Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iFYIsHzg8EZLpvSHBwuGtN_vPJI.roa
File: iFYIsHzg8EZLpvSHBwuGtN_vPJI.roa (raw, json)
Hash identifier: pj4p7jFQNHtYlTneRizxe5RfVEZg8Ibwp0BlftTsqBQ=
Subject key identifier: 88:56:08:B0:7C:E0:F0:46:4B:A6:F4:87:07:0B:86:B4:DF:EF:3C:92
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D1FAEBF3664571D9CAB7E26EA1FEE1F93
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iFYIsHzg8EZLpvSHBwuGtN_vPJI.roa
Signing time: Tue 24 Mar 2026 11:50:39 +0000
ROA not before: Tue 24 Mar 2026 11:50:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402047
IP address blocks: 79.175.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ae:bf:36:64:57:1d:9c:ab:7e:26:ea:1f:ee:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 24 11:50:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=885608b07ce0f0464ba6f487070b86b4dfef3c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:1d:ac:74:c6:34:fa:a6:ba:0b:62:50:83:
89:85:33:89:a5:8d:92:90:dd:49:a8:da:2a:55:17:
90:6a:ca:dc:d4:5d:ed:96:34:94:44:71:78:80:6d:
be:88:80:ec:3a:3a:ae:18:ac:cd:c5:eb:04:54:86:
06:24:f2:3f:25:64:79:d3:74:39:13:52:dc:d2:76:
02:26:56:d7:1f:5f:ad:c1:e1:e3:ef:e1:01:a4:d9:
58:a3:58:f8:63:6d:e2:e8:07:89:3e:59:5c:c0:f6:
b2:2e:08:46:ef:dd:84:17:af:cb:10:46:f3:07:38:
4a:c7:cb:fb:88:6b:03:86:0f:02:63:b8:2d:47:39:
3d:d6:b0:ec:9e:e1:fe:bf:18:ad:62:d7:9b:6d:5f:
69:57:53:98:c2:46:40:79:df:d6:ec:53:e9:1a:64:
73:2c:7a:92:43:9d:f1:81:26:85:3f:50:34:22:5d:
75:b9:8d:b0:bf:22:31:42:f2:6b:fa:ac:bf:7b:ca:
88:39:96:d0:7a:63:ab:da:23:80:8c:a8:3e:f0:5d:
56:3a:5c:41:f2:bc:21:79:95:e4:c1:2e:c4:5f:aa:
b6:84:9c:b2:88:d2:ba:07:49:ee:94:4a:b5:10:94:
0e:94:cc:e2:29:a4:1e:f8:48:e2:0c:d4:b2:05:3b:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:08:B0:7C:E0:F0:46:4B:A6:F4:87:07:0B:86:B4:DF:EF:3C:92
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iFYIsHzg8EZLpvSHBwuGtN_vPJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3a:29:2f:c3:77:e8:2f:e8:d0:50:a8:67:f8:7f:36:06:31:
97:60:cb:f5:ec:37:b9:6e:f0:96:52:91:7e:cc:51:23:f8:2d:
d5:99:dd:61:06:5f:e5:f1:e1:7c:9a:9b:b7:24:b4:7f:b5:2e:
8b:4f:b6:22:9e:9c:b9:b0:8d:97:40:eb:17:78:70:cd:2d:b5:
2f:48:38:8f:a1:42:7a:da:b2:3a:80:1c:93:17:cf:6f:99:75:
10:da:94:9b:51:69:de:08:42:a6:7f:10:27:f8:42:9e:be:88:
71:bf:c8:07:90:54:cd:73:ac:3b:40:b0:4a:c7:a3:3d:d6:d4:
5e:af:4e:5d:e2:27:ff:9d:bc:c9:a6:c4:d3:57:e9:e8:74:2a:
89:f5:f9:ab:6f:ef:48:64:6f:87:5c:cd:be:15:a0:f8:56:79:
84:4c:59:e6:8d:c5:0d:ec:84:83:eb:b5:9f:9c:41:51:25:cb:
4b:a0:47:b3:20:3a:cb:b4:93:db:57:b9:9e:31:9c:15:15:a0:
6b:fe:ee:63:20:27:c9:bb:a7:06:ea:1d:e2:88:87:17:0f:ff:
17:a0:7a:9c:30:45:d1:8b:93:c5:b9:e9:ca:66:c7:4a:18:32:
ce:fd:5f:8d:eb:8b:36:7d:fc:c1:02:93:da:20:d0:4b:d1:46:
86:ec:f4:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0frr82ZFcdnKt+Juof7h+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMzI0MTE1MDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODU2MDhiMDdjZTBmMDQ2NGJhNmY0ODcwNzBiODZiNGRmZWYzYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqscdrHTGNPqmugtiUIOJhTOJpY2S
kN1JqNoqVReQasrc1F3tljSURHF4gG2+iIDsOjquGKzNxesEVIYGJPI/JWR503Q5
E1Lc0nYCJlbXH1+tweHj7+EBpNlYo1j4Y23i6AeJPllcwPayLghG792EF6/LEEbz
BzhKx8v7iGsDhg8CY7gtRzk91rDsnuH+vxitYtebbV9pV1OYwkZAed/W7FPpGmRz
LHqSQ53xgSaFP1A0Il11uY2wvyIxQvJr+qy/e8qIOZbQemOr2iOAjKg+8F1WOlxB
8rwheZXkwS7EX6q2hJyyiNK6B0nulEq1EJQOlMziKaQe+EjiDNSyBTvIGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhWCLB84PBGS6b0hwcLhrTf7zySMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvaUZZSXNIemc4RVpMcHZTSEJ3dUd0Tl92UEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT692MA0G
CSqGSIb3DQEBCwUAA4IBAQAKOikvw3foL+jQUKhn+H82BjGXYMv17De5bvCWUpF+
zFEj+C3Vmd1hBl/l8eF8mpu3JLR/tS6LT7Yinpy5sI2XQOsXeHDNLbUvSDiPoUJ6
2rI6gByTF89vmXUQ2pSbUWneCEKmfxAn+EKevohxv8gHkFTNc6w7QLBKx6M91tRe
r05d4if/nbzJpsTTV+nodCqJ9fmrb+9IZG+HXM2+FaD4VnmETFnmjcUN7ISD67Wf
nEFRJctLoEezIDrLtJPbV7meMZwVFaBr/u5jICfJu6cG6h3iiIcXD/8XoHqcMEXR
i5PFuenKZsdKGDLO/V+N64s2ffzBApPaINBL0UaG7PTu
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:34 2026 by rpki-client