Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tff5eODpOzVbIoU19B0iknR80mg.roa
File: tff5eODpOzVbIoU19B0iknR80mg.roa (raw, json)
Hash identifier: tOgLpolcJNC3P3rfhR0oyEU5H5SQo1EiE6cCrpq3cYo=
Subject key identifier: B5:F7:F9:78:E0:E9:3B:35:5B:22:85:35:F4:1D:22:92:74:7C:D2:68
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EF9CEB7D2141734AC1ABA6C9F5BBD795B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tff5eODpOzVbIoU19B0iknR80mg.roa
Signing time: Wed 24 Jun 2026 13:25:34 +0000
ROA not before: Wed 24 Jun 2026 13:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 109.121.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:ce:b7:d2:14:17:34:ac:1a:ba:6c:9f:5b:bd:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 24 13:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5f7f978e0e93b355b228535f41d2292747cd268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:1d:c7:a9:f3:22:09:9b:ab:2f:8e:d5:11:
74:cd:ee:8c:7c:f2:c4:a0:9b:ed:23:53:b7:69:63:
50:56:97:93:e5:a2:97:bd:0a:ec:97:54:1c:07:7a:
d7:f2:1e:6e:36:82:22:a0:54:7c:2c:f0:99:4c:9f:
3e:44:cf:cb:c2:fb:3c:b8:94:5c:a0:90:12:76:03:
27:06:ef:09:15:35:78:dd:75:a3:79:c0:4d:35:b9:
83:94:fd:e9:4b:42:8d:d8:58:87:14:7a:95:1b:3d:
48:f7:b3:49:71:09:eb:a4:3b:d8:5f:1e:6b:30:ff:
76:c1:42:6e:f5:89:d8:de:a5:74:24:f2:fe:4c:92:
aa:24:93:87:4d:fa:6a:c9:82:13:0a:30:3b:33:5b:
da:8f:18:9f:54:ed:e0:96:c6:26:e4:9e:c3:ef:f4:
53:34:db:12:99:5a:f7:05:4c:f6:6e:83:1a:16:1b:
d5:06:5d:ad:a0:9d:af:9a:d9:0e:81:5e:85:c1:be:
5e:4d:bb:38:16:38:8b:89:ee:45:fb:02:91:98:23:
8f:28:1e:8a:00:4b:7d:43:b9:18:f1:88:84:cc:40:
44:5d:b1:95:21:20:d5:ae:f1:15:99:ae:37:5a:53:
da:29:e9:86:cd:10:8e:37:37:f5:33:65:c8:bc:b1:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F7:F9:78:E0:E9:3B:35:5B:22:85:35:F4:1D:22:92:74:7C:D2:68
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tff5eODpOzVbIoU19B0iknR80mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.33.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f9:85:8c:6b:1f:68:3f:c1:98:d4:eb:61:d3:8b:7b:07:de:
f7:44:5d:ce:d8:10:43:72:5e:51:63:5d:50:8d:ea:be:ac:b9:
2e:c0:a2:da:f9:ea:4d:79:5c:f4:e7:e7:8e:fd:71:7a:ad:d3:
9c:f5:46:b8:70:8a:69:16:d2:3a:dd:25:28:3a:17:b3:30:a1:
01:f6:bc:61:12:76:cf:e3:97:a2:12:bf:20:98:6c:d5:34:a9:
b4:eb:51:c1:51:bd:d2:9e:32:29:0b:ba:41:f2:b6:d7:57:ce:
c8:88:ca:ee:6e:c1:97:2a:81:6c:b7:86:39:64:4a:d3:bb:74:
54:e6:4f:18:4a:b8:56:9a:b7:be:d5:df:b4:6a:64:02:db:04:
b7:54:b1:69:3a:5d:50:55:c6:64:2a:f5:45:e8:47:fb:8e:a0:
74:15:10:09:41:39:97:40:53:bd:08:c4:2e:80:d5:9b:47:af:
f9:97:85:71:c1:3d:b8:9a:5a:61:a3:c8:91:2f:07:79:ae:5c:
4a:94:7b:36:6a:89:b1:08:16:c0:1c:3b:53:34:22:92:1f:c9:
69:38:c6:de:98:52:96:d0:37:4a:cc:f1:40:e4:58:19:0d:95:
28:a4:71:67:2f:41:d3:dd:e2:d3:08:6b:3d:df:34:b9:b8:c4:
37:1c:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:56 2026 by rpki-client