Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MAq1FJ7SEQzv6hCNYBjfJ3AC-X8.roa
File: MAq1FJ7SEQzv6hCNYBjfJ3AC-X8.roa (raw, json)
Hash identifier: zKl2wE9uw9m3Qt0j4FBXZtx/FqxXylDhXGCZfqGQvvw=
Subject key identifier: 30:0A:B5:14:9E:D2:11:0C:EF:EA:10:8D:60:18:DF:27:70:02:F9:7F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F35F089AF18371170FD9DC560C5C5D9D1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MAq1FJ7SEQzv6hCNYBjfJ3AC-X8.roa
Signing time: Mon 06 Jul 2026 05:39:44 +0000
ROA not before: Mon 06 Jul 2026 05:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 188.255.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:f0:89:af:18:37:11:70:fd:9d:c5:60:c5:c5:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 6 05:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=300ab5149ed2110cefea108d6018df277002f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:83:4f:a5:1c:ea:53:fd:9e:c2:db:e4:ce:
56:ee:7f:9c:3a:c8:0a:65:17:d7:a4:8d:fc:0b:71:
e2:17:77:9f:b2:56:26:3d:71:81:6b:e3:3b:09:73:
c3:8d:1d:79:bb:05:36:dd:3d:9f:f2:16:bb:83:5e:
b9:54:6a:6c:bc:ee:3f:a7:33:78:f1:10:be:76:48:
5d:96:cd:61:92:dc:72:ad:55:b0:64:b7:d4:40:df:
b6:0b:99:bc:48:85:cf:84:e3:21:67:a4:85:3c:af:
f8:82:60:01:9e:e9:92:9f:5e:85:3c:7e:67:ce:66:
66:86:3f:88:c8:8f:0a:34:d4:9c:34:ec:cb:9d:70:
e0:51:19:2d:f8:e3:04:d3:cb:fc:cf:70:6f:fc:36:
61:b0:05:06:48:53:4e:37:8d:c5:c8:f6:9c:38:e8:
38:27:0e:8d:d4:97:51:e1:ed:54:35:49:42:11:06:
6d:aa:91:d1:29:8f:3e:2f:1b:a3:e1:eb:9d:d2:2c:
71:08:30:37:ee:24:49:d5:2a:b4:28:22:8b:f5:23:
4c:92:16:88:78:98:cf:e0:ad:9d:84:4a:02:e4:8b:
25:dc:ab:10:7a:2b:8f:01:a5:6c:e3:fb:cf:27:ac:
cb:8d:41:7d:33:87:b7:42:c8:a9:5f:5c:9c:ce:ba:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:B5:14:9E:D2:11:0C:EF:EA:10:8D:60:18:DF:27:70:02:F9:7F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MAq1FJ7SEQzv6hCNYBjfJ3AC-X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.230.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0c:d5:dd:30:f6:7a:57:cd:be:49:b8:fc:3d:3e:89:9f:eb:
17:8f:cb:df:65:4b:1f:52:b1:50:06:15:bb:92:df:92:68:b5:
b8:f1:2b:69:dd:de:9f:33:0c:0e:17:ec:94:71:7b:6a:34:b6:
ed:ac:f4:ff:04:ba:b1:ba:b1:79:ab:39:fa:93:1a:f5:43:01:
05:4e:f3:80:20:b4:48:25:54:0a:11:44:e5:f4:55:26:49:f8:
b1:fe:8b:aa:b7:c2:7e:e3:6a:ad:f8:2f:0f:d4:49:4b:31:48:
ef:cc:08:73:fa:50:ec:cb:11:7c:21:4f:04:ea:cf:32:a2:84:
db:28:79:1b:00:c3:f1:93:16:03:58:92:89:44:57:e8:05:bb:
a7:57:4d:4e:1d:cb:cc:f6:b4:4c:92:d8:f1:8d:9a:1c:c4:aa:
8d:cc:ac:8e:d8:8e:b6:a3:d1:26:a3:a7:bc:2a:0d:33:46:e2:
8d:0e:34:96:9b:2e:30:05:ef:5d:2a:70:49:4b:e5:41:66:3d:
3c:da:75:c5:29:41:a0:b1:22:b1:55:6b:8f:3f:b7:3d:ef:9c:
d8:33:a9:1e:45:4e:80:9d:51:1b:87:6c:ce:b2:8b:8b:e9:fd:
90:4a:59:96:a4:6e:2e:0f:05:c0:24:07:84:e6:26:f3:40:69:
a1:8c:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client