Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sI2v5rbnDpEsQfhaBWVSktK_Xb4.roa
File: sI2v5rbnDpEsQfhaBWVSktK_Xb4.roa (raw, json)
Hash identifier: 9krFkDwqox5VseQitWJwegDO7xADJ2hIRvJ+NYMHwFA=
Subject key identifier: B0:8D:AF:E6:B6:E7:0E:91:2C:41:F8:5A:05:65:52:92:D2:BF:5D:BE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F647039C21D5310D5A945A7F8540810C5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sI2v5rbnDpEsQfhaBWVSktK_Xb4.roa
Signing time: Wed 15 Jul 2026 06:21:44 +0000
ROA not before: Wed 15 Jul 2026 06:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 188.255.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:70:39:c2:1d:53:10:d5:a9:45:a7:f8:54:08:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 15 06:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08dafe6b6e70e912c41f85a05655292d2bf5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:0b:e3:50:c9:18:fd:51:e4:7f:3b:0c:98:
7a:9d:b2:fe:64:83:17:17:98:45:63:6a:7f:f4:fe:
49:e8:0e:5f:4d:e3:22:0e:24:23:d9:62:a1:3e:bf:
fd:f2:14:06:ef:2f:74:c5:c1:74:7b:a6:56:f9:31:
b4:86:05:d7:73:8e:5c:03:c9:6b:5e:79:e2:92:04:
df:77:14:01:97:e7:bc:30:be:cc:66:a7:6e:f8:48:
3e:fc:95:d3:f5:f9:e2:d2:d7:86:71:00:08:53:58:
58:dd:cf:b6:be:bf:91:3d:6f:5c:90:57:58:ed:c1:
7d:8d:b5:e7:46:d5:38:d2:4f:2e:65:92:4b:b5:f7:
e8:90:2f:48:ac:1f:b9:5c:98:c0:90:69:e3:a1:ab:
f3:48:b6:52:18:90:13:f8:7f:44:93:e1:79:48:d1:
b1:62:57:5c:d0:fe:99:18:c4:e8:52:c5:d5:5f:77:
5a:6f:64:d6:9c:93:56:0e:c3:82:ed:6f:c7:fa:ce:
f3:cb:c7:d3:1b:79:be:60:18:99:50:be:cc:c5:b6:
f5:29:58:9c:d1:fc:24:fd:21:86:b3:d1:6e:29:cb:
7e:f5:e1:79:a1:ca:5d:89:c0:96:e5:28:ae:0f:dd:
b5:3f:c5:72:ba:5b:0e:40:69:6c:e2:e3:ad:08:85:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:AF:E6:B6:E7:0E:91:2C:41:F8:5A:05:65:52:92:D2:BF:5D:BE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sI2v5rbnDpEsQfhaBWVSktK_Xb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.216.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3b:94:a0:65:58:03:1d:a6:7e:cc:32:11:d4:43:f0:e7:85:
30:60:0e:91:95:48:27:3a:2b:32:31:f7:59:66:b5:ee:d2:a2:
e4:0b:f3:30:82:0f:be:9d:a0:c7:37:53:69:70:e9:77:14:5d:
4b:6a:56:1a:62:21:70:78:0c:61:00:0a:98:a4:f0:7e:d2:6b:
ad:e4:1b:23:70:ad:bd:4b:db:3d:78:37:36:b5:82:00:98:5f:
58:37:fd:85:86:91:02:64:cc:57:c6:31:08:f8:34:2f:88:56:
df:ce:4e:7c:b8:2c:af:3f:d0:15:0f:a2:a6:e7:65:7b:f5:29:
43:56:f7:1e:4d:09:9e:8b:af:29:ba:a8:aa:f2:ee:81:45:4e:
95:92:66:7c:08:61:a6:19:a3:be:97:3c:bf:1d:30:5a:9b:ae:
0a:e7:47:ba:6a:b0:c7:2a:40:0d:cb:1d:5c:2d:37:6c:8f:0b:
32:32:f8:bc:e7:84:6b:c9:a7:af:f8:0e:22:1f:75:9c:be:d2:
1a:66:f1:50:e2:d1:d1:0f:57:84:f8:de:f8:5d:67:e4:0b:50:
ce:74:72:56:05:ad:03:99:1a:b5:77:4e:12:ec:ec:a4:a5:cf:
c0:16:21:18:2c:c7:a0:f5:01:6f:0c:28:79:ef:6a:41:79:1e:
b7:35:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:16 2026 by rpki-client