Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R9P6pT8dyMg7l3sz9I1SgivEpBU.roa
File: R9P6pT8dyMg7l3sz9I1SgivEpBU.roa (raw, json)
Hash identifier: wgns4/qVOAxuZA4DOqB5q+qvsZUCxKux/44QALFczv4=
Subject key identifier: 47:D3:FA:A5:3F:1D:C8:C8:3B:97:7B:33:F4:8D:52:82:2B:C4:A4:15
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DFBC7DDE55727F99436AD0404F5FBAC6E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R9P6pT8dyMg7l3sz9I1SgivEpBU.roa
Signing time: Wed 06 May 2026 05:34:32 +0000
ROA not before: Wed 06 May 2026 05:34:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 188.255.174.0/24 maxlen: 24
188.255.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:c7:dd:e5:57:27:f9:94:36:ad:04:04:f5:fb:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 6 05:34:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47d3faa53f1dc8c83b977b33f48d52822bc4a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:ee:24:67:92:aa:9e:d1:37:fb:f8:ff:c1:
cc:4f:9e:1d:a6:cf:67:6d:4b:0b:c5:13:f1:4f:25:
03:fa:d8:36:2e:f7:09:3d:0a:3a:9f:2b:aa:86:0b:
6a:1a:ff:d9:0f:fa:dd:21:86:d2:eb:25:0c:19:9c:
8d:85:23:25:40:d6:f0:04:d1:86:cb:8f:ff:71:21:
1e:a9:d0:d2:db:2c:11:2f:58:fd:29:cc:18:8e:89:
c0:10:44:78:47:c6:b4:81:79:00:31:9a:64:7f:28:
72:3c:c3:f5:b2:1c:22:76:a8:d7:61:fe:f9:f2:8a:
23:62:81:43:f2:1d:4b:c8:07:6a:3d:9f:70:6f:b7:
62:54:85:0e:5a:78:49:27:92:68:ef:f7:b8:f0:99:
3e:bc:89:1e:bb:44:3d:61:a2:9c:4f:c6:70:d8:ae:
55:b6:5d:98:c1:40:cd:75:c1:be:39:9c:44:d1:01:
03:6d:d6:8b:12:e8:4d:7e:95:d0:ef:62:7c:a9:34:
84:21:55:b2:a3:3e:ab:bc:39:49:f2:79:5a:8a:e8:
36:2a:af:32:a0:c4:70:5c:4f:89:0d:c4:ca:28:45:
b3:32:27:52:e7:3d:8e:52:0c:52:12:3b:ee:b2:78:
a1:96:9d:33:a0:dd:2f:9c:44:23:66:10:80:41:d4:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:FA:A5:3F:1D:C8:C8:3B:97:7B:33:F4:8D:52:82:2B:C4:A4:15
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R9P6pT8dyMg7l3sz9I1SgivEpBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:ff:6c:c7:4b:32:9a:2b:42:6e:4e:99:4c:1a:ba:73:1a:d8:
e7:99:05:17:12:b9:a7:cb:96:c3:ed:ae:7b:71:93:b8:b6:ec:
6e:f2:d8:cc:92:03:77:1a:e4:8f:cc:13:29:30:93:02:cc:17:
6c:e9:03:5a:3e:1b:d9:9b:02:0e:8a:4b:58:90:25:6f:f9:29:
97:65:0b:f1:7b:14:b4:00:bf:1e:e8:59:39:42:80:a6:f5:9f:
75:5a:89:10:82:e5:27:3f:37:8a:b3:53:3b:6c:aa:b5:cf:8a:
1d:64:c7:ce:51:8f:b4:c3:bb:43:48:a2:16:bc:bf:fb:e8:8e:
62:54:4e:70:f6:19:1c:99:19:7a:bd:d7:81:1f:44:42:a4:c8:
e3:04:f0:1f:ad:82:13:c1:8e:2c:af:e6:3b:14:0e:13:f8:1e:
cf:81:bd:3e:f7:0c:2b:7a:1a:33:6f:29:57:b2:89:e6:f6:a1:
15:3a:38:3c:18:1e:3e:ff:76:4d:51:64:f0:97:f0:94:7f:94:
06:c5:9a:ff:85:40:1d:93:f2:23:e9:1e:44:27:cd:c3:97:92:
08:f6:a4:ac:ae:26:75:e1:49:7b:74:05:be:09:6a:ae:51:61:
c9:07:89:91:0b:b1:37:f8:2d:75:06:b0:bb:ea:8d:9d:b5:c2:
73:2c:03:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ37x93lVyf5lDatBAT1+6xuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNTA2MDUzNDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2QzZmFhNTNmMWRjOGM4M2I5NzdiMzNmNDhkNTI4MjJiYzRhNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovzuJGeSqp7RN/v4/8HMT54dps9n
bUsLxRPxTyUD+tg2LvcJPQo6nyuqhgtqGv/ZD/rdIYbS6yUMGZyNhSMlQNbwBNGG
y4//cSEeqdDS2ywRL1j9KcwYjonAEER4R8a0gXkAMZpkfyhyPMP1shwidqjXYf75
8oojYoFD8h1LyAdqPZ9wb7diVIUOWnhJJ5Jo7/e48Jk+vIkeu0Q9YaKcT8Zw2K5V
tl2YwUDNdcG+OZxE0QEDbdaLEuhNfpXQ72J8qTSEIVWyoz6rvDlJ8nlaiug2Kq8y
oMRwXE+JDcTKKEWzMidS5z2OUgxSEjvusnihlp0zoN0vnEQjZhCAQdQuBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfT+qU/HcjIO5d7M/SNUoIrxKQVMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUjlQNnBUOGR5TWc3bDNzejlJMVNnaXZFcEJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvP+uMA0G
CSqGSIb3DQEBCwUAA4IBAQBr/2zHSzKaK0JuTplMGrpzGtjnmQUXErmny5bD7a57
cZO4tuxu8tjMkgN3GuSPzBMpMJMCzBds6QNaPhvZmwIOiktYkCVv+SmXZQvxexS0
AL8e6Fk5QoCm9Z91WokQguUnPzeKs1M7bKq1z4odZMfOUY+0w7tDSKIWvL/76I5i
VE5w9hkcmRl6vdeBH0RCpMjjBPAfrYITwY4sr+Y7FA4T+B7Pgb0+9wwrehozbylX
sonm9qEVOjg8GB4+/3ZNUWTwl/CUf5QGxZr/hUAdk/Ij6R5EJ83Dl5II9qSsriZ1
4Ul7dAW+CWquUWHJB4mRC7E3+C11BrC76o2dtcJzLAMg
-----END CERTIFICATE-----
Generated at Wed May 13 10:40:00 2026 by rpki-client