Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ROak0xRFU-ZAaD8QJOWQau35XOM.roa
File: ROak0xRFU-ZAaD8QJOWQau35XOM.roa (raw, json)
Hash identifier: MnZQGKYd4AE62Cc6sXE8upfQtvidqqjEAqAX35L0eEQ=
Subject key identifier: 44:E6:A4:D3:14:45:53:E6:40:68:3F:10:24:E5:90:6A:ED:F9:5C:E3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C576D65DB1583D0D9A089C5B0AE4BF982
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ROak0xRFU-ZAaD8QJOWQau35XOM.roa
Signing time: Fri 13 Feb 2026 14:35:13 +0000
ROA not before: Fri 13 Feb 2026 14:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402162
IP address blocks: 178.253.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:6d:65:db:15:83:d0:d9:a0:89:c5:b0:ae:4b:f9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 13 14:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44e6a4d3144553e640683f1024e5906aedf95ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:9e:d3:e7:4c:f3:69:0a:84:d9:ec:19:a3:
73:10:73:f9:25:18:84:6a:f5:71:d3:91:47:62:87:
b3:93:fc:d1:3d:f3:2a:46:71:bd:47:94:40:6a:95:
05:63:52:55:31:fd:6a:c1:9d:12:0d:b2:26:a8:16:
cb:32:5c:91:35:7f:5a:4a:9a:3e:40:1c:8d:e0:5d:
68:20:37:ff:78:19:e5:55:a8:dd:14:29:50:2d:63:
42:7e:46:ce:0b:22:94:e3:b2:d3:40:b4:54:75:8d:
1d:7f:df:df:5e:1f:9f:b2:49:5e:de:7e:d3:6c:08:
8b:ae:62:ca:28:74:d2:0c:de:ef:99:01:23:a8:92:
4b:60:cd:ea:42:89:92:52:88:01:ba:84:a2:77:05:
55:cd:51:97:e3:66:5d:b9:18:dc:59:72:27:fa:cf:
14:5a:10:83:da:0b:59:b1:fd:d0:9e:2f:59:62:34:
f1:3b:d9:a6:ea:e7:4e:cd:5e:83:aa:88:49:b3:a1:
66:fc:91:0c:6e:41:35:2d:84:47:0b:53:ec:3e:73:
50:bf:c0:d2:f0:2d:35:b1:2b:e2:c5:ef:f3:3d:fb:
30:fc:38:bd:77:1f:c5:19:b9:df:1a:31:9f:83:3e:
ac:8e:a0:99:17:9f:ed:ab:31:21:71:cc:e7:fd:8d:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:A4:D3:14:45:53:E6:40:68:3F:10:24:E5:90:6A:ED:F9:5C:E3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ROak0xRFU-ZAaD8QJOWQau35XOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:0f:ae:61:01:f0:32:00:fd:2c:5b:04:37:a3:63:34:56:
94:55:96:dc:f9:27:16:4b:92:c7:1a:b4:ea:de:4d:71:4d:3f:
d6:97:41:e6:99:26:96:42:04:58:38:c9:40:aa:7d:d9:31:ee:
46:24:be:e3:51:09:3e:4c:0f:96:cf:8f:29:77:f9:aa:cb:59:
06:6c:58:cd:b9:17:3d:5e:25:57:50:a4:7c:6c:aa:f8:6f:cb:
61:ff:a9:9e:29:b6:80:e0:4d:b6:a0:a9:f9:be:28:fe:2a:cf:
c6:ca:bc:34:4b:5a:02:aa:6e:5a:a3:db:65:43:39:06:c2:9c:
a7:ce:ac:36:0e:c4:88:5c:60:34:21:36:2b:a5:47:a7:3a:bd:
95:49:ff:8c:8c:b0:fe:23:7f:86:a7:18:ac:a3:49:bf:23:c7:
9c:d2:d4:d3:ee:34:d3:a4:a3:a5:36:cf:ca:2a:09:2d:cc:a3:
65:7a:e6:c8:29:1a:9a:e7:fe:95:ec:c7:b2:0c:61:d2:7a:5c:
69:a0:d0:3d:81:ac:da:71:a7:2c:1e:5f:3c:41:31:ee:3f:bf:
7e:e9:32:ef:c5:65:63:87:8c:83:7d:e6:31:d9:b0:0d:2c:e4:
bb:cd:e3:6f:82:28:e5:1d:f3:58:63:98:36:1e:f8:e4:1d:48:
f8:cc:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 01:00:52 2026 by rpki-client