:72:f6:5d:5d:d9:49:
39:69:07:fb:31:4a:5b:05:51:bf:be:48:00:c6:2d:d1:4d:3e:
f3:74:cf:9f:0c:f0:15:03:1c:32:c2:00:c4:c8:13:45:f0:85:
6c:5b:32:fd:c3:94:9b:05:6c:59:22:0d:36:d3:42:fa:05:0d:
8c:bd:ee:c4:48:3b:bf:73:34:f9:85:b1:fd:76:56:75:1a:d4:
9c:b8:f9:bd:80:e7:26:00:d8:27:55:31:74:dc:1d:4a:dd:c7:
7f:7d:31:cd:57:38:5e:4e:10:ae:3e:a6:4e:3f:15:9d:e4:78:
a5:e3:7d:be:c2:b1:f8:90:69:c8:2d:fa:80:f8:e1:2c:dd:2e:
86:ba:7f:95:6d:62:06:d0:62:03:2d:23:ae:15:76:9d:b9:08:
f0:dd:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:02 2026 by rpki-client