Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tytOt0Jnfng494nz1KKHM9Sv9O0.roa
File: tytOt0Jnfng494nz1KKHM9Sv9O0.roa (raw, json)
Hash identifier: X8Jccjcf1DxYOMfZ81BKWuP0hjGe1KZM0ZKEWTJbdz4=
Subject key identifier: B7:2B:4E:B7:42:67:7E:78:38:F7:89:F3:D4:A2:87:33:D4:AF:F4:ED
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199F0F7C5149D4BA37262EF9B03D6D88D79
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tytOt0Jnfng494nz1KKHM9Sv9O0.roa
Signing time: Fri 17 Oct 2025 06:59:53 +0000
ROA not before: Fri 17 Oct 2025 06:59:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.226.0/24 maxlen: 24
212.69.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:f7:c5:14:9d:4b:a3:72:62:ef:9b:03:d6:d8:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 17 06:59:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b72b4eb742677e7838f789f3d4a28733d4aff4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:16:91:5c:3c:e5:2e:82:cf:ab:d3:20:8b:
30:7c:a0:93:8a:5e:61:c5:7f:de:5f:3f:8a:c4:82:
23:ba:49:ef:1c:12:69:1d:78:b9:40:55:cd:13:36:
1e:1b:c9:ed:8b:ae:94:06:4e:7c:05:63:cc:33:ba:
c1:48:58:f5:47:67:46:84:b4:8a:e0:13:4f:4d:c5:
2f:3e:d1:a6:e3:26:5c:97:8e:e7:d2:11:b6:9b:27:
1c:03:91:aa:3c:7e:ea:87:d7:2a:3c:9e:61:c8:55:
09:d0:03:f8:b3:e5:c7:e5:fc:b6:d7:c1:e2:09:0f:
1e:52:de:79:79:61:a6:92:52:29:4d:e0:80:78:ba:
d5:47:f6:3b:8e:12:c8:80:b1:0b:8e:d2:4a:62:6f:
96:02:bd:a5:dd:d6:cc:c9:d4:4d:98:93:27:04:b7:
d6:d4:2e:09:83:2f:39:57:f1:00:ba:b9:da:c7:70:
c6:32:4a:7d:2e:bb:3d:24:51:d5:fa:13:52:53:75:
e1:d2:5f:a3:d6:86:28:44:8f:21:d4:1f:45:1e:8e:
db:94:fe:83:6d:cb:a3:82:8f:3c:2f:0a:ff:52:67:
b0:5e:f6:a0:f1:94:3c:ac:59:94:6f:13:9b:a5:b6:
6d:2e:11:7e:87:88:c4:1d:86:03:c6:af:c8:8b:59:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:4E:B7:42:67:7E:78:38:F7:89:F3:D4:A2:87:33:D4:AF:F4:ED
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tytOt0Jnfng494nz1KKHM9Sv9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.226.0/24
212.69.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2b:44:ac:c2:78:75:9a:34:3f:36:23:3d:f0:1c:44:1f:5b:
8b:a1:e3:08:4b:4c:d0:0b:a8:af:93:c6:64:24:2e:85:b7:f7:
92:51:68:e0:ac:c7:46:58:58:84:92:0d:f6:21:61:03:6c:37:
2d:df:01:10:f0:68:df:e0:aa:dd:44:8f:f4:ce:d0:8e:dd:8a:
4f:f4:66:07:0a:02:a2:cd:8a:95:67:bd:06:2d:0a:84:05:6a:
34:e3:da:74:7c:20:8e:23:df:b8:b0:80:dc:6f:9e:ab:c7:5b:
f1:0f:27:90:18:db:f3:01:c6:85:10:f3:3b:95:07:49:e2:48:
cb:05:80:0c:f8:95:10:9d:3e:7b:73:df:c2:ef:31:93:2d:59:
af:39:b7:f0:75:03:35:32:56:9e:5c:ac:4a:73:d3:af:8b:95:
39:a8:47:79:ef:38:f6:1f:b5:00:d3:f1:04:4e:ce:ed:c2:69:
9f:76:2f:ea:29:d8:7a:0a:0b:25:c0:b3:fc:3e:da:a5:ca:19:
5e:f0:6e:f6:e0:8e:66:31:46:86:d2:30:21:be:22:be:3a:af:
ae:52:7f:4b:b9:f2:1b:26:f1:cb:81:ef:90:46:aa:9d:a0:0c:
66:ce:ae:b6:ca:ac:54:b3:4c:ca:f1:eb:34:71:34:51:05:57:
ec:c5:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:08 2025 by rpki-client