Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RK1ddQG_bCwXta_3MUPOG_LSzFI.roa
File: RK1ddQG_bCwXta_3MUPOG_LSzFI.roa (raw, json)
Hash identifier: taxs6+kQ2bA5KinwqyJLc9FsOx5pH3A552n6SRRheyE=
Subject key identifier: 44:AD:5D:75:01:BF:6C:2C:17:B5:AF:F7:31:43:CE:1B:F2:D2:CC:52
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EEB14DFB32C21EBC861F809D9B1A3DF5E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RK1ddQG_bCwXta_3MUPOG_LSzFI.roa
Signing time: Sun 21 Jun 2026 16:47:54 +0000
ROA not before: Sun 21 Jun 2026 16:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 188.255.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:14:df:b3:2c:21:eb:c8:61:f8:09:d9:b1:a3:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 21 16:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44ad5d7501bf6c2c17b5aff73143ce1bf2d2cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:be:06:22:1d:2e:a9:4f:48:85:b4:59:15:
d9:d4:8b:a2:ac:73:5a:ba:3a:29:9b:21:4a:b5:87:
f3:89:e8:eb:89:56:aa:b2:23:71:5a:1a:f8:c2:d1:
3e:f8:7a:af:83:c0:1c:e3:90:0a:c3:3d:10:a8:af:
1d:d7:dd:fb:8c:eb:0e:23:0f:96:5e:1a:02:05:8b:
02:7c:45:31:db:0e:07:a8:ac:bd:9b:93:49:41:b8:
ab:c5:aa:5d:6c:ed:15:cc:3c:3a:c5:88:5d:17:7d:
85:f8:4a:d3:a7:40:99:79:e2:ce:65:32:ea:08:48:
25:91:e2:12:e9:99:c0:08:fb:aa:2d:06:65:86:fb:
62:7c:cd:05:b7:94:57:80:a8:7a:39:5b:57:d5:5e:
d1:7f:d4:7c:6e:67:ea:81:db:51:ac:7b:b8:1b:ff:
e4:4b:22:56:54:75:0c:8d:f7:57:6c:59:d4:e1:d9:
b8:83:ae:d5:3c:5d:b7:27:15:1b:d2:36:d9:c2:38:
eb:24:64:8a:38:15:20:c4:17:5e:88:88:62:df:87:
ac:21:76:94:62:7a:9b:a1:b0:16:5f:c1:36:0f:71:
6f:de:61:fd:50:9a:7f:ac:e3:3e:7d:67:40:94:cc:
08:f5:ef:37:a0:4b:48:ac:7a:e6:a3:c3:43:c6:a2:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:5D:75:01:BF:6C:2C:17:B5:AF:F7:31:43:CE:1B:F2:D2:CC:52
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RK1ddQG_bCwXta_3MUPOG_LSzFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.236.0/24
Signature Algorithm: sha256WithRSAEncryption
03:77:fb:26:aa:29:e4:f6:d4:0f:36:cf:e1:b8:23:a3:d7:84:
70:22:1e:ae:e6:f2:8a:3d:74:c6:b8:b9:5d:79:5a:98:4d:a3:
4d:4d:5b:95:15:fa:f9:14:ee:65:a7:47:d7:4f:ae:f5:7b:91:
d7:c7:58:01:57:ad:e1:68:c1:b7:f2:da:44:95:c4:ec:c1:bd:
9c:4b:43:0e:14:df:7d:d1:36:f3:33:e9:c4:b7:d5:e5:5d:63:
18:6a:b6:cc:14:ef:f6:be:3b:a7:85:a6:f3:13:ff:77:5f:74:
75:60:a5:33:59:85:2a:64:e5:bf:aa:bb:ed:ed:69:d2:77:59:
0c:3c:fc:18:07:0c:f0:dc:29:01:91:5c:d6:1d:c6:32:cf:11:
f6:70:29:73:d8:cc:03:39:bd:04:3c:5a:c3:47:e3:7f:38:d9:
ab:58:9f:c2:13:26:70:70:cc:85:4c:d8:d5:5b:d9:20:f1:09:
28:50:e5:86:6c:1c:9f:1f:e3:1b:02:79:a1:8f:9e:d3:ce:c5:
59:12:b3:f5:ba:b8:e2:bc:d8:e9:3e:fc:05:23:19:f0:5c:72:
58:53:3b:12:f0:8c:88:11:cf:66:87:15:87:23:f2:5e:5c:6f:
d9:0a:a5:94:d4:5c:93:ef:05:69:47:79:52:d4:b3:10:d5:c3:
15:15:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:55 2026 by rpki-client