Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DmxXM5J9lyAItLotRSaOlKlE9g4.roa
File: DmxXM5J9lyAItLotRSaOlKlE9g4.roa (raw, json)
Hash identifier: cUNBjXB5Eqwo3e9k509xvP3fho1FqRAUEoWXfpSh7pM=
Subject key identifier: 0E:6C:57:33:92:7D:97:20:08:B4:BA:2D:45:26:8E:94:A9:44:F6:0E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F5F227EDDAEA0728D18B10CF333EEFFB1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DmxXM5J9lyAItLotRSaOlKlE9g4.roa
Signing time: Tue 14 Jul 2026 05:38:43 +0000
ROA not before: Tue 14 Jul 2026 05:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154123
IP address blocks: 79.175.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:22:7e:dd:ae:a0:72:8d:18:b1:0c:f3:33:ee:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 14 05:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e6c5733927d972008b4ba2d45268e94a944f60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:97:49:81:41:2c:e1:bc:e0:6b:5a:09:ca:
64:ef:e1:b2:fa:4e:56:d4:33:9e:b4:6c:7e:da:ec:
4d:8c:e0:53:a3:b5:06:1a:6d:1a:3f:f1:b8:5d:86:
0c:87:1f:d8:5b:71:c9:d9:78:f0:b0:e7:e7:51:23:
f6:6c:8d:9d:4e:a3:9b:fc:00:f0:b9:87:5b:90:8c:
33:f8:d4:c5:17:16:a0:be:2c:29:d8:c8:44:08:e7:
ff:32:06:52:13:74:59:f8:77:5e:4c:60:f2:6e:91:
ed:47:e6:b4:ba:d0:1f:da:f2:f1:af:03:7d:6e:21:
f4:00:57:45:39:68:fb:11:d7:9e:28:2a:b1:a1:ea:
b7:ac:2e:e6:58:9c:0e:fb:22:77:0d:ae:43:87:43:
89:b5:ff:f5:49:1d:78:96:0f:5d:a0:d8:dc:52:b6:
4c:54:4f:e3:4d:e8:6e:bb:3f:b7:85:d9:27:1f:c6:
f8:0b:20:5b:c2:0e:81:31:f3:14:0c:69:cf:f5:05:
7e:bc:b7:67:e6:cc:e6:12:cf:bd:17:a7:48:5a:01:
f8:3b:a2:3b:71:a9:70:b1:c1:2f:77:aa:f1:c7:bb:
72:24:a7:b7:7d:28:f0:2a:02:5d:13:29:8b:6d:ac:
02:90:6b:7d:97:1a:a9:20:00:7a:eb:17:a9:3a:2b:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:57:33:92:7D:97:20:08:B4:BA:2D:45:26:8E:94:A9:44:F6:0E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DmxXM5J9lyAItLotRSaOlKlE9g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:33:ff:6a:d5:b2:9d:92:b0:bd:d4:da:f3:b9:49:18:3e:47:
8d:5d:01:d5:1c:9f:df:6d:59:cd:51:87:8d:79:79:ab:6a:c1:
92:3f:b4:8f:f1:f3:61:7a:49:99:f4:f4:5a:e9:f0:ec:1b:49:
4a:e8:f0:81:5d:65:38:65:44:8d:9c:f7:be:77:96:5a:62:bd:
6a:3b:d8:0f:2a:e1:30:8f:89:95:87:7f:fc:09:6b:16:19:62:
7f:c7:ad:61:09:27:82:1a:e2:70:04:e9:4c:20:49:05:76:22:
0b:27:e3:9b:d8:fe:0c:fd:61:19:02:eb:ea:1b:52:1c:c2:10:
6b:9a:b8:0e:23:c8:8b:9f:93:b9:2b:48:b0:ea:2b:85:5b:04:
49:0f:ca:f1:6d:15:3c:0d:b9:19:ff:c5:e8:51:d7:b7:78:41:
dd:5e:fd:0c:85:fd:7e:e2:21:29:aa:e9:98:a4:89:36:d3:0a:
37:fb:74:20:65:2b:35:18:b3:88:96:95:c2:a4:e5:6f:26:02:
99:8c:82:47:7d:0b:d0:41:7c:36:e2:ea:eb:15:1d:0d:72:cb:
4f:25:c0:40:05:72:1b:09:81:f3:d2:f5:e9:c2:35:7b:fc:86:
dc:80:d9:67:bc:d8:0f:e0:99:3f:96:58:7b:54:b5:aa:f9:d9:
8a:4e:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:55 2026 by rpki-client