Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AI5DUOd2AFgZD5NSgEE0xunBsSc.roa
File: AI5DUOd2AFgZD5NSgEE0xunBsSc.roa (raw, json)
Hash identifier: 7D9VbjVJZzCpiSETW3r1Zc3W/a8KkoPVISbDEAjh+r4=
Subject key identifier: 00:8E:43:50:E7:76:00:58:19:0F:93:52:80:41:34:C6:E9:C1:B1:27
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0C9443CBB3C53567A5E36BE8396B0CFC1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AI5DUOd2AFgZD5NSgEE0xunBsSc.roa
Signing time: Tue 22 Sep 2026 13:18:07 +0000
ROA not before: Tue 22 Sep 2026 13:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209829
IP address blocks: 109.121.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:44:3c:bb:3c:53:56:7a:5e:36:be:83:96:b0:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 13:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008e4350e7760058190f9352804134c6e9c1b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:a0:4d:a9:8c:0f:3f:88:66:4c:cf:6c:c5:
d0:3e:74:9c:a8:9a:c9:d6:23:2c:2e:78:93:02:1d:
7f:6c:e8:1a:12:2a:73:62:e1:47:04:94:3d:f6:c0:
8e:01:cc:06:cc:a8:d0:5f:4f:de:3d:51:76:34:c2:
8e:da:64:a5:6b:36:cc:5c:8f:06:c3:30:6b:31:49:
2e:62:05:8b:b9:8d:53:8f:2b:ec:f7:1d:39:c7:51:
f2:d4:02:3d:57:78:e9:2d:e9:5d:a6:80:ff:48:12:
c0:40:e4:3d:a2:21:9e:b3:80:37:67:80:ba:07:df:
44:d1:ef:24:07:dc:8e:09:65:31:21:33:1a:a4:55:
62:35:ee:8a:c0:78:c0:d3:c4:6f:05:a2:2a:4a:f3:
f6:0f:e7:b7:54:7f:2f:b2:19:d5:90:c3:eb:ac:20:
15:9d:f6:7e:77:03:0e:60:fe:97:90:9f:ca:3b:68:
71:80:e9:ee:5d:36:ce:2c:da:78:21:2a:37:68:73:
2f:51:a5:80:6e:28:6d:0d:0e:f5:5d:82:cc:2e:91:
f0:e1:d9:cf:52:49:91:cf:58:af:7f:5a:ec:0d:d3:
50:ad:14:d7:c7:f5:da:31:74:e7:6e:b4:57:0d:15:
fd:c0:69:e3:75:7f:a5:2a:d7:35:51:16:38:98:57:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:43:50:E7:76:00:58:19:0F:93:52:80:41:34:C6:E9:C1:B1:27
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AI5DUOd2AFgZD5NSgEE0xunBsSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.45.0/24
Signature Algorithm: sha256WithRSAEncryption
70:04:7b:9d:4f:95:33:ad:e1:f3:11:a8:f3:11:79:7b:cd:35:
c8:b6:17:1a:8b:03:0a:69:88:7e:49:86:86:a1:eb:05:d3:cc:
06:38:b4:78:9f:f7:d4:96:fd:b6:bf:f4:b9:cf:c4:74:6c:aa:
9c:70:e0:54:8d:83:d5:5f:bc:29:7b:cb:75:15:2d:c9:02:d1:
1d:ba:af:15:12:be:25:8d:55:dc:a1:61:4d:fd:65:32:c3:8a:
c1:77:1a:19:7d:4b:52:34:a8:28:80:9d:f2:df:be:56:db:9d:
35:59:f4:c4:5a:66:90:65:f2:8d:6b:29:33:6d:07:92:be:58:
81:2d:20:67:a1:4f:02:88:94:d9:7e:87:19:21:7d:1b:63:b5:
d3:d5:19:86:86:b8:f1:15:b7:6a:93:99:3b:e5:02:d8:74:f4:
b0:5a:7a:46:0e:90:74:e4:c5:f9:b9:98:b0:dc:a3:38:b9:c6:
c0:73:14:49:a6:81:24:7a:86:55:8e:ea:dc:08:68:fa:4a:36:
46:3d:03:22:ad:49:98:db:14:4d:30:e2:2c:5b:76:a4:11:1b:
9b:f7:53:87:42:6f:3c:29:2d:a9:69:8b:03:9e:32:56:36:c7:
7b:c9:ec:24:95:86:16:10:5a:8f:16:a8:6d:e6:f2:06:97:2d:
c0:c6:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:24 2026 by rpki-client