Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jeeYsQVJQctwHvQyVxcCWPGqMtU.roa
File: jeeYsQVJQctwHvQyVxcCWPGqMtU.roa (raw, json)
Hash identifier: Jmq5CtCbox7xTzPamuCleQyRu0n9cUW8Eypav8Q4YGE=
Subject key identifier: 8D:E7:98:B1:05:49:41:CB:70:1E:F4:32:57:17:02:58:F1:AA:32:D5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D209B29250468B0F35DE86AF9F059D4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jeeYsQVJQctwHvQyVxcCWPGqMtU.roa
Signing time: Tue 01 Sep 2026 13:20:13 +0000
ROA not before: Tue 01 Sep 2026 13:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 109.121.36.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:20:9b:29:25:04:68:b0:f3:5d:e8:6a:f9:f0:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de798b1054941cb701ef43257170258f1aa32d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:9d:53:d8:c6:04:ff:fc:30:53:83:d1:15:
04:27:66:aa:5a:0a:cc:93:42:c4:cb:a7:13:63:4a:
a4:88:4c:25:cc:ca:33:d0:4e:7a:22:85:69:9b:8d:
a9:f9:0b:0e:f0:99:6a:b1:f6:56:67:d4:13:ad:e3:
e2:39:14:47:9d:ce:fe:d6:4d:49:6e:36:6d:6a:72:
b9:05:12:ea:1a:2e:ea:e1:85:78:8f:29:99:fc:52:
13:07:49:5a:26:95:81:d9:ce:b6:3e:af:71:9a:63:
ea:f5:1e:05:52:d5:06:b4:00:95:14:43:6d:79:9d:
b8:c4:ff:a2:e8:27:61:52:bd:89:c6:d2:3e:3e:d7:
6e:6d:8f:c0:f5:97:13:ff:61:ae:c4:55:4a:f7:31:
61:93:bc:3a:37:f2:b2:2e:6a:61:23:df:aa:2d:58:
71:1f:b3:7d:38:e6:53:cc:6f:ce:ed:be:8a:af:d6:
93:eb:b3:c0:3c:4c:80:5e:0b:ed:3b:da:bb:83:95:
e1:85:8f:9e:1d:b1:25:9e:c2:34:2d:77:5a:06:66:
9c:7b:25:34:39:3b:0e:8b:28:a6:70:ac:b6:34:36:
5b:69:4c:e5:d1:24:28:93:16:29:cc:2c:d7:ae:50:
32:01:f1:c0:51:08:97:ad:bb:28:87:af:a4:37:8b:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:98:B1:05:49:41:CB:70:1E:F4:32:57:17:02:58:F1:AA:32:D5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jeeYsQVJQctwHvQyVxcCWPGqMtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
178.219.1.0/24
188.255.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8f:8b:b2:e5:f3:9f:13:e2:42:5f:92:7a:27:54:4a:8a:20:
ce:60:a2:41:b9:e9:57:89:a0:b2:ba:93:68:6b:64:2d:4e:25:
47:38:75:dd:6d:d7:01:f0:41:bd:c3:26:24:fa:f5:7a:22:68:
b4:39:83:53:34:c0:3d:a8:18:af:e6:3d:94:0f:34:ef:4f:b4:
a9:7e:e4:9c:a4:92:c2:27:52:7d:30:db:dd:6d:6b:5c:79:dc:
28:ce:53:e8:8f:7a:13:af:53:29:ed:90:ad:d8:bc:39:89:33:
91:19:03:f8:90:c4:da:5a:16:a8:40:78:9f:a6:dd:91:76:e1:
ab:c3:bd:79:51:3d:8f:31:91:fb:be:c1:7f:29:17:f2:28:08:
34:be:a9:9b:c8:3b:bf:57:a8:1f:85:90:7b:d0:aa:cd:17:e8:
fa:79:1f:ee:5d:45:d3:0c:cd:e4:fa:08:82:7e:88:3a:00:53:
99:9c:ef:b7:58:b7:08:fe:de:ef:e7:70:08:f4:3d:01:92:86:
97:84:68:f3:4a:c3:8a:2a:10:36:3a:d4:a3:1e:aa:8b:5c:ec:
8a:ed:fd:09:c3:4b:b2:14:53:80:c9:5a:61:8e:0c:cf:4b:1a:
9e:39:1b:1e:40:78:8a:e4:e2:44:28:39:6f:75:2f:b7:49:0d:
dd:41:cc:95
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBdIJspJQRosPNd6Gr58FnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwOTAxMTMyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGU3OThiMTA1NDk0MWNiNzAxZWY0MzI1NzE3MDI1OGYxYWEzMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj2dU9jGBP/8MFOD0RUEJ2aqWgrM
k0LEy6cTY0qkiEwlzMoz0E56IoVpm42p+QsO8JlqsfZWZ9QTrePiORRHnc7+1k1J
bjZtanK5BRLqGi7q4YV4jymZ/FITB0laJpWB2c62Pq9xmmPq9R4FUtUGtACVFENt
eZ24xP+i6CdhUr2JxtI+PtdubY/A9ZcT/2GuxFVK9zFhk7w6N/KyLmphI9+qLVhx
H7N9OOZTzG/O7b6Kr9aT67PAPEyAXgvtO9q7g5XhhY+eHbElnsI0LXdaBmaceyU0
OTsOiyimcKy2NDZbaUzl0SQokxYpzCzXrlAyAfHAUQiXrbsoh6+kN4uaHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI3nmLEFSUHLcB70MlcXAljxqjLVMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvamVlWXNRVkpRY3R3SHZReVZ4Y0NXUEdxTXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkkAwQA
stsBAwQAvP+IMA0GCSqGSIb3DQEBCwUAA4IBAQAuj4uy5fOfE+JCX5J6J1RKiiDO
YKJBuelXiaCyupNoa2QtTiVHOHXdbdcB8EG9wyYk+vV6Imi0OYNTNMA9qBiv5j2U
DzTvT7SpfuScpJLCJ1J9MNvdbWtcedwozlPoj3oTr1Mp7ZCt2Lw5iTORGQP4kMTa
WhaoQHifpt2RduGrw715UT2PMZH7vsF/KRfyKAg0vqmbyDu/V6gfhZB70KrNF+j6
eR/uXUXTDM3k+giCfog6AFOZnO+3WLcI/t7v53AI9D0BkoaXhGjzSsOKKhA2OtSj
HqqLXOyK7f0Jw0uyFFOAyVphjgzPSxqeORseQHiK5OJEKDlvdS+3SQ3dQcyV
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:27 2026 by rpki-client