Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FfWUh9H34_LnWXdZMENpG8SFmk4.roa
File: FfWUh9H34_LnWXdZMENpG8SFmk4.roa (raw, json)
Hash identifier: OQ9aQHjng6EXx/+5G8sGlp4jhFdN+CtGrfl7sm6RgPw=
Subject key identifier: 15:F5:94:87:D1:F7:E3:F2:E7:59:77:59:30:43:69:1B:C4:85:9A:4E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0C94351EDED2640CDF784628DB5389C00
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FfWUh9H34_LnWXdZMENpG8SFmk4.roa
Signing time: Tue 22 Sep 2026 13:17:07 +0000
ROA not before: Tue 22 Sep 2026 13:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 178.253.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:43:51:ed:ed:26:40:cd:f7:84:62:8d:b5:38:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 13:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15f59487d1f7e3f2e75977593043691bc4859a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:79:3f:4b:75:3f:3e:c8:f2:8e:51:c2:d8:
7f:61:10:a9:71:cb:17:1b:e0:c4:9f:98:8b:6f:4a:
67:24:0a:ce:8b:0a:94:3c:a4:bc:e8:be:cd:2f:3b:
5f:b4:b0:fc:28:60:c8:0d:a3:d0:14:b0:dc:07:6c:
1b:ef:39:5d:37:f2:39:43:d5:54:88:9d:9d:4b:9c:
68:90:62:09:c7:f0:7d:b2:42:ab:08:74:b8:1b:36:
0f:39:70:78:f1:80:c8:6e:b3:c2:4c:ac:5f:8d:a0:
f7:a4:ef:49:f8:9c:b5:bb:af:5f:64:46:f4:70:8a:
0d:c1:11:ee:51:b3:4a:38:ae:c6:d7:9c:a8:14:4e:
08:30:ef:b3:7e:b8:3a:92:1d:ef:47:c1:4a:31:e2:
1d:ca:7c:e4:45:6c:54:84:37:87:1a:e3:65:ad:35:
36:a9:64:71:ff:7b:c7:70:63:22:4a:b3:c4:85:90:
0f:2b:6a:16:da:6f:96:60:5b:e6:35:de:fb:ed:9d:
6e:8f:ee:6a:32:dc:e7:1f:1c:d8:f1:69:17:1e:16:
23:ac:9f:4b:08:e2:39:f9:23:2d:56:12:ee:94:61:
b3:15:64:4b:3b:cc:ef:a8:04:b3:01:91:98:c9:49:
af:ae:28:4d:d2:b8:1d:5f:f7:f7:b1:cc:38:1d:f6:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:94:87:D1:F7:E3:F2:E7:59:77:59:30:43:69:1B:C4:85:9A:4E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FfWUh9H34_LnWXdZMENpG8SFmk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:af:3b:b2:16:b8:b8:c4:bb:8f:99:d6:cf:50:38:15:3c:85:
81:0e:08:a8:69:5c:c5:c1:a8:26:6c:fd:14:5f:d7:f4:67:a8:
a0:59:29:9d:8f:42:7f:23:7d:0b:ca:79:1f:74:c4:cb:c0:92:
c8:29:ca:25:80:55:3c:59:53:96:d6:fc:9a:d9:c9:e6:00:4d:
8e:70:79:3a:36:c8:29:19:0c:0d:03:af:37:4a:ea:95:69:2c:
07:82:c8:5a:4d:f0:4c:40:89:15:5b:c2:cd:9a:ed:fd:b2:47:
a7:2c:0d:08:07:49:77:9e:bd:0a:a8:e4:37:4e:56:ce:15:77:
0d:39:86:74:0f:42:a9:c6:6e:8e:87:58:20:cc:8b:9f:47:88:
3a:9c:87:4c:ab:e8:72:73:93:61:5f:f1:e8:b2:0c:60:8a:71:
dc:44:f1:c1:0f:b4:27:7f:d2:55:34:f4:62:f1:8f:fe:ed:73:
a2:8c:95:97:93:0b:9f:0f:d7:d9:53:62:44:69:fa:50:fb:24:
59:f9:8e:2d:ee:1d:72:13:32:09:2d:62:88:0a:55:78:f4:ad:
3a:85:40:c7:dd:57:e1:3c:c1:40:a1:d2:11:7e:eb:ca:c1:0c:
f2:8e:0b:72:bd:f5:13:ab:33:4b:ca:05:14:09:26:78:ca:9c:
fa:d6:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:25 2026 by rpki-client