Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_m2XWvXtDnEL_ZSBc1CdBga_9rw.roa
File: _m2XWvXtDnEL_ZSBc1CdBga_9rw.roa (raw, json)
Hash identifier: 6C9UqFTC1uiLpUbOCfQYrTYwye0/uLQmhkkNEcCeKYo=
Subject key identifier: FE:6D:97:5A:F5:ED:0E:71:0B:FD:94:81:73:50:9D:06:06:BF:F6:BC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0C9443BF0DFF04420ECFEA3F27CC22E16
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_m2XWvXtDnEL_ZSBc1CdBga_9rw.roa
Signing time: Tue 22 Sep 2026 13:18:07 +0000
ROA not before: Tue 22 Sep 2026 13:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.164.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:44:3b:f0:df:f0:44:20:ec:fe:a3:f2:7c:c2:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 13:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe6d975af5ed0e710bfd948173509d0606bff6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:d7:a9:b2:4f:fb:14:7c:b3:d6:ad:8b:39:
68:d6:c8:e1:80:c4:57:27:ff:29:3b:a1:cb:bf:b7:
77:ec:63:d3:65:0e:69:43:7a:f6:82:66:44:24:ac:
3f:b2:d6:5b:8a:66:79:d2:b4:80:17:34:76:64:53:
bf:a4:03:84:42:08:b8:4e:c6:60:d0:8b:56:eb:6a:
63:6f:d9:e6:ee:ac:b6:29:92:ba:da:b9:33:5a:c2:
ae:d2:19:8f:27:aa:b3:e8:80:17:a5:07:7f:96:ac:
e2:f9:e8:ac:a7:2e:b9:ac:07:75:8d:93:72:17:ae:
8f:c8:cb:3f:dc:12:10:21:f7:9b:73:59:98:18:26:
c7:16:ec:2e:e5:7c:8c:47:02:4b:dc:57:43:48:ff:
0b:95:9f:18:4a:4f:69:da:6d:6e:2b:bc:59:de:f3:
de:98:b0:05:86:44:01:e8:ad:46:fd:37:6c:12:9d:
61:46:17:6b:26:29:52:77:76:83:ed:d0:3b:99:71:
d9:86:86:62:ad:d9:3d:ae:60:c5:5e:f8:d4:91:1d:
b9:26:38:fc:58:37:44:d6:33:d1:8a:8c:26:ed:64:
dd:fa:3d:a4:3f:93:25:21:7b:2f:06:10:95:82:e0:
93:9e:36:19:bb:76:95:f3:45:e4:f6:0a:44:0a:e6:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:97:5A:F5:ED:0E:71:0B:FD:94:81:73:50:9D:06:06:BF:F6:BC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_m2XWvXtDnEL_ZSBc1CdBga_9rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.148.0/24
188.255.164.0/24
188.255.198.0/24
188.255.247.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
82:df:32:60:e9:1e:eb:72:69:d5:73:85:56:a0:32:c7:6f:bd:
57:7f:5a:8c:f9:0e:3b:73:b7:66:e9:4b:d4:8f:65:89:61:c3:
e7:a2:57:52:7e:f0:81:a3:3c:28:0d:6f:d7:67:49:2e:7b:0f:
a3:f2:26:05:92:9e:27:96:1d:14:70:ed:03:9a:f2:c2:68:92:
5a:e8:03:a9:3a:d2:84:dc:44:93:35:93:c6:9b:92:25:ab:29:
c7:53:86:b3:70:bd:f3:43:20:36:a2:c7:1c:c9:4f:fb:c8:56:
89:2b:c0:bd:55:05:d3:74:a7:98:ac:5f:f5:88:66:c9:08:45:
84:36:47:12:65:01:0e:a2:ae:b7:97:62:a5:9c:2a:de:af:37:
99:01:30:88:8e:fc:67:3a:b6:fe:3a:87:87:ff:30:b9:96:42:
98:76:5f:46:27:4f:8d:99:e0:76:63:88:b8:99:ad:70:53:4e:
3d:d1:77:aa:e5:88:f7:d1:47:96:fa:70:8d:02:75:cd:7c:aa:
76:c1:2e:13:94:89:d4:ee:db:1c:55:29:d7:b7:92:e9:c4:73:
35:ba:45:6c:99:44:f6:cf:a8:6b:2f:c5:14:d4:1d:f0:0d:1e:
f0:d7:38:1e:a5:e2:7b:d1:23:8e:47:f2:8b:9a:42:f2:7e:8e:
bb:ba:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:56 2026 by rpki-client