Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/d017yAndHdMyXfUqu-hPmXb1cQw.roa
File: d017yAndHdMyXfUqu-hPmXb1cQw.roa (raw, json)
Hash identifier: L+XV5/g1Q1ElFI1WW/xW+8QVQPNSHscQhERGc8uukAk=
Subject key identifier: 77:4D:7B:C8:09:DD:1D:D3:32:5D:F5:2A:BB:E8:4F:99:76:F5:71:0C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1CF086334F384913A2D009243032B6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/d017yAndHdMyXfUqu-hPmXb1cQw.roa
Signing time: Tue 01 Sep 2026 13:16:12 +0000
ROA not before: Tue 01 Sep 2026 13:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 188.255.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1c:f0:86:33:4f:38:49:13:a2:d0:09:24:30:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774d7bc809dd1dd3325df52abbe84f9976f5710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:2a:6b:2d:d1:04:81:83:08:e6:cf:3f:4f:
89:53:4f:d8:cb:c6:03:b5:b8:d3:b4:7e:e2:0c:a2:
7d:e7:04:05:19:f4:9f:a7:74:c5:19:77:62:de:24:
5b:fb:fc:53:53:32:f8:fe:fb:dc:42:e2:0b:23:1b:
75:c5:6a:d0:81:06:18:d5:cf:e7:a4:cd:bf:94:8e:
41:a9:22:3c:be:cb:e1:ac:fa:47:0e:14:18:c5:e0:
62:63:8e:76:04:03:43:34:15:7e:a8:3b:c4:5b:1a:
ec:ab:64:fa:7c:e5:e9:40:50:d3:8e:e2:6c:af:76:
7f:32:d8:75:bd:ce:ac:57:e1:15:17:79:c7:e0:82:
59:0d:64:cf:5f:e4:75:da:88:41:33:4c:db:32:dd:
1e:c3:55:ac:f1:8f:40:02:58:f0:4a:28:da:ec:21:
64:54:03:f3:92:26:d5:2a:f0:77:3a:9b:00:7d:e6:
40:96:fa:8d:3e:b2:08:f9:77:8b:a9:fc:4d:a2:d2:
a2:59:62:ac:82:35:d4:21:65:7b:a4:a9:b9:c9:b8:
87:28:ad:a8:a8:7d:38:da:05:b7:bf:cc:db:49:f4:
82:0d:85:30:ea:75:42:3c:19:6a:77:28:15:ea:50:
44:62:2a:d5:00:5e:a1:ca:1b:00:76:ef:8b:16:8a:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:7B:C8:09:DD:1D:D3:32:5D:F5:2A:BB:E8:4F:99:76:F5:71:0C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/d017yAndHdMyXfUqu-hPmXb1cQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.216.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f1:ac:6a:59:fc:be:ca:85:d8:eb:4b:6b:bf:88:0d:d6:78:
9c:88:85:1a:05:a7:2d:58:ed:83:32:d3:77:0c:f7:9b:da:6a:
9b:56:a9:a9:55:a8:54:2b:16:5d:dd:86:5e:c6:ed:21:d6:5f:
9d:49:ad:7c:6d:06:ad:aa:d7:89:b2:c4:e5:e6:fe:d9:ea:97:
4c:af:cd:53:d3:aa:05:4b:44:5e:af:79:02:18:da:d4:fa:e0:
34:3a:bd:d6:35:7c:d9:ba:a2:d7:90:00:9c:22:fe:35:fe:cd:
74:5e:a5:ae:3d:4e:5d:ab:37:78:5c:68:3c:33:2a:84:8d:d9:
63:cb:b3:34:b1:bc:53:41:00:a1:e2:5e:4a:d6:38:3a:db:74:
5d:28:2e:7d:24:56:1c:b7:5c:f5:e5:c9:4a:ee:1e:4a:d6:ba:
f2:92:9c:a1:60:bf:38:7d:df:91:05:a9:19:b2:e3:36:85:be:
52:69:f5:af:f4:32:d1:9e:2c:f9:b5:02:fc:15:64:35:81:ed:
b9:74:87:18:1f:54:ad:3b:c7:e5:b3:0c:ce:73:dc:7b:97:76:
46:21:95:be:94:ff:98:80:50:b7:31:b1:49:cf:a4:e6:c4:2c:
2e:81:09:8c:8e:98:92:fa:19:d1:64:d9:a9:ce:f9:79:2e:47:
a6:51:b3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:56 2026 by rpki-client