Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e_rM0Yb9Kfk7HiLX_htUrRU68Ro.roa
File: e_rM0Yb9Kfk7HiLX_htUrRU68Ro.roa (raw, json)
Hash identifier: zf2riEP+a4r+PfMlTlRA7NdcyDAorq77NnHdGkZb2ec=
Subject key identifier: 7B:FA:CC:D1:86:FD:29:F9:3B:1E:22:D7:FE:1B:54:AD:15:3A:F1:1A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019CFAC5920482E7F0478A2E75192EFCAFFA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e_rM0Yb9Kfk7HiLX_htUrRU68Ro.roa
Signing time: Tue 17 Mar 2026 07:49:37 +0000
ROA not before: Tue 17 Mar 2026 07:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 178.253.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:c5:92:04:82:e7:f0:47:8a:2e:75:19:2e:fc:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 17 07:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bfaccd186fd29f93b1e22d7fe1b54ad153af11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:19:ec:95:cb:a0:a7:3f:5c:04:ab:a7:ea:
38:89:e2:1c:95:d8:8f:bd:ca:80:b2:3f:07:56:2b:
77:2f:fb:f2:3b:fa:f8:46:21:a4:ab:1a:2a:67:9b:
2e:c9:f1:8e:93:44:14:43:52:b7:bd:ee:88:8a:ce:
5b:fb:d8:c6:cb:65:da:f5:34:cb:8d:4a:16:9d:86:
1c:87:98:87:9d:c3:7a:16:57:70:ed:bc:2f:d3:f7:
09:ff:e5:c4:08:fc:be:e1:8b:15:38:58:2f:28:c0:
1a:28:55:0e:f6:25:4f:51:5e:47:52:e6:f0:09:61:
e7:38:d7:cb:c1:d6:18:0f:0e:65:8f:6c:f9:9f:66:
ed:c1:74:67:a6:70:62:96:4e:43:cf:f3:4e:3c:97:
58:81:d4:9d:4e:19:d8:68:73:54:f8:ae:5b:67:74:
99:6a:cf:65:b4:2d:72:34:ed:18:cc:4a:73:f2:36:
17:a4:03:cc:c2:ce:ed:29:bc:03:3a:2e:1b:b7:4d:
0e:75:8a:44:3f:61:4c:38:a2:ec:ec:4a:aa:ee:dc:
77:17:dd:90:f8:01:07:5d:ba:55:80:0f:4b:0a:df:
a4:ee:6a:a1:7d:58:d6:a5:90:fb:76:55:bf:f1:6e:
ef:67:de:a7:45:4e:36:7d:5b:6a:2d:62:54:df:9c:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:CC:D1:86:FD:29:F9:3B:1E:22:D7:FE:1B:54:AD:15:3A:F1:1A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e_rM0Yb9Kfk7HiLX_htUrRU68Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:b1:19:98:e2:48:15:32:3d:fa:0f:30:f8:ae:37:74:54:
20:16:5b:64:ca:05:1c:85:0d:65:65:20:05:57:68:1e:ee:0e:
95:88:04:74:c6:9c:79:09:08:88:66:d1:13:19:b2:d7:5a:58:
3c:39:d9:05:40:58:b1:df:8f:ea:b7:44:89:3f:58:0b:2c:7c:
9e:cd:54:83:d7:8f:7d:f6:58:4a:ef:a3:48:f9:5d:ed:fb:19:
b8:2a:1e:ac:2d:19:20:29:84:9a:45:84:ef:6a:67:7b:47:a6:
4d:23:54:25:1f:28:e6:ee:1a:b7:9a:f5:e6:b6:55:5b:5d:19:
37:76:d0:7e:af:7f:f8:0e:48:6a:0f:60:03:37:f9:fa:b2:b6:
08:0a:8e:b6:f1:5c:45:8b:53:53:8d:6c:dc:fd:92:3b:2f:3f:
d8:7f:29:4c:30:94:39:c5:35:d4:fd:dc:40:d8:8d:42:c1:8c:
71:7a:4c:06:b6:5c:42:da:5b:ac:37:3c:0b:60:fa:1d:74:3d:
9e:7d:22:49:16:86:13:e7:b9:aa:ca:82:d0:23:61:67:73:d8:
1a:6b:bf:00:ce:03:22:54:be:ba:46:19:36:a0:60:f6:fe:66:
99:63:65:d9:f3:b2:3c:83:c0:33:58:58:7a:32:44:06:1b:d1:
15:c9:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:50 2026 by rpki-client