Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tf-ffDMrDAnbxJzDwhCo0mLfRow.roa
File: tf-ffDMrDAnbxJzDwhCo0mLfRow.roa (raw, json)
Hash identifier: N2PaBIN6bvIOM27ddXveGrKnLk5pXI5AlE+0aiIjCCY=
Subject key identifier: B5:FF:9F:7C:33:2B:0C:09:DB:C4:9C:C3:C2:10:A8:D2:62:DF:46:8C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1C065231CE274EA7CDE4216093B5B7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tf-ffDMrDAnbxJzDwhCo0mLfRow.roa
Signing time: Tue 01 Sep 2026 13:15:12 +0000
ROA not before: Tue 01 Sep 2026 13:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219401
IP address blocks: 109.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1c:06:52:31:ce:27:4e:a7:cd:e4:21:60:93:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5ff9f7c332b0c09dbc49cc3c210a8d262df468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:d2:c7:49:74:8c:94:a1:07:1d:d1:64:58:
5f:8d:2e:cf:72:26:32:27:d6:56:b3:ee:8d:30:05:
61:f3:c9:f6:53:6d:2d:ff:c4:dc:a6:96:f8:bc:0f:
72:8c:94:9b:4f:d8:e3:e9:5e:43:69:2f:70:41:75:
60:23:32:24:95:0a:a1:5a:db:ae:d7:d0:02:5b:7d:
8f:b5:7e:17:37:cb:f7:07:13:dd:c6:e4:e0:91:76:
6a:f7:fc:9d:ff:d2:ef:8a:e6:16:11:4b:b2:c2:8a:
41:dd:9b:aa:5f:79:b7:b6:ad:bb:cf:e3:99:a7:2e:
5e:f1:98:8a:17:db:03:3e:a7:f9:a3:2f:3f:64:58:
39:d4:64:48:b9:d8:4d:02:c8:0b:8f:d0:cb:d2:7a:
86:3d:b7:13:fc:7e:f2:a8:b8:4f:07:00:63:f4:2c:
6d:90:cb:f4:a7:5f:e9:11:38:e3:40:84:a0:30:6e:
d0:4f:e1:c6:8b:8c:84:e3:c6:78:de:59:82:42:46:
b3:9f:d4:5d:eb:e2:b2:5c:0f:49:6b:1f:de:c6:b8:
d7:e8:58:cd:f2:37:ab:b8:f0:26:7c:e4:f0:06:cb:
c4:95:13:5e:19:8e:6e:72:49:03:47:c9:4f:ed:38:
26:05:2f:af:76:70:e6:6c:a9:97:81:28:3c:9e:2e:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:9F:7C:33:2B:0C:09:DB:C4:9C:C3:C2:10:A8:D2:62:DF:46:8C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tf-ffDMrDAnbxJzDwhCo0mLfRow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9e:25:74:a7:01:0f:3e:0d:73:6b:cb:36:ab:8f:1a:59:42:
31:4e:c5:80:d6:19:40:73:d7:eb:29:e1:76:ce:23:97:2a:72:
1e:a3:ab:e1:57:52:80:b9:45:ac:07:9a:0d:a7:ae:4b:6c:35:
79:3d:99:13:a9:fa:bc:8f:ec:e2:e0:35:7f:67:1c:df:42:e9:
b4:67:bd:b2:77:81:6a:79:c5:29:e4:58:14:64:7a:39:0d:c0:
71:04:3c:1e:20:8b:be:d3:00:de:32:8a:83:ff:51:a6:3b:6c:
57:9c:c5:c7:b7:67:21:20:5f:5a:a9:2c:e1:35:58:89:98:74:
cc:47:57:38:aa:03:91:5e:58:a7:6c:96:f7:84:19:96:3b:69:
48:cb:96:37:3b:1f:1b:9d:b5:dd:bc:ce:fc:7e:27:76:9f:1d:
9c:b1:56:e9:b6:d8:b0:ad:8c:cb:2d:08:b5:11:d2:5e:52:5a:
9a:6a:fa:6f:37:c3:ee:7f:ed:5c:78:8a:0e:1f:f8:e6:5b:10:
a2:32:47:c3:cd:97:13:e0:b6:55:cf:30:40:ff:a5:8f:97:2d:
14:99:52:c9:c6:c4:bb:4f:cb:f5:a9:48:74:07:ff:20:f9:e9:
e3:36:29:76:af:44:7d:a1:e3:04:d3:31:c2:1d:ac:2a:ae:80:
1c:83:c9:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBdHAZSMc4nTqfN5CFgk7W3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwOTAxMTMxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWZmOWY3YzMzMmIwYzA5ZGJjNDljYzNjMjEwYThkMjYyZGY0NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu/Sx0l0jJShBx3RZFhfjS7PciYy
J9ZWs+6NMAVh88n2U20t/8Tcppb4vA9yjJSbT9jj6V5DaS9wQXVgIzIklQqhWtuu
19ACW32PtX4XN8v3BxPdxuTgkXZq9/yd/9LviuYWEUuywopB3ZuqX3m3tq27z+OZ
py5e8ZiKF9sDPqf5oy8/ZFg51GRIudhNAsgLj9DL0nqGPbcT/H7yqLhPBwBj9Cxt
kMv0p1/pETjjQISgMG7QT+HGi4yE48Z43lmCQkazn9Rd6+KyXA9Jax/exrjX6FjN
8jeruPAmfOTwBsvElRNeGY5uckkDR8lP7TgmBS+vdnDmbKmXgSg8ni4aWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLX/n3wzKwwJ28Scw8IQqNJi30aMMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvdGYtZmZETXJEQW5ieEp6RHdoQ28wbUxmUm93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkmMA0G
CSqGSIb3DQEBCwUAA4IBAQAoniV0pwEPPg1za8s2q48aWUIxTsWA1hlAc9frKeF2
ziOXKnIeo6vhV1KAuUWsB5oNp65LbDV5PZkTqfq8j+zi4DV/ZxzfQum0Z72yd4Fq
ecUp5FgUZHo5DcBxBDweIIu+0wDeMoqD/1GmO2xXnMXHt2chIF9aqSzhNViJmHTM
R1c4qgORXlinbJb3hBmWO2lIy5Y3Ox8bnbXdvM78fid2nx2csVbpttiwrYzLLQi1
EdJeUlqaavpvN8Puf+1ceIoOH/jmWxCiMkfDzZcT4LZVzzBA/6WPly0UmVLJxsS7
T8v1qUh0B/8g+enjNil2r0R9oeME0zHCHawqroAcg8nw
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:40 2026 by rpki-client