Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nm2el8ozsQBybljpgbotkDW5yuo.roa
File: nm2el8ozsQBybljpgbotkDW5yuo.roa (raw, json)
Hash identifier: CSG+1RhCS5D00kC8Sg4Ois25HWJawTl/SYwymIw7FSQ=
Subject key identifier: 9E:6D:9E:97:CA:33:B1:00:72:6E:58:E9:81:BA:2D:90:35:B9:CA:EA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F02939E283F6013C7DBB4463457F28E88
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nm2el8ozsQBybljpgbotkDW5yuo.roa
Signing time: Fri 26 Jun 2026 06:17:36 +0000
ROA not before: Fri 26 Jun 2026 06:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 178.253.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:93:9e:28:3f:60:13:c7:db:b4:46:34:57:f2:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 26 06:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e6d9e97ca33b100726e58e981ba2d9035b9caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:0e:e0:f5:90:10:8a:c5:92:50:8a:6e:a1:
6e:51:e8:01:8a:01:f8:00:e1:e6:d8:93:68:b7:6b:
d3:86:eb:4e:2d:ce:22:96:90:7a:fc:2d:c0:9e:6a:
3e:f2:1c:42:6b:0b:10:d1:9b:ff:8b:63:2f:86:23:
80:29:d6:01:1c:59:4f:50:dc:b6:4f:be:30:74:e8:
34:31:47:9c:db:c9:b4:24:ff:60:c6:1d:d7:a6:e8:
90:0a:26:19:b6:23:ea:19:de:22:bd:d4:9e:36:73:
11:7e:06:78:c3:49:0b:bf:8d:03:72:51:b4:37:00:
34:60:3e:1a:24:29:50:5c:e4:93:fe:e6:b8:06:60:
2d:e3:26:b8:74:12:68:61:e9:cd:a7:b3:dd:bf:13:
c8:8c:6f:4d:9a:da:f7:ca:1e:ad:7c:fe:af:70:c1:
5e:19:d3:ab:a2:71:ea:a1:1f:df:4b:e6:f0:b3:a1:
e6:b9:ff:11:e7:8f:96:64:97:6f:fe:46:6c:8a:96:
a5:58:7b:1f:4a:d7:c5:8c:1b:ec:ac:ea:fb:4c:b4:
0b:28:7e:47:1f:e4:7e:a7:8e:75:97:c0:93:22:f5:
19:c7:44:a8:4b:b8:32:3f:d4:34:3e:60:ba:fd:9b:
17:bd:30:1e:0e:d1:71:12:53:5c:4f:7e:a5:c1:9a:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:9E:97:CA:33:B1:00:72:6E:58:E9:81:BA:2D:90:35:B9:CA:EA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nm2el8ozsQBybljpgbotkDW5yuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6c:ae:97:6e:90:86:0f:14:b3:7b:06:60:91:58:05:c8:c7:
1c:bb:45:30:33:0a:ba:e1:7c:0d:a8:e4:c7:75:2b:c0:d1:4b:
1e:9c:19:a8:4d:c9:b4:fa:5f:58:2d:5f:3a:76:38:0f:cf:96:
76:b7:67:9a:5a:87:03:64:11:95:ee:dd:f6:17:6f:b8:c1:22:
6d:59:8d:d8:d5:64:07:69:35:de:4d:3e:ae:99:a0:86:a8:f1:
a2:40:78:cc:d9:bc:d2:4e:7d:4a:ce:fb:62:f4:69:d7:d6:d5:
8b:f1:65:c7:9d:1d:66:8e:14:5b:d7:fd:58:02:8c:11:8a:5f:
01:62:fe:52:88:b4:05:5a:c1:12:a8:9a:f0:4f:01:74:8a:6f:
97:a2:14:25:c1:7b:bf:71:5e:1b:2e:cd:a2:12:a0:4c:05:9a:
bd:d1:bd:44:20:69:50:9a:a8:3d:52:c1:a6:f6:65:ed:bb:f8:
bb:6f:ee:ff:f9:f6:b9:07:c4:ce:42:59:d9:c1:c5:7f:09:1b:
44:97:8e:7a:4e:45:9e:c3:26:fa:c0:ec:4f:b0:26:2e:cf:90:
24:ae:cd:e7:df:c5:e7:95:92:10:ad:ab:18:10:17:a5:a6:5c:
96:22:bd:88:ee:03:95:51:71:d6:77:35:66:23:f9:a1:72:a0:
d2:3c:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:20:30 2026 by rpki-client