Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u_M-VWW59UAHJ6N7RKtnBaj4HSg.roa
File: u_M-VWW59UAHJ6N7RKtnBaj4HSg.roa (raw, json)
Hash identifier: NDVJ2WwOjUYuk90ZiL5/nrwplpyL+nlzBijcBAUFVZI=
Subject key identifier: BB:F3:3E:55:65:B9:F5:40:07:27:A3:7B:44:AB:67:05:A8:F8:1D:28
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F5A01A1F6CB6E81A0F229C014389793D3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u_M-VWW59UAHJ6N7RKtnBaj4HSg.roa
Signing time: Mon 13 Jul 2026 05:44:44 +0000
ROA not before: Mon 13 Jul 2026 05:44:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 188.255.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:01:a1:f6:cb:6e:81:a0:f2:29:c0:14:38:97:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 13 05:44:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbf33e5565b9f5400727a37b44ab6705a8f81d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:e4:0e:49:31:9c:5e:ea:a3:80:04:81:a4:
80:c6:42:f9:48:88:ae:58:66:4f:83:a8:5d:42:11:
ff:17:f7:8e:0c:d8:14:7b:c4:a5:ba:b8:ba:c5:93:
f9:6f:8d:90:d6:33:98:ab:e8:f1:50:6a:08:3e:c5:
8b:a4:00:0a:b6:75:90:85:a9:89:72:55:88:1a:79:
7b:ab:8f:da:45:85:98:93:fb:7d:85:f7:62:84:93:
93:b3:52:86:c2:7e:68:b2:c2:4d:fe:d9:f8:bb:6f:
b7:e4:90:5e:eb:50:6b:1a:64:0a:88:b4:21:a7:12:
e8:99:f7:48:8d:97:2e:c0:ea:2f:5a:d7:13:26:2d:
7f:03:ac:85:b8:ef:ae:74:ea:46:0e:c2:35:5a:76:
11:8e:4c:4b:46:bd:c8:ac:49:21:17:12:61:fd:2b:
73:22:d0:90:a2:2a:1e:ee:db:66:cb:b9:9a:7e:b3:
a1:8a:fb:ec:52:26:78:45:1f:8e:d5:7a:ac:c0:64:
4b:c0:e7:70:e4:14:64:c8:47:ed:f9:48:2a:f9:5e:
21:c9:ba:69:1a:31:73:79:00:40:69:ec:88:b3:29:
7b:bc:1b:58:94:f4:61:79:a1:27:4f:02:9b:e8:0c:
2a:3f:df:e9:d9:e0:67:bb:71:28:76:45:20:7c:40:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:3E:55:65:B9:F5:40:07:27:A3:7B:44:AB:67:05:A8:F8:1D:28
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/u_M-VWW59UAHJ6N7RKtnBaj4HSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2a:83:2f:22:3a:c1:4c:dd:09:84:76:6e:ca:1b:7b:02:72:
e3:78:e7:78:40:10:8b:d3:40:ca:9d:1c:c4:c4:25:d3:c4:5c:
33:bd:c9:fc:d5:36:71:98:f6:2a:30:2a:d1:65:57:84:b2:9c:
7a:32:82:0f:72:67:23:72:f8:21:9b:f1:91:65:71:26:8a:b6:
69:cd:09:b0:c4:94:fd:de:14:e7:dd:d3:50:72:c9:91:6a:a6:
89:5c:51:13:c6:dd:3f:51:3c:a6:b3:6a:a3:ac:8c:ac:f3:bf:
1c:4c:58:cb:d9:7d:91:7c:c0:04:be:f9:bb:ca:02:e9:4a:72:
72:bb:66:79:06:2d:79:e4:99:78:0d:92:9f:aa:7b:f3:45:36:
89:44:66:4e:a7:7a:8e:9a:ca:48:36:e4:6d:d4:58:61:ad:8a:
4a:f4:bf:98:dd:48:84:6b:ca:d3:57:84:cf:7d:53:29:95:64:
03:d0:aa:09:6f:95:92:a4:8f:32:e9:11:7a:ad:04:c0:9c:03:
a6:8f:42:0c:70:71:d1:fe:2f:c7:77:2d:65:95:e4:dd:e3:79:
c4:cc:8d:ad:ca:8d:fc:03:00:40:55:33:4e:70:21:26:c8:47:
ee:bf:18:87:41:23:aa:15:6f:2a:16:40:ba:e9:b8:68:c2:3d:
a4:5b:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:51 2026 by rpki-client