Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KUuf1hVG-KKDVKjPELe7oCjmuqI.roa
File: KUuf1hVG-KKDVKjPELe7oCjmuqI.roa (raw, json)
Hash identifier: GjRMrLjQJoZqbBiR1UlQ7+xH41q3T34+p7bYPwI36KQ=
Subject key identifier: 29:4B:9F:D6:15:46:F8:A2:83:54:A8:CF:10:B7:BB:A0:28:E6:BA:A2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F35EDC9DA1C0DF4D3FD41C152F417FD8B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KUuf1hVG-KKDVKjPELe7oCjmuqI.roa
Signing time: Mon 06 Jul 2026 05:36:43 +0000
ROA not before: Mon 06 Jul 2026 05:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 79.175.105.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:ed:c9:da:1c:0d:f4:d3:fd:41:c1:52:f4:17:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 6 05:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=294b9fd61546f8a28354a8cf10b7bba028e6baa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:53:df:bc:c3:7a:78:e7:18:53:c9:75:c6:
ba:6f:7e:82:e4:85:ef:d4:0d:7f:9b:b6:ca:19:01:
1b:ac:e1:56:09:ba:66:51:c6:ba:7b:a5:df:3f:50:
49:7a:8e:2d:87:12:8d:78:bc:22:5e:2c:cd:53:d4:
f5:fa:52:4d:44:08:8e:fa:1d:47:1d:1e:32:43:c6:
11:89:aa:8a:20:9e:13:cd:30:ca:14:b8:88:57:24:
fe:f1:d3:16:24:27:06:cf:76:49:70:6a:ab:8c:1e:
a0:ac:b0:34:d3:e2:d6:4a:4b:e2:ce:1b:56:30:d7:
94:c0:f6:bb:ce:c7:19:e3:91:4a:24:a4:4d:fa:89:
8e:1d:e5:11:6a:15:6e:05:ad:b1:4a:1e:34:75:c9:
93:07:13:dd:6b:6d:87:b3:a0:06:ff:06:36:d5:e1:
64:84:3e:8e:67:2e:d3:71:cd:96:4d:82:ba:80:4a:
9a:61:cf:b6:93:bc:71:27:d1:05:ce:6d:9e:36:f0:
e5:81:6a:a1:95:fd:48:ce:56:86:57:5f:b7:92:4b:
7e:a8:76:89:80:d6:f5:af:ce:3d:d5:64:06:71:16:
e2:69:50:ce:6c:19:66:8e:6e:11:95:3d:ce:48:7f:
83:83:59:bc:b0:23:f9:7f:e8:60:93:0c:24:4e:0e:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:9F:D6:15:46:F8:A2:83:54:A8:CF:10:B7:BB:A0:28:E6:BA:A2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KUuf1hVG-KKDVKjPELe7oCjmuqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
109.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f5:92:8b:38:76:fe:a9:d0:3e:6d:53:4f:09:6b:d6:61:a0:
f0:2f:8b:3c:c6:f9:de:ae:3b:19:eb:64:4c:ea:c8:51:d1:ad:
62:df:3c:47:35:c1:db:7f:5f:ee:20:8d:aa:18:74:6c:3f:bf:
1e:0a:17:3f:1c:f5:f0:89:cf:cd:b4:a9:27:dc:73:e5:c1:71:
09:8b:4c:3d:ac:29:92:0c:fa:4f:d0:5a:00:2a:b1:a9:22:88:
fa:4a:d5:05:c1:e6:9c:da:f2:91:18:80:c8:cc:b1:04:de:6d:
0e:ba:17:96:69:2c:17:68:54:12:81:28:5d:d6:b4:3f:15:93:
5b:ad:3b:e6:60:48:39:8d:32:34:70:63:70:5f:5f:ab:3a:4b:
c7:ac:06:fd:04:a2:a2:14:7e:75:d3:c4:bd:dd:11:34:6b:9b:
8b:bb:c5:6f:7e:e1:d6:ab:26:38:60:fb:cb:09:05:e4:de:59:
4d:9a:a6:82:cb:23:a9:2a:7e:8b:cb:9a:e3:43:a8:fb:47:9e:
b5:03:4b:2c:c8:86:a7:2c:6b:4f:c8:fe:67:f0:02:6b:f9:f5:
4f:e7:90:ca:11:22:9e:c6:1d:b5:2c:db:fc:44:78:29:cd:25:
c7:aa:dd:34:7c:23:53:5f:e1:4c:c6:49:cb:72:a2:cb:38:ea:
19:33:41:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ817cnaHA300/1BwVL0F/2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNzA2MDUzNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTRiOWZkNjE1NDZmOGEyODM1NGE4Y2YxMGI3YmJhMDI4ZTZiYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pZT37zDenjnGFPJdca6b36C5IXv
1A1/m7bKGQEbrOFWCbpmUca6e6XfP1BJeo4thxKNeLwiXizNU9T1+lJNRAiO+h1H
HR4yQ8YRiaqKIJ4TzTDKFLiIVyT+8dMWJCcGz3ZJcGqrjB6grLA00+LWSkvizhtW
MNeUwPa7zscZ45FKJKRN+omOHeURahVuBa2xSh40dcmTBxPda22Hs6AG/wY21eFk
hD6OZy7Tcc2WTYK6gEqaYc+2k7xxJ9EFzm2eNvDlgWqhlf1IzlaGV1+3kkt+qHaJ
gNb1r8491WQGcRbiaVDObBlmjm4RlT3OSH+Dg1m8sCP5f+hgkwwkTg48HwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFClLn9YVRviig1SozxC3u6Ao5rqiMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvS1V1ZjFoVkctS0tEVktqUEVMZTdvQ2ptdXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT69pAwQA
bXkvMA0GCSqGSIb3DQEBCwUAA4IBAQAQ9ZKLOHb+qdA+bVNPCWvWYaDwL4s8xvne
rjsZ62RM6shR0a1i3zxHNcHbf1/uII2qGHRsP78eChc/HPXwic/NtKkn3HPlwXEJ
i0w9rCmSDPpP0FoAKrGpIoj6StUFweac2vKRGIDIzLEE3m0OuheWaSwXaFQSgShd
1rQ/FZNbrTvmYEg5jTI0cGNwX1+rOkvHrAb9BKKiFH5108S93RE0a5uLu8VvfuHW
qyY4YPvLCQXk3llNmqaCyyOpKn6Ly5rjQ6j7R561A0ssyIanLGtPyP5n8AJr+fVP
55DKESKexh21LNv8RHgpzSXHqt00fCNTX+FMxknLcqLLOOoZM0H2
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:16 2026 by rpki-client