Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kPhPTYUB_g9e6IwCQ56U07jKzTs.roa
File: kPhPTYUB_g9e6IwCQ56U07jKzTs.roa (raw, json)
Hash identifier: 4WHmY32HIHxG39Br9kbEdLGIbnvX6BC+dN43RK2o2qw=
Subject key identifier: 90:F8:4F:4D:85:01:FE:0F:5E:E8:8C:02:43:9E:94:D3:B8:CA:CD:3B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F60602EA89559379B11D0826E41CF17DA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kPhPTYUB_g9e6IwCQ56U07jKzTs.roa
Signing time: Tue 14 Jul 2026 11:25:43 +0000
ROA not before: Tue 14 Jul 2026 11:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3258
IP address blocks: 109.121.61.0/24 maxlen: 24
109.121.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:60:2e:a8:95:59:37:9b:11:d0:82:6e:41:cf:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 14 11:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90f84f4d8501fe0f5ee88c02439e94d3b8cacd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:54:a9:31:5c:82:30:93:28:70:92:86:ed:
fc:34:1b:74:31:ab:f4:0a:19:aa:a5:7c:62:29:21:
45:bf:98:20:f2:0e:41:28:14:92:17:a7:ee:93:37:
8b:ba:5e:4b:3e:36:cd:21:a7:53:6e:94:21:ed:9e:
99:70:23:b2:83:e6:5e:12:56:f2:14:e5:6d:0a:0d:
5b:0b:b2:65:e6:51:32:20:1e:9d:68:8a:1e:02:98:
24:04:32:77:5e:3a:e9:42:2b:33:49:24:0c:45:4c:
41:23:c5:db:f9:d1:65:eb:a5:c0:0c:e9:b6:42:1e:
83:38:0e:9a:55:d9:78:d7:43:0e:9e:b4:23:1a:7f:
2b:55:b2:8b:b1:2d:6f:36:81:e6:14:d4:e3:24:c9:
88:c6:0b:3b:99:15:91:0a:b2:7d:27:18:15:bd:82:
cd:bf:8d:63:25:44:b6:6c:f9:2c:33:0e:c0:89:55:
05:aa:ad:b8:ee:4a:bf:6f:65:1f:34:28:7b:53:6d:
34:26:2b:db:13:e0:a3:db:d0:97:46:46:82:02:70:
15:c4:5d:4c:14:df:7b:e3:d2:16:58:f9:7a:23:13:
6a:59:de:35:4b:1c:6f:b0:ff:9e:2d:be:04:a0:fb:
06:33:b8:78:c9:a9:ae:e0:ec:fb:1f:97:e8:74:40:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:4F:4D:85:01:FE:0F:5E:E8:8C:02:43:9E:94:D3:B8:CA:CD:3B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kPhPTYUB_g9e6IwCQ56U07jKzTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.61.0-109.121.62.255
Signature Algorithm: sha256WithRSAEncryption
1a:ec:14:e1:d5:64:f2:53:e1:40:d0:35:30:46:bc:45:b5:61:
0e:6b:f5:1b:70:50:1a:07:12:8d:ff:26:09:89:f3:be:bd:4f:
3d:8f:2c:64:14:36:96:63:a8:ff:e6:f3:72:bd:8f:83:80:62:
e2:d7:2a:e6:24:2f:be:59:c7:d3:e8:13:07:73:ba:22:67:96:
72:a9:c3:66:cf:0c:50:a7:fe:26:a3:cf:74:e6:70:04:13:7c:
41:c1:48:99:23:f0:b3:7f:66:91:70:01:66:45:1f:67:c8:80:
57:81:76:83:33:e8:bf:db:03:28:d1:a8:10:f7:01:4d:85:4a:
b6:61:e9:31:a7:98:c6:db:6e:73:45:cf:3b:d5:9e:f7:1b:0e:
d3:93:63:24:44:2e:25:46:59:0d:67:e0:6e:fb:a3:7f:6d:2a:
e9:5c:5a:d1:f2:14:d6:06:9f:c4:6a:35:9c:6c:f4:87:76:92:
5b:57:9b:38:93:5c:21:04:d4:a3:0b:f7:d6:74:46:fb:a3:69:
ac:6a:47:02:04:74:cf:73:a7:51:cb:65:32:2c:50:3d:45:05:
28:91:a6:c9:6a:da:d6:ac:2d:4b:da:c1:cc:01:8e:85:c8:87:
21:9b:54:f0:79:a6:7c:56:93:7c:a6:1a:b8:3f:be:3c:f5:d8:
46:19:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:55 2026 by rpki-client