Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XmnPUqBKydD6Z2q36BLt_DGrz9I.roa
File: XmnPUqBKydD6Z2q36BLt_DGrz9I.roa (raw, json)
Hash identifier: kckb8MoJ2K+liTzanbJwksgJKy8aTZiSRvhcLRpjgJo=
Subject key identifier: 5E:69:CF:52:A0:4A:C9:D0:FA:67:6A:B7:E8:12:ED:FC:31:AB:CF:D2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F696B977F317425129FA4D8A6822A18E3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XmnPUqBKydD6Z2q36BLt_DGrz9I.roa
Signing time: Thu 16 Jul 2026 05:34:46 +0000
ROA not before: Thu 16 Jul 2026 05:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.121.54.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
188.255.174.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:6b:97:7f:31:74:25:12:9f:a4:d8:a6:82:2a:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 16 05:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e69cf52a04ac9d0fa676ab7e812edfc31abcfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:43:61:2a:44:5b:56:f3:e4:d4:22:58:24:
94:72:da:3c:6b:97:14:6c:b6:b4:17:e4:75:f0:8d:
c2:6f:e8:78:db:ec:f5:18:eb:3e:5c:09:1e:51:2b:
c9:ba:71:27:fb:ce:4c:ef:e9:bf:df:3e:64:b9:88:
c0:59:b6:c2:72:24:35:4e:00:7c:f4:67:3e:1e:c7:
3b:0b:d2:07:bc:6e:a7:0d:59:eb:e6:ba:b3:15:3c:
46:51:63:90:49:48:0a:e8:b1:ea:d1:7e:0b:dc:ea:
e9:bb:3a:19:1e:70:53:64:0f:67:6c:ce:be:15:c9:
c9:0a:7d:d2:7f:02:dd:fb:da:99:2b:af:9a:49:67:
21:5e:c5:8f:f3:7b:a9:5e:60:f1:72:db:70:75:53:
df:37:02:ea:0d:3a:38:62:1f:27:cd:d4:12:8e:1a:
7d:d9:05:cb:5f:c1:86:b2:cc:7e:f4:6f:8b:1c:8f:
34:b6:68:32:92:32:18:bf:ca:e2:00:6b:aa:e1:c1:
23:9e:62:2d:c5:0f:81:0b:c5:0d:a6:c5:62:d5:b8:
ff:56:1d:11:b2:70:33:4e:66:5b:88:16:68:90:04:
ba:f3:95:41:48:d0:0f:19:92:0e:a6:3c:4f:7a:79:
f0:41:b0:87:cb:4d:e7:f6:0c:d7:9d:4b:45:bb:be:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:CF:52:A0:4A:C9:D0:FA:67:6A:B7:E8:12:ED:FC:31:AB:CF:D2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XmnPUqBKydD6Z2q36BLt_DGrz9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.54.0/24
178.219.1.0/24
188.255.174.0/24
188.255.201.0/24
Signature Algorithm: sha256WithRSAEncryption
55:25:9c:1c:b7:79:af:33:53:35:d8:16:f5:c3:24:6d:28:48:
2b:09:17:0d:2a:b8:fa:f8:b2:a2:ee:58:b5:aa:f6:4c:d3:8c:
a5:db:fe:77:6b:e5:9d:78:94:fc:ec:50:29:a1:d7:6d:a7:c8:
36:1b:74:0d:af:88:5f:2d:73:9c:86:51:66:5c:1b:93:2e:b7:
5a:09:ee:17:54:13:2a:b4:78:c1:e2:c4:65:96:1a:79:f5:f5:
4c:b1:25:0d:8d:8e:12:e1:bb:11:c4:93:e0:17:9e:b5:92:e1:
78:af:82:65:3b:06:39:c3:f1:fc:fe:9c:94:b5:50:e2:6b:58:
20:79:72:b5:6b:49:bb:37:f6:64:32:bc:5d:52:05:fe:c9:68:
c2:62:09:12:67:0c:17:d8:f6:88:80:59:d0:ef:82:1d:dc:4c:
f6:52:15:56:14:3e:8b:71:98:8d:29:6e:14:a5:17:cf:2c:3e:
4c:0c:d3:55:72:39:14:a1:9a:30:e2:a6:f8:99:69:4a:6e:8d:
ec:e9:5e:18:2c:39:fb:0e:98:9d:5c:a1:0a:28:2d:3d:e3:ee:
1a:8b:ee:21:3f:34:72:83:4f:8d:2f:74:e7:db:54:d7:12:39:
ac:6f:44:b6:e5:af:78:12:26:3e:6c:77:73:2a:3f:22:1b:fb:
d0:d5:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:25 2026 by rpki-client