Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tzYMbUOYsdIDMGbMZnRs6r_i4zo.roa
File: tzYMbUOYsdIDMGbMZnRs6r_i4zo.roa (raw, json)
Hash identifier: F0H+kz9k28Dhf1PVI2+CnAE91VoI2JSRevY7n4ttTG8=
Subject key identifier: B7:36:0C:6D:43:98:B1:D2:03:30:66:CC:66:74:6C:EA:BF:E2:E3:3A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019CB284A87E984173418C902C688AEDDC66
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tzYMbUOYsdIDMGbMZnRs6r_i4zo.roa
Signing time: Tue 03 Mar 2026 07:06:04 +0000
ROA not before: Tue 03 Mar 2026 07:06:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:84:a8:7e:98:41:73:41:8c:90:2c:68:8a:ed:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 3 07:06:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7360c6d4398b1d2033066cc66746ceabfe2e33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:95:98:fc:d0:2d:5b:ff:e1:27:f5:a9:35:
6d:ae:36:08:01:00:6f:c4:66:33:69:d9:e7:f5:c2:
14:9d:29:d0:46:6b:e6:1c:fc:f8:f6:fa:a5:31:39:
11:1e:69:e2:2c:4a:89:6f:bd:c5:2c:87:7e:ff:ca:
b3:92:76:0b:ce:40:f6:cd:5f:b3:dd:ff:2c:bc:14:
f3:ae:11:c8:ac:c4:54:0c:62:25:f3:c5:36:27:b1:
16:62:fc:a0:5b:6b:97:83:68:31:bd:f0:29:16:e8:
58:bd:86:df:c9:39:9d:b1:4a:aa:53:3f:4c:3a:ab:
4c:e7:ff:1a:ae:a7:d7:5a:b4:0d:e3:2c:06:7f:58:
86:c3:3b:cb:ef:33:f3:fe:c3:16:8d:c3:97:cf:e5:
68:8e:91:35:ed:6e:6b:d6:03:09:7e:14:34:04:d7:
82:6c:0d:7d:56:b0:de:41:ad:e4:c9:ab:59:ed:e7:
6f:a1:98:1a:2b:17:59:36:d8:80:5d:04:48:3b:f8:
06:0a:76:c1:6b:b3:8e:fb:a3:df:4c:b7:6f:dc:bf:
b7:36:35:5f:08:e9:2c:e2:6a:fd:cd:ed:1f:4b:ca:
5d:33:05:44:29:f0:c0:a2:5f:b9:ab:d5:2e:72:c5:
aa:8c:86:87:5e:eb:3a:a2:ed:a9:6f:5c:ae:53:af:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:0C:6D:43:98:B1:D2:03:30:66:CC:66:74:6C:EA:BF:E2:E3:3A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tzYMbUOYsdIDMGbMZnRs6r_i4zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4d:7f:cf:65:aa:6e:c8:c9:f7:17:02:f5:26:30:d0:b1:e0:
9f:3d:2e:28:86:51:1c:76:b3:8c:a2:33:38:0c:ed:a0:b4:83:
35:97:60:6a:a9:69:6b:42:07:76:7a:ec:5e:58:a3:be:f3:c5:
56:fe:be:2e:b2:06:01:13:53:f6:4a:a8:24:7d:bb:dc:4e:19:
fa:3e:c0:d7:88:92:3b:bc:4d:66:af:5d:ed:18:ec:c7:26:5c:
fe:e1:2f:b3:04:8c:4f:4d:9e:9b:51:cc:2a:16:77:e1:66:da:
89:c8:c2:bb:3b:13:d1:5f:e0:1c:a3:46:43:7e:c0:ee:f3:1d:
8b:95:ee:c8:8d:1b:3b:a0:aa:62:79:dd:a1:23:5f:c1:8e:80:
44:bf:fd:92:c8:81:3b:46:d7:06:c9:ff:cf:12:cc:ff:6e:8c:
d3:83:e0:f0:b3:e0:b4:74:52:f4:aa:65:47:23:9e:16:52:d9:
74:66:e6:e3:3f:d5:21:51:9b:dd:47:5e:c7:6f:c5:f9:94:39:
c4:ce:2a:f6:73:01:7a:6f:09:4a:47:18:39:d3:4d:be:73:01:
6d:08:3a:94:db:22:0f:51:ad:a9:20:a6:a8:cf:9d:eb:17:e7:
26:41:ea:64:ab:9b:41:af:3b:ec:5f:bc:d3:85:1a:5a:cf:b9:
f1:6d:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:48 2026 by rpki-client