Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iWgLpY1W4kKIsVXAeouVfLkv8wk.roa
File: iWgLpY1W4kKIsVXAeouVfLkv8wk.roa (raw, json)
Hash identifier: UjalMqeN0fOUxY/jLUSIyH88l8oRhWyDtBDJ+111/M4=
Subject key identifier: 89:68:0B:A5:8D:56:E2:42:88:B1:55:C0:7A:8B:95:7C:B9:2F:F3:09
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A01926F58D1B5DE2FB6D51D3D88B93D9E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iWgLpY1W4kKIsVXAeouVfLkv8wk.roa
Signing time: Wed 19 Aug 2026 08:32:58 +0000
ROA not before: Wed 19 Aug 2026 08:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 77.105.50.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.219.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:26:f5:8d:1b:5d:e2:fb:6d:51:d3:d8:8b:93:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 19 08:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89680ba58d56e24288b155c07a8b957cb92ff309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:5d:e7:75:d1:29:15:cb:8c:35:b9:6c:89:
19:90:18:59:c4:6d:6c:29:62:89:28:75:c2:ec:c4:
f8:47:18:f3:e2:df:96:65:f0:20:2a:fb:a7:ba:9d:
2e:d3:df:fe:81:a8:a9:32:27:16:27:09:82:ab:b2:
f5:d8:b9:38:be:8e:e4:47:be:da:39:ec:83:74:28:
14:0c:2c:58:cf:89:92:72:84:32:ef:21:49:87:03:
ca:7b:06:38:9a:13:73:0a:98:60:c8:35:fd:d2:9e:
b5:71:ff:d3:39:c4:16:35:8b:47:c7:d7:b3:a2:b7:
e6:7b:2f:04:39:fe:00:de:77:fc:2b:20:a6:c7:77:
bc:70:b9:b0:44:c2:61:0f:29:30:0b:03:0a:8e:18:
78:16:cd:c0:b8:d7:2c:43:77:cb:d8:d7:bb:86:3e:
b7:ca:ad:87:5e:24:75:42:d7:e7:44:af:4c:06:ef:
ba:7a:33:d1:44:86:47:75:e4:51:20:9e:f6:36:79:
0a:77:80:51:74:d6:50:ca:42:5b:33:e3:c6:d8:33:
b2:a5:11:5d:bc:cc:e3:21:ec:b9:2c:00:05:1e:da:
48:a7:85:ad:36:38:b9:b2:e2:d1:33:76:52:b2:30:
e3:58:a7:9c:4f:b2:bf:dc:7d:de:04:4c:8f:cb:c3:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:0B:A5:8D:56:E2:42:88:B1:55:C0:7A:8B:95:7C:B9:2F:F3:09
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iWgLpY1W4kKIsVXAeouVfLkv8wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.50.0/24
109.121.43.0/24
109.233.185.0/24
178.219.7.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f5:7e:d3:ca:30:ed:71:8b:af:8b:b7:c0:3b:74:6c:58:99:
7f:07:f1:1d:46:55:dc:b1:1b:9c:bb:b7:a9:c0:06:5f:c9:e5:
44:53:84:8a:ae:bb:6c:62:1f:a0:56:47:1b:c6:bf:41:da:1a:
0e:35:73:49:e0:be:08:1b:2f:62:36:7d:9f:cd:55:d6:7d:65:
cc:be:00:52:7a:68:6b:bf:bf:22:1f:de:88:78:36:e6:85:81:
5d:0c:cd:fd:78:41:b0:26:8c:b3:e1:98:63:e2:37:85:ac:c6:
1a:4d:e9:10:06:71:cf:9d:db:22:3f:0e:37:a3:af:4f:6d:c5:
a6:72:0e:b5:a3:55:d6:65:6c:3f:a1:bd:39:57:e7:d3:9b:32:
e2:a2:37:72:fa:3e:96:40:43:c0:39:2f:84:40:eb:9a:1c:de:
3f:bd:4c:8e:c3:59:5a:f6:83:ce:4d:09:5a:30:5f:dd:37:31:
00:ef:c5:95:68:75:78:66:e9:ef:3f:ab:68:b6:66:30:3a:69:
a7:ee:5c:0c:5f:ac:c7:bf:d5:68:09:3b:41:09:dc:58:27:a5:
a3:c9:bf:e6:90:6e:35:c3:61:ef:ed:12:bb:80:89:2e:ab:5d:
66:61:98:eb:a3:a5:a2:ac:08:a8:88:d2:21:14:25:e2:91:20:
9e:a1:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:30:01 2026 by rpki-client