Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xwAd3I6_U0M6W8U07LD8xlbpKLQ.roa
File: xwAd3I6_U0M6W8U07LD8xlbpKLQ.roa (raw, json)
Hash identifier: PkNy19WJmVKh+URjrLjATP7U4BkDNhky4hsfwMPw1RQ=
Subject key identifier: C7:00:1D:DC:8E:BF:53:43:3A:5B:C5:34:EC:B0:FC:C6:56:E9:28:B4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1CF21D2D04C4FD1D63ADBFB23CB4B2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xwAd3I6_U0M6W8U07LD8xlbpKLQ.roa
Signing time: Tue 01 Sep 2026 13:16:13 +0000
ROA not before: Tue 01 Sep 2026 13:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219011
IP address blocks: 109.233.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1c:f2:1d:2d:04:c4:fd:1d:63:ad:bf:b2:3c:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7001ddc8ebf53433a5bc534ecb0fcc656e928b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:34:91:00:24:50:8e:26:b5:f4:dc:73:a8:
ce:8f:a7:e1:8a:e7:75:d2:de:cb:19:6f:cd:dd:e3:
e5:c4:2e:fe:3b:59:75:37:eb:a6:15:79:3a:79:9c:
bf:34:a6:2a:bf:a6:81:f8:32:0e:9d:49:39:74:6b:
97:98:b4:ac:a7:d2:42:6b:da:10:d7:2f:8e:a1:23:
e7:75:d6:c1:43:db:a7:3a:e5:90:41:bf:19:a0:6d:
5d:cb:92:5d:82:16:b5:b5:b0:5e:92:6a:96:57:1f:
37:fc:ec:a9:0f:be:b2:2b:b0:7f:eb:1f:76:eb:c7:
39:7d:1d:9d:85:db:bb:7b:6a:78:27:fb:b8:57:d8:
cc:e1:e5:09:df:24:22:bc:3c:a1:d8:62:e4:da:97:
8c:f1:03:a2:8f:78:91:e6:46:08:e4:14:6a:2b:b6:
c5:ad:78:ff:92:91:38:80:14:4a:ca:08:86:85:b7:
f0:fd:3d:7b:3c:9e:ad:1f:53:5e:0c:9f:79:85:f4:
76:77:13:89:e8:be:8c:33:64:15:86:03:95:7d:21:
0e:9e:93:99:1b:29:ae:cd:b3:ea:cc:55:81:1e:a5:
cd:55:ff:c0:d2:f8:e8:22:af:c3:98:2d:56:8f:0e:
ed:f1:e5:37:72:23:55:cf:64:49:e9:47:43:b5:7a:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:1D:DC:8E:BF:53:43:3A:5B:C5:34:EC:B0:FC:C6:56:E9:28:B4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xwAd3I6_U0M6W8U07LD8xlbpKLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
02:97:1a:4e:62:ac:dd:20:7d:d0:f2:14:37:2e:3b:83:54:38:
0b:a3:92:6e:39:c2:34:68:e6:1a:ef:62:ff:76:85:11:b1:a2:
52:39:dd:c7:60:07:f5:14:b4:b4:83:6a:48:9a:77:39:20:7b:
4a:39:3e:76:0b:33:e0:d9:27:3f:c5:7d:e3:fe:4b:8c:59:cc:
53:51:ec:96:8a:31:4e:cf:80:a9:b2:68:30:89:ff:a1:67:63:
6d:cb:f1:31:90:53:c1:0b:3b:4b:e0:e7:eb:df:60:35:6c:3c:
9a:fa:5d:38:ed:10:31:c4:b1:a1:92:7d:c8:3a:91:31:00:08:
c2:cd:4b:7c:af:c9:cf:3e:2d:ac:e6:b2:92:1d:87:91:e0:0e:
53:7b:70:c3:a5:2e:bd:61:4c:9f:cb:8d:3a:15:77:18:31:63:
51:44:25:60:79:f1:b7:57:0c:ec:00:60:9a:b8:61:5c:12:7f:
55:c1:0d:da:cb:a3:4d:9e:b2:5c:cb:59:ac:32:ce:03:59:08:
de:14:e6:1f:2c:1b:34:d1:2d:1a:00:7d:45:d2:7b:11:ac:0a:
4a:e9:c4:60:8e:f7:2a:15:15:3f:bf:fb:3c:53:e5:2f:6e:ca:
37:ef:a6:52:2b:eb:45:35:b0:ce:7e:9c:ce:09:0a:36:57:fd:
e0:e2:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:26 2026 by rpki-client