Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CTsVrdTP5KCfabV8DQT6XNPknj8.roa
File: CTsVrdTP5KCfabV8DQT6XNPknj8.roa (raw, json)
Hash identifier: lXbDGtjpJ35100YgZvFOF/zw8XCmJIHfmKiSqxkZbG4=
Subject key identifier: 09:3B:15:AD:D4:CF:E4:A0:9F:69:B5:7C:0D:04:FA:5C:D3:E4:9E:3F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F6023C36DE2A51E9592D5477D4773C5BD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CTsVrdTP5KCfabV8DQT6XNPknj8.roa
Signing time: Tue 14 Jul 2026 10:19:44 +0000
ROA not before: Tue 14 Jul 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 109.121.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:23:c3:6d:e2:a5:1e:95:92:d5:47:7d:47:73:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 14 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093b15add4cfe4a09f69b57c0d04fa5cd3e49e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:38:63:cb:f5:21:2f:99:d5:f5:1c:fd:c1:27:
90:a6:e1:eb:8e:8b:c3:f0:40:94:55:8a:ae:1c:1a:
3d:e7:8d:cc:b4:a9:b3:c7:1c:7f:58:e5:90:b3:a1:
cd:09:65:52:80:22:34:d7:49:59:f8:57:f9:85:54:
4e:d4:eb:27:cc:2a:f8:fa:87:84:5c:92:d4:6c:0f:
05:b9:00:ad:77:8a:c7:f3:20:bd:13:4e:ef:81:e1:
6a:9c:70:6c:2e:96:35:18:fc:57:49:45:83:15:de:
2a:94:be:22:ea:00:2a:fc:07:21:4d:26:6e:de:c8:
16:ea:d2:6b:f0:64:63:a9:f6:1d:55:57:ea:b5:4d:
4d:69:d6:82:71:5f:f3:72:06:16:57:3d:87:5b:20:
6e:ee:88:28:4f:44:3f:99:d8:a1:93:1c:4e:8f:cf:
57:63:b3:9c:a2:4a:c2:e7:49:93:e8:cd:10:22:01:
37:c1:7e:69:55:e4:66:f5:f7:6f:8c:eb:77:3f:86:
ff:16:e1:c8:f2:e7:fe:05:40:25:d9:de:46:2d:72:
ba:6b:a4:76:82:ed:14:f7:18:95:a0:e8:0a:b8:c4:
0e:1b:bd:44:7d:65:e6:03:09:07:24:f8:76:2d:02:
7e:9b:81:f2:0b:71:94:49:72:ab:e0:0c:b3:20:c6:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:15:AD:D4:CF:E4:A0:9F:69:B5:7C:0D:04:FA:5C:D3:E4:9E:3F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CTsVrdTP5KCfabV8DQT6XNPknj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.52.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a8:98:eb:ac:26:96:db:92:4f:c8:f8:8a:49:11:b2:4e:19:
47:03:43:a6:06:2b:5d:35:74:32:e0:6d:f0:97:9f:f2:f1:b2:
46:0e:60:3a:ca:2c:3d:ea:5b:a2:28:e1:85:5a:f2:0f:f8:fb:
52:ec:de:6d:c8:11:f3:0d:14:e6:c0:9b:4d:cd:3c:73:78:cb:
af:b2:e4:73:5a:aa:92:12:44:16:8c:5c:69:3b:91:c4:ee:6a:
4a:f3:ff:37:8e:b3:64:91:07:b1:8d:d1:57:9e:28:a0:00:cc:
f9:13:28:b7:f2:d9:69:2f:35:a9:80:eb:d4:01:40:d3:60:4b:
89:21:54:e2:3c:8e:4a:1f:0d:11:0d:33:eb:7e:96:42:cb:95:
cf:76:43:bb:7f:02:29:c0:8e:4d:06:8d:73:42:13:0b:9c:df:
74:9b:18:28:10:87:80:75:34:9a:ca:60:75:fc:f3:50:24:ff:
d9:aa:f3:9f:40:80:61:bf:b3:4d:83:3c:cb:b2:23:59:c8:9a:
63:6c:71:d5:2c:4f:24:54:0a:42:40:d3:72:74:2e:55:1a:9d:
4f:b5:b3:d0:25:e9:78:b2:1c:2e:8d:12:6e:71:3b:d7:b9:5f:
49:77:3a:46:34:d6:fa:39:0d:58:e2:14:5e:22:3e:1e:d0:20:
c8:32:69:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9gI8Nt4qUelZLVR31Hc8W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNzE0MTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTNiMTVhZGQ0Y2ZlNGEwOWY2OWI1N2MwZDA0ZmE1Y2QzZTQ5ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jhjy/UhL5nV9Rz9wSeQpuHrjovD
8ECUVYquHBo9543MtKmzxxx/WOWQs6HNCWVSgCI010lZ+Ff5hVRO1OsnzCr4+oeE
XJLUbA8FuQCtd4rH8yC9E07vgeFqnHBsLpY1GPxXSUWDFd4qlL4i6gAq/AchTSZu
3sgW6tJr8GRjqfYdVVfqtU1NadaCcV/zcgYWVz2HWyBu7ogoT0Q/mdihkxxOj89X
Y7OcokrC50mT6M0QIgE3wX5pVeRm9fdvjOt3P4b/FuHI8uf+BUAl2d5GLXK6a6R2
gu0U9xiVoOgKuMQOG71EfWXmAwkHJPh2LQJ+m4HyC3GUSXKr4AyzIMamEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAk7Fa3Uz+Sgn2m1fA0E+lzT5J4/MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvQ1RzVnJkVFA1S0NmYWJWOERRVDZYTlBrbmo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXk0MA0G
CSqGSIb3DQEBCwUAA4IBAQBUqJjrrCaW25JPyPiKSRGyThlHA0OmBitdNXQy4G3w
l5/y8bJGDmA6yiw96luiKOGFWvIP+PtS7N5tyBHzDRTmwJtNzTxzeMuvsuRzWqqS
EkQWjFxpO5HE7mpK8/83jrNkkQexjdFXniigAMz5Eyi38tlpLzWpgOvUAUDTYEuJ
IVTiPI5KHw0RDTPrfpZCy5XPdkO7fwIpwI5NBo1zQhMLnN90mxgoEIeAdTSaymB1
/PNQJP/ZqvOfQIBhv7NNgzzLsiNZyJpjbHHVLE8kVApCQNNydC5VGp1PtbPQJel4
shwujRJucTvXuV9JdzpGNNb6OQ1Y4hReIj4e0CDIMmng
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:56 2026 by rpki-client