Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OXVrwNfHVBsQ2x5cDROw6Fzt_j0.roa
File: OXVrwNfHVBsQ2x5cDROw6Fzt_j0.roa (raw, json)
Hash identifier: x/77RKsScShUJwQltb9C//cjIpBOReYE/w31JkT/WQY=
Subject key identifier: 39:75:6B:C0:D7:C7:54:1B:10:DB:1E:5C:0D:13:B0:E8:5C:ED:FE:3D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A09E635F7B0CCFECAF9261403A4DD9606E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OXVrwNfHVBsQ2x5cDROw6Fzt_j0.roa
Signing time: Mon 14 Sep 2026 05:28:27 +0000
ROA not before: Mon 14 Sep 2026 05:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 79.175.105.0/24 maxlen: 24
188.255.193.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:63:5f:7b:0c:cf:ec:af:92:61:40:3a:4d:d9:60:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 14 05:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39756bc0d7c7541b10db1e5c0d13b0e85cedfe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:0c:3a:1c:50:31:2c:54:04:a9:aa:c5:8e:
56:70:92:bc:ff:4d:91:a0:3e:44:c6:51:40:42:7c:
01:c7:da:31:d6:01:13:80:25:a5:70:d8:99:0c:f8:
78:32:19:67:bb:ed:b6:e7:57:8d:e0:6d:4a:6d:cb:
91:1b:9e:30:61:dd:89:b1:f1:fe:fb:25:99:66:1c:
0f:c2:8c:2b:0c:f8:42:24:a5:52:d3:17:c9:9b:08:
24:2f:18:e8:73:c3:c4:bf:16:4d:ce:eb:0c:4e:2e:
28:f8:da:e3:82:b8:a7:25:f5:0b:68:a8:3d:1e:c3:
e4:6a:b0:01:16:41:de:4e:c1:ac:33:f1:ee:1a:ff:
bf:11:3d:74:ab:be:c3:27:cd:21:8e:f7:94:7a:12:
79:b3:55:79:0b:0e:16:46:f0:c1:ff:8e:bb:f9:a6:
81:4b:bc:a0:07:f0:4d:de:e7:ea:12:9b:38:0c:c2:
9d:1a:2e:3b:57:c9:49:dc:84:61:60:6e:78:ea:1a:
3b:99:44:5f:54:ba:99:3c:dc:15:d6:71:d0:7f:8e:
dd:dd:e5:cf:e8:84:ca:db:99:db:20:e8:31:5a:38:
ad:52:e9:e0:19:05:74:88:c1:ea:96:91:02:f3:22:
40:46:b3:eb:64:d3:03:8e:b7:5a:55:43:de:8d:8e:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:6B:C0:D7:C7:54:1B:10:DB:1E:5C:0D:13:B0:E8:5C:ED:FE:3D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OXVrwNfHVBsQ2x5cDROw6Fzt_j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
188.255.193.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:25:bb:7f:4a:61:ab:1f:0e:22:a1:5a:c8:90:de:6a:ae:ba:
18:14:16:cc:d6:13:d4:20:a3:79:b3:e5:aa:30:d8:04:7b:04:
ff:32:ee:fa:d6:39:1a:2c:fc:f1:82:1d:30:14:c0:1c:60:28:
0a:e1:5a:c6:25:e1:c6:00:12:c3:79:d6:42:92:55:34:09:e7:
d4:db:fe:f8:f9:72:22:50:eb:ab:5c:93:54:aa:93:48:10:8e:
3f:4b:99:7d:bb:30:b3:80:32:d0:ca:08:b8:c6:5d:90:6f:c8:
9c:90:dd:21:2d:d2:4d:1d:a1:8b:77:e8:0e:ce:aa:d0:24:32:
89:9c:85:59:00:98:ad:55:4b:b0:fd:86:be:64:83:ce:6c:53:
5f:34:3d:fa:da:80:93:66:9b:16:3c:8d:2b:25:38:0c:a4:0c:
49:dc:fd:ec:1c:e6:70:79:4b:84:8e:1e:ac:24:14:c3:98:6d:
d2:08:dd:18:82:f7:f8:17:b2:4d:62:4e:78:7d:0b:c9:89:d5:
b7:ed:d1:60:e6:be:a0:1f:d3:f2:e8:ad:f6:97:78:4d:21:e3:
88:7e:16:70:03:4f:b2:b5:d5:92:8c:9c:c7:3f:d8:ad:2e:86:
ff:a5:e5:5e:78:60:97:40:92:00:a6:63:ae:21:8e:54:ea:c7:
30:fa:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:01:16 2026 by rpki-client