Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQxPQnNQxLAub7rHNmiRx9DrYus.roa
File: PQxPQnNQxLAub7rHNmiRx9DrYus.roa (raw, json)
Hash identifier: i9SE4bdGsB8tRVa4UGfhM7LVhdq8jKHSguVc17qXxWs=
Subject key identifier: 3D:0C:4F:42:73:50:C4:B0:2E:6F:BA:C7:36:68:91:C7:D0:EB:62:EB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F17133F253AB2933FADA1A7C1AEF14382
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQxPQnNQxLAub7rHNmiRx9DrYus.roa
Signing time: Tue 30 Jun 2026 05:49:25 +0000
ROA not before: Tue 30 Jun 2026 05:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141299
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:13:3f:25:3a:b2:93:3f:ad:a1:a7:c1:ae:f1:43:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 30 05:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d0c4f427350c4b02e6fbac7366891c7d0eb62eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:76:48:80:a7:11:e4:fd:bc:a3:35:28:27:
54:84:c2:e9:e7:d4:69:45:bb:30:81:f2:65:6d:36:
55:18:26:dd:1e:3d:e3:07:79:76:55:f3:c8:74:50:
50:5f:2b:e1:05:e8:90:42:be:2a:e3:cd:28:58:6b:
93:36:7c:8a:49:6e:ae:f3:d4:4f:5c:2b:fb:dd:3d:
75:9e:4f:97:13:96:fe:cc:1e:52:05:f3:03:4b:69:
4d:3c:eb:43:1c:21:82:a0:51:ae:69:8e:25:b0:fd:
4e:1d:39:9d:02:31:ac:a0:a8:f9:b4:e0:e9:0d:62:
fd:8c:23:45:04:c7:f5:07:84:a5:1a:66:57:1e:6e:
58:4a:61:1b:d8:7d:a5:76:5d:57:30:a5:f9:f4:5f:
32:d9:12:52:5a:59:93:b3:23:72:45:3d:6b:8a:f3:
7a:9d:00:76:56:7c:17:4e:01:56:46:69:de:4b:86:
f8:7a:7e:4d:cc:01:0e:2a:8c:a3:bc:51:c5:82:20:
e2:a8:24:59:19:32:46:1f:cd:0d:92:f4:6f:90:56:
0b:58:d9:f7:8d:f3:e0:ce:02:20:6d:ec:65:62:ec:
f5:50:88:7b:66:2a:f5:4e:69:38:5e:d8:40:69:84:
38:84:87:a0:01:99:b0:0a:0d:56:ff:f7:93:a4:d5:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:4F:42:73:50:C4:B0:2E:6F:BA:C7:36:68:91:C7:D0:EB:62:EB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQxPQnNQxLAub7rHNmiRx9DrYus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
05:43:b2:5e:33:f4:ea:2b:57:50:cd:18:6f:f0:13:89:54:5e:
4e:63:84:9d:3e:a1:bc:5e:08:22:16:92:93:83:6d:c8:e4:7d:
71:03:94:4b:d7:a9:7f:04:76:c5:5b:0a:42:dd:3d:a9:1a:4c:
90:40:b1:03:c2:6b:3d:e7:ff:eb:21:d1:51:83:ad:27:3d:b6:
a4:8c:a1:f5:42:28:1e:1d:ae:1b:cc:81:6d:8e:18:6a:0a:60:
7a:86:b7:c7:de:5d:90:3a:8c:5e:2a:4b:61:7d:c9:63:19:59:
63:d2:1c:73:7d:b5:d7:dc:80:4c:26:f4:b7:59:86:54:35:67:
7d:ec:a0:ec:31:3f:56:a2:29:08:ec:67:7c:02:5c:49:1e:26:
5f:46:b8:95:1e:a0:e9:27:10:05:bd:d4:b6:d4:14:e6:06:ba:
91:ed:b8:a4:06:d4:15:7c:ff:15:96:fd:d8:14:4b:d8:a0:b4:
eb:f5:10:0c:ba:26:6d:33:4a:b3:ae:c2:68:9e:54:ea:a4:42:
b8:b2:df:4a:33:e9:09:fc:63:40:a9:49:d4:dc:25:b6:90:6a:
0c:21:d4:de:0d:c2:d6:01:cf:97:b5:57:67:e1:75:68:88:2e:
e4:4e:fb:b6:1b:65:f7:f1:fb:82:2e:fc:4e:60:ac:36:f2:7e:
af:07:ad:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8XEz8lOrKTP62hp8Gu8UOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNjMwMDU0OTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBjNGY0MjczNTBjNGIwMmU2ZmJhYzczNjY4OTFjN2QwZWI2MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQZ2SICnEeT9vKM1KCdUhMLp59Rp
RbswgfJlbTZVGCbdHj3jB3l2VfPIdFBQXyvhBeiQQr4q480oWGuTNnyKSW6u89RP
XCv73T11nk+XE5b+zB5SBfMDS2lNPOtDHCGCoFGuaY4lsP1OHTmdAjGsoKj5tODp
DWL9jCNFBMf1B4SlGmZXHm5YSmEb2H2ldl1XMKX59F8y2RJSWlmTsyNyRT1rivN6
nQB2VnwXTgFWRmneS4b4en5NzAEOKoyjvFHFgiDiqCRZGTJGH80NkvRvkFYLWNn3
jfPgzgIgbexlYuz1UIh7Zir1Tmk4XthAaYQ4hIegAZmwCg1W//eTpNUWsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0MT0JzUMSwLm+6xzZokcfQ62LrMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUFF4UFFuTlF4TEF1YjdySE5taVJ4OURyWXVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3jMA0G
CSqGSIb3DQEBCwUAA4IBAQAFQ7JeM/TqK1dQzRhv8BOJVF5OY4SdPqG8XggiFpKT
g23I5H1xA5RL16l/BHbFWwpC3T2pGkyQQLEDwms95//rIdFRg60nPbakjKH1Qige
Ha4bzIFtjhhqCmB6hrfH3l2QOoxeKkthfcljGVlj0hxzfbXX3IBMJvS3WYZUNWd9
7KDsMT9WoikI7Gd8AlxJHiZfRriVHqDpJxAFvdS21BTmBrqR7bikBtQVfP8Vlv3Y
FEvYoLTr9RAMuiZtM0qzrsJonlTqpEK4st9KM+kJ/GNAqUnU3CW2kGoMIdTeDcLW
Ac+XtVdn4XVoiC7kTvu2G2X38fuCLvxOYKw28n6vB60Q
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:09:06 2026 by rpki-client