Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UnzGpMv-8ojcB4py9qZUEwCxen8.roa
File: UnzGpMv-8ojcB4py9qZUEwCxen8.roa (raw, json)
Hash identifier: i9LR2wJa91dKbOcFLsTXRFSRPg9Zzf3dmWqDSIYr5Ng=
Subject key identifier: 52:7C:C6:A4:CB:FE:F2:88:DC:07:8A:72:F6:A6:54:13:00:B1:7A:7F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E8BF45A17B1E49369FDD22A1E3BFF432E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UnzGpMv-8ojcB4py9qZUEwCxen8.roa
Signing time: Wed 03 Jun 2026 05:28:27 +0000
ROA not before: Wed 03 Jun 2026 05:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 188.255.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:f4:5a:17:b1:e4:93:69:fd:d2:2a:1e:3b:ff:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 3 05:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=527cc6a4cbfef288dc078a72f6a6541300b17a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:1d:59:85:7e:43:11:7d:91:35:66:f9:55:
e8:76:d7:74:08:08:21:69:a0:28:d4:50:db:68:5b:
51:c4:4c:c4:4d:3f:d7:22:fa:4a:22:a7:19:71:85:
07:8d:7a:34:4a:bd:ff:39:8a:1f:d9:28:be:93:48:
10:09:ad:01:bb:f6:f5:86:28:34:4f:33:d8:b3:bf:
a9:59:3b:75:80:78:85:4c:40:c9:63:05:05:0e:21:
b2:ba:9e:05:dd:4b:0d:be:06:e6:7f:5b:b8:7c:9b:
a1:15:7c:d6:f7:ad:ad:7f:65:da:61:df:76:6f:5a:
dd:64:0f:a6:0d:e7:98:6f:13:bd:ad:58:d9:0e:30:
ee:09:12:10:db:49:2c:53:7b:87:09:fb:01:4b:e9:
a9:95:e4:95:9f:d1:39:b0:8f:39:af:c9:9e:cb:25:
00:c4:3a:fc:28:37:f1:ec:61:d9:c4:da:58:9c:6a:
9d:48:a5:bc:57:b5:04:89:56:16:c7:24:ac:94:b6:
65:83:6b:45:14:27:aa:68:74:32:6d:c7:8c:ed:e0:
a9:85:99:90:71:41:59:48:56:39:b0:7a:61:c5:9a:
49:39:36:2a:69:82:77:21:79:6a:5b:38:23:12:6e:
c8:d6:17:6a:5d:7c:9f:a5:bd:2c:88:e3:8a:02:60:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7C:C6:A4:CB:FE:F2:88:DC:07:8A:72:F6:A6:54:13:00:B1:7A:7F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UnzGpMv-8ojcB4py9qZUEwCxen8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.230.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a6:c0:70:96:ec:f8:36:33:ec:22:90:e9:b0:e8:36:2f:0b:
d1:39:12:da:84:52:17:fc:11:80:4b:9f:25:53:8d:a5:03:62:
dc:29:6b:6a:75:4d:1a:d0:1e:58:09:82:87:36:18:18:69:db:
8c:0b:7d:3f:6c:68:c9:8a:eb:a4:6d:52:38:eb:05:a4:e0:59:
32:fb:9c:1e:e6:3a:55:df:dd:0a:f8:4a:66:cb:72:2d:8c:a4:
54:2c:a7:76:9a:20:1f:65:ed:07:4a:5b:64:ad:22:aa:29:21:
3c:3b:ab:42:90:fd:b3:ff:3f:7a:14:d8:13:b5:e1:87:06:aa:
7c:a7:c9:8c:a7:6d:1f:74:60:d1:ab:88:c7:c2:f2:dc:72:42:
fa:f5:35:5b:11:53:ac:72:03:b8:dd:95:ae:6b:a9:a1:41:5f:
aa:ee:55:cf:4e:ba:55:1e:6e:29:c2:1d:96:d1:21:f1:6a:12:
82:8d:b9:10:a2:ed:30:dd:4a:8f:ed:58:3b:f8:c3:64:b8:d4:
fa:1f:4d:8e:77:14:2f:6d:06:8a:75:52:73:a7:bd:1d:8c:43:
e9:43:cb:40:a4:d0:2e:01:d9:6b:9d:4f:08:d6:7a:7b:fb:db:
a9:ac:bc:2b:b8:42:63:b2:5a:c3:cc:2b:b8:97:10:cf:d3:77:
16:19:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:58 2026 by rpki-client