Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3tdHdMDpIvNU9r424-OA6PZgp60.roa
File: 3tdHdMDpIvNU9r424-OA6PZgp60.roa (raw, json)
Hash identifier: 6C2dGdpkTDGONcUit+yVqL9CHwDvumdcljv6bwlX+0Q=
Subject key identifier: DE:D7:47:74:C0:E9:22:F3:54:F6:BE:36:E3:E3:80:E8:F6:60:A7:AD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F7988783BEC464DAA44CF8378BCD28462
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3tdHdMDpIvNU9r424-OA6PZgp60.roa
Signing time: Sun 19 Jul 2026 08:40:14 +0000
ROA not before: Sun 19 Jul 2026 08:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:88:78:3b:ec:46:4d:aa:44:cf:83:78:bc:d2:84:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 19 08:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ded74774c0e922f354f6be36e3e380e8f660a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:c5:d2:e2:83:05:06:e3:6a:84:b3:14:89:
c8:7a:03:56:03:13:0f:ef:63:83:4c:80:97:0e:5d:
2f:12:f2:e9:81:e0:1f:0e:f9:eb:09:54:65:78:3c:
ef:c1:4c:da:8c:b2:2d:2d:1a:4a:80:7d:84:2e:78:
3c:24:2e:a4:ef:b5:e3:d2:20:3b:0f:0b:4d:fe:26:
f9:2a:19:67:24:01:2c:49:c2:79:27:7a:77:f8:4a:
42:42:b8:ef:cd:8e:4b:97:7c:1d:91:19:f4:9f:01:
29:38:05:57:45:36:96:96:78:09:31:88:1c:33:a6:
12:34:be:f7:58:a5:39:96:9b:95:b7:62:f2:4d:3a:
ed:f9:af:31:b9:31:03:93:45:5b:0c:fb:35:36:9e:
12:3f:af:c7:2d:60:87:53:ab:1f:3f:a4:0f:31:18:
d7:d3:3a:62:22:1b:d9:8c:b3:64:cd:ec:d5:77:fd:
20:a6:cd:c5:97:93:03:c8:c1:18:07:c2:63:41:66:
e3:8b:4c:e0:da:60:1a:8c:2a:c4:86:07:97:36:7a:
68:b4:df:ea:0f:b9:41:2b:2f:50:2f:71:c1:af:de:
15:1b:96:d3:a1:ee:52:01:71:6b:9c:4f:5b:fa:56:
ef:3e:3b:5e:0c:db:db:cf:1b:37:68:fa:4e:10:a5:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:47:74:C0:E9:22:F3:54:F6:BE:36:E3:E3:80:E8:F6:60:A7:AD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3tdHdMDpIvNU9r424-OA6PZgp60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f8:2a:33:45:6d:ac:a5:77:cd:0d:37:01:00:13:51:e7:22:
ea:2d:88:63:b6:2c:54:b0:f9:32:12:eb:f6:6c:4c:c9:d1:80:
c8:4a:81:6c:a6:62:d2:8c:9d:2c:a9:ab:4d:75:08:a2:2f:4a:
e3:bd:55:10:e4:36:8c:07:6c:94:79:2f:d1:f2:d2:17:5a:72:
a4:0a:59:f5:f8:3f:38:68:07:9d:fe:50:94:48:89:88:4c:d7:
b6:cd:5a:4f:fd:45:a6:5c:60:cf:2f:91:6d:94:d0:56:31:b4:
d7:bd:20:f3:f9:bd:29:1e:e5:db:c3:df:49:b0:3a:83:37:54:
02:72:07:0e:49:b6:b2:9d:58:d3:e4:cc:41:07:37:a1:c3:09:
e6:ae:12:50:22:38:b2:c2:43:ee:ae:4a:26:2b:6e:cc:7d:c0:
b2:33:c9:fb:0f:87:dc:e3:f3:b1:0f:01:15:38:c3:8c:b7:f7:
1d:f8:36:9d:60:36:84:14:37:b1:78:93:5c:45:5e:4c:d3:87:
ce:6d:e2:c4:62:3e:8d:da:11:c8:09:c7:84:5a:34:db:cc:ef:
b5:f5:80:e3:e9:a1:57:a2:a7:27:6f:d2:06:e0:c6:24:bb:3b:
3f:eb:af:83:1e:ea:01:2f:83:bb:ee:9f:bf:36:80:51:48:94:
00:5e:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:57 2026 by rpki-client