Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vr9EWtV_eMSEmLWXmilw35BTI9g.roa
File: Vr9EWtV_eMSEmLWXmilw35BTI9g.roa (raw, json)
Hash identifier: J9jrOekiiwFKGmxzxBGPY/bOJVNJGnVv6Bf+6g6IssU=
Subject key identifier: 56:BF:44:5A:D5:7F:78:C4:84:98:B5:97:9A:29:70:DF:90:53:23:D8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F3DA7540C77913224EDAE070048D0DF56
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vr9EWtV_eMSEmLWXmilw35BTI9g.roa
Signing time: Tue 07 Jul 2026 17:36:43 +0000
ROA not before: Tue 07 Jul 2026 17:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 178.219.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:a7:54:0c:77:91:32:24:ed:ae:07:00:48:d0:df:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 7 17:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56bf445ad57f78c48498b5979a2970df905323d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:94:9d:02:34:be:1c:72:ba:34:2d:79:36:
11:c5:e8:a2:6c:67:63:98:c5:9f:17:44:38:0e:a0:
ba:07:4c:15:94:36:fd:ad:c4:66:6f:df:86:7d:cc:
68:05:78:b7:c7:26:69:df:88:d2:b5:e9:29:da:6c:
7e:22:9d:9a:2b:2d:9e:5d:e7:56:f6:2f:c6:df:44:
27:fb:01:5a:61:35:09:88:e0:e9:2b:30:64:db:dc:
e2:21:11:0a:2f:33:6e:e9:2f:79:b2:80:0e:06:a9:
7c:2e:af:dc:9b:50:ee:61:94:86:b2:fe:a5:53:7e:
49:b2:a1:6a:da:5b:62:b1:3e:9b:f5:98:5d:2e:cf:
35:b0:49:76:cd:59:9d:bf:76:ee:41:24:3d:7c:c6:
31:ab:10:75:da:16:76:0c:b6:6b:9c:fa:4b:a1:6c:
62:77:75:4f:99:36:15:d9:6d:0a:78:52:14:6c:6b:
d9:90:4c:2e:44:05:06:6f:a9:59:f9:b3:19:05:a5:
17:11:b2:f3:17:01:38:fa:8b:54:eb:ce:57:95:54:
9d:23:b3:cf:8e:61:22:33:4a:0b:5c:62:cf:5b:0d:
29:2a:71:09:8f:e8:3c:ea:66:2b:93:0d:e4:4b:bd:
c1:02:41:f8:0a:7c:d8:05:a5:fd:ab:b2:cc:95:31:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:44:5A:D5:7F:78:C4:84:98:B5:97:9A:29:70:DF:90:53:23:D8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vr9EWtV_eMSEmLWXmilw35BTI9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.1.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6f:37:ab:9c:41:19:0a:0f:5e:94:03:d5:be:58:65:b4:a1:
3e:45:f4:81:1a:20:03:b8:cd:76:0a:aa:10:00:88:a8:06:24:
08:9d:91:b8:26:66:9b:cb:d3:d2:cd:39:08:8d:4e:e5:e1:86:
a0:17:6e:47:f4:ad:27:f1:28:9a:c6:6f:2f:63:69:68:1c:ac:
4c:88:3d:b4:57:9b:be:e2:21:33:f3:0a:36:ba:82:94:b9:99:
6b:e8:04:ec:2d:29:db:7b:a2:c6:d5:80:8f:b1:39:b3:cd:be:
3e:75:ab:67:d5:1a:45:e8:10:2b:f4:f1:d4:bf:76:d1:20:2b:
d8:65:20:26:48:9b:36:e4:dc:ff:cb:8a:8f:44:91:31:e5:e4:
5c:df:a7:57:b6:b4:84:84:33:ee:cd:5a:b7:15:d8:97:18:51:
b5:9c:a1:8b:d4:0b:a7:54:f8:78:1b:44:7d:5c:63:de:f7:76:
45:63:c0:88:6b:35:c2:1e:5d:85:a0:3d:18:44:f6:2f:bc:8a:
7b:e4:bb:93:47:16:e6:ee:1a:64:56:8c:67:c1:1c:18:f8:9a:
cc:2c:c6:b8:6f:c3:a7:24:7d:f3:16:61:c9:7b:2c:a8:54:4a:
6f:c7:f4:76:d9:5c:2a:fd:d8:7c:6a:d4:08:92:a6:0f:b1:b2:
12:56:84:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ89p1QMd5EyJO2uBwBI0N9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNzA3MTczNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJmNDQ1YWQ1N2Y3OGM0ODQ5OGI1OTc5YTI5NzBkZjkwNTMyM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tWUnQI0vhxyujQteTYRxeiibGdj
mMWfF0Q4DqC6B0wVlDb9rcRmb9+GfcxoBXi3xyZp34jStekp2mx+Ip2aKy2eXedW
9i/G30Qn+wFaYTUJiODpKzBk29ziIREKLzNu6S95soAOBql8Lq/cm1DuYZSGsv6l
U35JsqFq2ltisT6b9ZhdLs81sEl2zVmdv3buQSQ9fMYxqxB12hZ2DLZrnPpLoWxi
d3VPmTYV2W0KeFIUbGvZkEwuRAUGb6lZ+bMZBaUXEbLzFwE4+otU685XlVSdI7PP
jmEiM0oLXGLPWw0pKnEJj+g86mYrkw3kS73BAkH4CnzYBaX9q7LMlTFn0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFa/RFrVf3jEhJi1l5opcN+QUyPYMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvVnI5RVd0Vl9lTVNFbUxXWG1pbHczNUJUSTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstsBMA0G
CSqGSIb3DQEBCwUAA4IBAQA4bzernEEZCg9elAPVvlhltKE+RfSBGiADuM12CqoQ
AIioBiQInZG4Jmaby9PSzTkIjU7l4YagF25H9K0n8Siaxm8vY2loHKxMiD20V5u+
4iEz8wo2uoKUuZlr6ATsLSnbe6LG1YCPsTmzzb4+datn1RpF6BAr9PHUv3bRICvY
ZSAmSJs25Nz/y4qPRJEx5eRc36dXtrSEhDPuzVq3FdiXGFG1nKGL1AunVPh4G0R9
XGPe93ZFY8CIazXCHl2FoD0YRPYvvIp75LuTRxbm7hpkVoxnwRwY+JrMLMa4b8On
JH3zFmHJeyyoVEpvx/R22Vwq/dh8atQIkqYPsbISVoRO
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:09:57 2026 by rpki-client