Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Q6xlBDDyrEhU1bdn95J-wq3ahVE.roa
File: Q6xlBDDyrEhU1bdn95J-wq3ahVE.roa (raw, json)
Hash identifier: H/vWV8JX51eeDTd2IGS8AZQ6Kpg9LTd2A1qK6UTLlO4=
Subject key identifier: 43:AC:65:04:30:F2:AC:48:54:D5:B7:67:F7:92:7E:C2:AD:DA:85:51
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D209AE19086C16F9D6116529EE7A853
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Q6xlBDDyrEhU1bdn95J-wq3ahVE.roa
Signing time: Tue 01 Sep 2026 13:20:12 +0000
ROA not before: Tue 01 Sep 2026 13:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 178.219.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:20:9a:e1:90:86:c1:6f:9d:61:16:52:9e:e7:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43ac650430f2ac4854d5b767f7927ec2adda8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:e9:01:ea:67:e6:b8:1e:53:83:34:11:ee:
8b:8f:5b:02:3e:9b:ae:02:63:e4:da:0d:65:e7:47:
c5:6f:9d:97:58:04:35:68:c9:c3:4f:27:a0:30:4c:
9e:37:95:d8:1f:76:42:cd:fc:71:13:b1:0f:42:26:
db:b4:9c:c5:01:c8:e8:19:90:78:75:c0:0a:5d:0b:
0c:47:93:02:50:6e:40:35:77:0c:ab:5a:6f:6b:4e:
b7:5a:b9:7d:33:56:97:9a:5f:71:e1:df:85:b8:07:
d9:48:08:4e:f9:ec:c7:79:c5:f9:37:2d:fa:2f:56:
22:82:e1:c3:8e:34:98:16:f5:99:ff:19:cc:55:31:
a1:14:35:4f:f7:50:61:ff:12:9d:f9:0c:a6:bd:0d:
28:a2:24:65:45:8b:be:82:fe:ce:e0:02:8e:24:ce:
a6:9d:dd:19:18:ae:10:5f:24:7b:88:38:9a:fd:64:
c4:b0:e3:9e:69:6f:9b:c6:a6:f0:a6:56:62:0a:83:
5a:fe:25:04:4c:f3:0e:40:72:60:ab:a9:7e:4c:ba:
2d:ae:3c:88:56:56:b3:41:ad:cd:91:67:e8:ca:d7:
28:db:e4:79:91:76:bc:87:e4:93:f4:ac:39:9b:ed:
8b:fe:77:14:b6:91:a6:58:d4:66:8b:16:22:75:9b:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:65:04:30:F2:AC:48:54:D5:B7:67:F7:92:7E:C2:AD:DA:85:51
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Q6xlBDDyrEhU1bdn95J-wq3ahVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.4.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7c:30:ff:37:70:34:c5:fb:f3:95:59:ef:f4:ab:bf:c7:a0:
1b:68:26:ad:b4:b3:ee:81:fe:de:e4:73:eb:08:98:2c:5e:94:
bc:8e:42:2b:f7:83:c9:37:c1:73:bb:bd:a6:16:4d:39:8e:53:
1d:3a:28:bd:26:71:b7:bd:f2:6e:d4:59:b3:9f:6f:ff:d2:3e:
c2:9e:58:f4:96:a9:36:5b:ce:d9:f9:da:69:44:31:f8:52:f2:
23:4b:e7:a6:de:67:d4:6e:e9:33:24:33:eb:fb:79:5c:7a:af:
c9:d9:41:b0:c3:c4:a2:37:dd:bf:e7:9d:75:71:2f:3b:2c:6b:
94:e4:0d:f3:f7:fd:f8:10:72:65:0f:db:22:77:a0:88:e7:79:
7e:f4:35:0e:8a:36:3d:39:c5:fd:21:02:94:66:fa:59:82:b4:
f1:99:7e:86:85:78:15:6e:83:58:0d:8e:bd:a4:cc:6c:a0:53:
19:99:b4:13:f2:a2:df:3f:7d:ba:23:b5:c8:e6:9a:f3:7f:39:
91:af:46:61:67:e0:e4:51:9e:ef:e9:78:87:3e:2b:24:54:33:
b4:f9:3f:51:a8:9d:0e:55:ce:22:e9:94:52:f0:6c:4c:b9:f0:
ad:f2:f0:0b:69:96:fb:b1:11:d9:c2:5f:d0:6c:cb:93:76:bf:
72:98:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:18 2026 by rpki-client