Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VwGTN4OUlFvEBYC6vIZsdJW5SvI.roa
File: VwGTN4OUlFvEBYC6vIZsdJW5SvI.roa (raw, json)
Hash identifier: +KGeKwAucmzHvlLmdJ9mvAuPKPbw71TLPDQjerUDdW0=
Subject key identifier: 57:01:93:37:83:94:94:5B:C4:05:80:BA:BC:86:6C:74:95:B9:4A:F2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0390B2AA8317BF19B3A56FC2C444DB1B1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VwGTN4OUlFvEBYC6vIZsdJW5SvI.roa
Signing time: Tue 25 Aug 2026 13:10:28 +0000
ROA not before: Tue 25 Aug 2026 13:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 79.175.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:0b:2a:a8:31:7b:f1:9b:3a:56:fc:2c:44:4d:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 25 13:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=570193378394945bc40580babc866c7495b94af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:2e:2b:45:0c:79:d4:62:fd:bb:26:49:4a:
ab:1b:63:db:39:13:0a:9d:41:bb:b6:43:13:f5:65:
cd:3a:24:d0:b0:a0:32:e6:77:75:d1:57:1c:75:14:
4b:36:de:99:bb:be:dc:b8:82:fc:17:16:6f:e8:50:
05:a8:f0:1d:11:c4:a0:2d:5c:2f:c9:43:56:47:2a:
7b:4a:13:5b:79:36:2d:e7:3a:08:b6:b3:31:52:4a:
2a:f5:ca:24:59:33:de:ba:dd:a0:95:a6:26:42:dc:
8f:3d:c5:3c:39:d1:c5:48:81:8b:d9:96:1a:68:bd:
b6:9a:a8:85:84:f4:1b:9f:86:2a:d8:5c:04:2b:bf:
5b:e4:46:59:55:a4:94:e5:6b:23:76:1c:d3:37:7b:
1c:d4:57:64:0d:6d:85:35:6c:80:8d:6a:05:cc:e2:
89:18:96:1b:37:7b:a2:92:d4:16:c6:2c:1b:ac:d2:
eb:5b:0a:72:ac:7a:99:14:95:17:04:e6:1b:3d:60:
71:f4:36:fd:a0:b2:58:92:bd:f7:35:a6:42:cd:6c:
b3:e6:49:a3:fa:ae:4d:46:07:75:37:87:bf:98:ba:
48:8f:6a:fd:e8:a6:50:88:3d:61:e2:66:8c:8c:32:
d8:41:e6:7a:3b:67:dd:39:81:ba:79:f7:0d:bb:cb:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:93:37:83:94:94:5B:C4:05:80:BA:BC:86:6C:74:95:B9:4A:F2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VwGTN4OUlFvEBYC6vIZsdJW5SvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.122.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:6a:11:8f:9b:7f:6c:29:0f:1f:02:e3:37:c5:75:77:fe:
ef:53:2e:44:5f:15:f6:aa:6a:cf:db:42:26:8d:cc:2f:8f:b9:
fd:e8:87:04:dd:72:82:1e:fd:4b:ae:65:34:40:a1:4b:05:c7:
76:e7:b8:f7:1d:bf:80:39:9e:16:a7:b7:bf:03:73:7a:48:1d:
dd:34:65:03:f6:c3:fc:cc:25:27:38:c1:ba:65:91:ba:66:61:
f3:52:6c:99:0a:d9:31:a6:97:c9:0a:12:3b:c3:b2:62:68:1d:
d1:d4:21:a0:fa:59:f0:7f:89:2e:e8:04:05:00:15:82:c5:6a:
ac:6f:31:8e:e1:05:01:70:7f:b9:36:db:6d:2d:aa:d8:e6:7a:
fb:95:68:29:d5:22:86:27:8d:5b:9b:31:10:a7:d8:3f:bc:68:
88:7f:bb:74:3c:65:0e:f5:ae:d0:65:52:5f:35:8a:f4:f1:4e:
79:40:c4:7d:c5:ed:8e:86:30:52:9a:7a:3f:f3:80:95:be:84:
7e:f6:27:ee:7a:57:a4:a0:d5:1e:69:da:b8:ae:93:71:df:c6:
ff:55:de:d9:d7:db:ca:22:ce:c0:4e:d4:08:0b:4c:a2:f0:29:
c8:b4:ea:df:cb:28:86:ac:37:90:4c:cc:37:6d:ab:d9:04:8e:
ca:f2:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:29 2026 by rpki-client