Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dx59wHsAmTFBhNWV5HpxqV_2gVw.roa
File: Dx59wHsAmTFBhNWV5HpxqV_2gVw.roa (raw, json)
Hash identifier: +zmaX+JYubjDx62wj6+1lvxxyMMgkvTi6CqWstA+LBk=
Subject key identifier: 0F:1E:7D:C0:7B:00:99:31:41:84:D5:95:E4:7A:71:A9:5F:F6:81:5C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0A909D03E34762AFD668A4049FC663666
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dx59wHsAmTFBhNWV5HpxqV_2gVw.roa
Signing time: Wed 16 Sep 2026 07:06:27 +0000
ROA not before: Wed 16 Sep 2026 07:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154900
IP address blocks: 188.255.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:09:d0:3e:34:76:2a:fd:66:8a:40:49:fc:66:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 16 07:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f1e7dc07b0099314184d595e47a71a95ff6815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:b0:94:4d:4b:64:cd:a2:28:5d:d1:4e:f4:
70:e5:1f:4d:14:b0:74:9f:69:a0:93:6e:94:28:ea:
73:0d:ca:0c:88:87:bc:72:d3:2d:a7:3b:77:f0:43:
d6:16:4a:23:9a:d0:dd:73:aa:4c:21:56:ea:27:45:
3a:9d:f5:1d:f0:a4:fb:60:7c:19:24:27:ae:16:45:
96:5b:f9:28:4f:78:93:6d:db:c6:67:f8:f7:50:5a:
4a:e4:1f:8f:00:84:95:39:a7:88:0e:02:e8:74:0a:
b5:fc:ad:cb:b9:b2:a1:39:53:4c:c4:83:c0:23:bb:
2b:42:6b:c3:58:e9:5c:b0:cc:f4:df:ea:d5:2c:7f:
79:6f:db:ca:f6:46:81:0a:99:4f:13:17:46:17:41:
1f:5b:b6:55:53:ad:50:04:3f:a6:dd:d3:52:75:6f:
dd:2a:f7:96:de:28:c1:eb:e8:84:02:15:fd:4b:74:
1d:9a:37:07:de:d6:5a:30:82:e3:f4:69:31:1c:8f:
c7:2f:6f:ba:92:d6:df:2c:71:bd:bb:6e:ca:da:29:
97:79:f7:15:b3:3b:d5:44:5b:9d:e6:d9:17:a8:a3:
cd:f6:87:35:7b:20:0a:02:a0:6b:93:74:52:05:85:
04:0f:a7:80:11:4f:f4:53:d8:29:fc:2a:c4:60:d9:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1E:7D:C0:7B:00:99:31:41:84:D5:95:E4:7A:71:A9:5F:F6:81:5C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Dx59wHsAmTFBhNWV5HpxqV_2gVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.148.0/24
Signature Algorithm: sha256WithRSAEncryption
46:df:7b:07:b5:23:15:54:42:54:86:5b:5d:45:b1:8d:b4:df:
69:a3:eb:fb:e4:39:30:bc:62:20:2c:1e:e3:15:11:e8:ac:1d:
c2:91:79:d3:31:a0:7f:98:06:17:21:b2:9a:65:00:2f:4f:50:
ed:b6:6e:fe:76:58:9d:75:6d:1f:3d:8f:5a:34:ce:12:d9:6e:
48:db:1b:03:32:39:6b:6f:29:81:74:58:bb:5a:2b:ff:50:40:
e2:96:48:f8:89:c4:4a:b8:09:42:a0:3d:64:e2:57:4b:4b:64:
94:39:f7:79:a3:11:99:db:35:f7:44:25:55:a8:20:4e:da:fd:
59:d6:ab:71:7f:3a:25:9b:ac:00:37:c5:f9:20:aa:b2:20:14:
e2:3c:d9:d1:84:65:70:19:a0:ef:aa:47:53:0a:c5:9a:e7:9f:
ec:11:20:86:b4:96:f3:06:04:ff:dd:6b:41:81:f7:2a:a2:1f:
b1:2e:37:7e:d6:58:45:48:71:99:58:61:b5:37:ed:c7:b8:bb:
98:2c:75:e2:92:83:ea:2f:5d:98:83:76:ce:12:c7:a6:43:64:
b0:49:5c:88:cb:be:d9:38:9a:84:00:86:cf:b4:ca:c5:13:32:
0c:a5:03:27:ef:52:d7:01:71:ba:79:78:47:bc:57:ec:71:ef:
88:6d:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:16:44 2026 by rpki-client