Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iJ20AOgbbgq0MiUEizgp4zBv1Lk.roa
File: iJ20AOgbbgq0MiUEizgp4zBv1Lk.roa (raw, json)
Hash identifier: K5lmAShEdcJIoogqsmjH8hcQruYpGjgX6Ol/10czJZY=
Subject key identifier: 88:9D:B4:00:E8:1B:6E:0A:B4:32:25:04:8B:38:29:E3:30:6F:D4:B9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E45FB9A0A6FD5E4735EA10BB5CCBA1872
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iJ20AOgbbgq0MiUEizgp4zBv1Lk.roa
Signing time: Wed 20 May 2026 15:22:57 +0000
ROA not before: Wed 20 May 2026 15:22:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 109.121.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:fb:9a:0a:6f:d5:e4:73:5e:a1:0b:b5:cc:ba:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 20 15:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889db400e81b6e0ab43225048b3829e3306fd4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:cc:b4:67:72:a6:0b:43:68:a0:29:c9:de:
64:38:93:2e:cf:54:5f:db:66:c4:aa:b0:d2:02:15:
ce:d8:e4:81:fb:f3:31:b4:d6:42:45:d0:3a:e2:7f:
79:af:06:d1:3f:07:4a:65:02:66:88:c2:37:5b:93:
cd:87:cf:8a:9f:86:11:a8:5b:da:79:ea:79:80:ce:
dc:af:90:ac:0e:93:55:81:56:9b:cf:40:7c:e4:89:
83:1d:8a:fd:31:2b:cc:44:5e:96:9c:72:d4:de:54:
e6:f3:c2:3b:b0:0c:0c:6d:9a:88:63:2b:99:b9:63:
ea:4a:ec:80:6e:0d:9a:64:ff:10:ad:eb:d4:32:54:
0a:98:e9:64:ef:42:1d:f2:76:90:b6:47:9f:e5:2d:
9b:c9:f1:07:33:a6:37:e7:a4:0c:5d:55:2f:69:48:
d7:eb:86:48:e2:09:f3:ac:8b:7b:b0:ab:2c:6b:c7:
42:16:39:fb:96:71:e2:de:58:ca:d6:a3:5c:49:58:
d0:f7:87:f0:91:b7:a8:6d:6f:67:ca:77:9a:5a:33:
e8:a2:d5:27:5d:d4:7d:26:e9:96:4b:d9:6e:07:07:
4e:80:e3:79:27:f3:49:1f:b6:c0:f5:98:90:c2:5a:
2b:e8:a4:cf:0e:f0:37:81:cb:ec:e2:6e:80:f8:30:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:B4:00:E8:1B:6E:0A:B4:32:25:04:8B:38:29:E3:30:6F:D4:B9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iJ20AOgbbgq0MiUEizgp4zBv1Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c1:7a:24:05:12:85:4b:0b:4a:61:da:97:e6:d7:ef:0b:0a:
be:e4:81:2e:bb:9e:97:9d:1e:88:5a:3d:ed:4c:fb:24:a2:c2:
6f:73:ea:27:fb:64:05:7f:16:3a:d8:d6:b2:5c:b1:4c:9a:71:
0f:4b:93:76:44:4c:e4:fc:2b:04:29:00:32:5e:df:31:a0:ed:
43:f2:91:06:bb:4d:71:c7:75:15:87:36:62:3b:2c:27:f0:a1:
c4:f6:f3:8f:ec:b3:db:33:00:85:a4:34:ac:c8:77:5d:3b:93:
1a:06:66:46:c7:33:e3:c3:e6:65:92:42:cb:e7:38:0a:d1:67:
4f:b8:dc:5a:f1:c6:51:88:a8:7b:25:d2:27:2b:d7:56:aa:86:
c1:b8:24:be:f0:c0:a7:73:7c:bc:43:84:2c:f9:d8:de:35:86:
31:2a:c8:fe:f3:f3:0b:5c:31:40:23:8c:23:0f:7d:8a:da:de:
35:48:e0:63:56:d0:72:c4:b2:f9:04:9b:a1:34:7b:a3:6a:12:
61:93:e6:9d:57:e5:0f:13:d1:02:5e:1d:d5:49:97:aa:a4:c3:
1e:8e:57:b4:f0:34:26:0d:d7:38:d1:87:58:9b:1a:25:87:9a:
d4:14:4d:8f:e2:52:d5:3d:5f:cd:be:e1:5b:07:ab:25:c9:f6:
fe:c8:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:56 2026 by rpki-client