Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xq9mzlCQ1_cDVZw1kYQ6JOKaF-I.roa
File: xq9mzlCQ1_cDVZw1kYQ6JOKaF-I.roa (raw, json)
Hash identifier: /Mmm4qXoGPdS9BLEs7UAupY3EBrGZpxpVf/LFvpRQIg=
Subject key identifier: C6:AF:66:CE:50:90:D7:F7:03:55:9C:35:91:84:3A:24:E2:9A:17:E2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EC6334F99409630ADA67D22927697AC55
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xq9mzlCQ1_cDVZw1kYQ6JOKaF-I.roa
Signing time: Sun 14 Jun 2026 12:55:11 +0000
ROA not before: Sun 14 Jun 2026 12:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201176
IP address blocks: 109.121.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:33:4f:99:40:96:30:ad:a6:7d:22:92:76:97:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 14 12:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6af66ce5090d7f703559c3591843a24e29a17e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:aa:6d:98:a4:c4:f8:33:88:93:8d:e3:7b:
fd:a6:12:7b:4a:3d:70:14:f4:d3:60:18:62:41:34:
aa:53:da:5c:8a:e9:28:52:00:53:55:a4:47:7a:2f:
79:e6:b8:6f:15:e8:0d:a3:c3:a0:3e:a5:4e:d7:2d:
5c:c3:7b:8a:69:cb:85:bc:74:da:d4:25:3c:1c:47:
14:29:5e:1b:77:f7:0d:34:eb:7f:a9:a5:bc:c1:af:
d5:1a:59:f4:83:a4:74:fa:be:9f:c5:d6:26:33:18:
36:34:b4:f9:1e:78:c3:00:3a:ec:69:26:3c:5b:1e:
79:87:6d:9e:8a:d1:39:f0:3c:f3:af:74:1f:c9:df:
a1:a9:c3:0d:34:c1:55:18:75:20:fb:b3:e9:b6:9e:
df:f1:9e:f4:7b:40:79:aa:ac:84:e8:e9:52:23:b5:
e0:17:4c:96:a7:03:fc:77:68:30:3a:21:30:36:ba:
f7:01:7d:d3:31:94:b8:92:ea:f9:2d:05:aa:26:75:
a3:56:9d:91:14:d0:ae:15:26:f3:4f:91:e2:14:e5:
1c:2a:67:3a:20:71:e4:1e:b5:07:ec:a5:ee:4e:3e:
c0:0c:35:94:51:2f:7d:79:5c:8f:81:62:6e:c1:d9:
25:b2:90:13:d8:2e:41:e8:13:c1:6b:bb:e2:7e:27:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:66:CE:50:90:D7:F7:03:55:9C:35:91:84:3A:24:E2:9A:17:E2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xq9mzlCQ1_cDVZw1kYQ6JOKaF-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0e:13:51:78:fc:87:40:cc:79:d4:de:a4:54:02:02:bd:7c:
48:1c:1a:1e:0d:d4:6a:20:26:3c:ec:06:2d:d4:85:ed:33:62:
4b:02:86:b6:59:68:d2:e0:27:0d:a9:bf:ac:1f:52:fe:ef:06:
ae:85:e1:f1:bf:8d:15:08:53:70:4e:d6:1e:55:89:ee:4c:1f:
23:1b:81:d8:c0:f4:d1:42:ba:74:38:0d:e6:b1:da:ad:d9:3f:
24:bc:80:95:a5:3e:b9:4c:3f:b2:36:11:ce:03:e6:51:59:81:
e1:16:5a:b3:9e:26:00:73:30:df:1d:96:02:a8:2c:d1:c8:90:
75:0b:50:38:a1:fa:cd:c3:2d:ff:54:e2:80:0a:d5:f4:51:a1:
9d:f2:f3:71:ce:90:7f:e3:b0:32:0f:48:8d:c3:c7:fa:7e:6f:
51:5e:ff:3d:f8:fc:f0:f7:0b:23:aa:32:ff:f2:00:7b:98:d0:
da:49:db:86:a8:17:9b:1c:9c:53:8a:44:9b:5e:6f:91:93:7f:
8e:bb:33:2c:9d:5f:0b:5d:f7:07:60:ba:3f:3e:30:8c:3d:60:
7c:6d:32:46:43:bf:ab:b0:39:0d:00:a0:55:3e:1e:48:97:9d:
99:df:d4:45:14:00:8c:d9:6e:0d:b0:63:af:ef:84:ad:c5:ec:
87:74:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:17 2026 by rpki-client