Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nfsg0VOiOq5Xtp9SQfu_pmGCxKY.roa
File: nfsg0VOiOq5Xtp9SQfu_pmGCxKY.roa (raw, json)
Hash identifier: rRCET5UKl6pcsv1W8phQ0kerDliMBzc+YC5ebnoKyYI=
Subject key identifier: 9D:FB:20:D1:53:A2:3A:AE:57:B6:9F:52:41:FB:BF:A6:61:82:C4:A6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F7E1A83B48FED1170C008EE00717B6FEE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nfsg0VOiOq5Xtp9SQfu_pmGCxKY.roa
Signing time: Mon 20 Jul 2026 05:58:14 +0000
ROA not before: Mon 20 Jul 2026 05:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 109.121.36.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:1a:83:b4:8f:ed:11:70:c0:08:ee:00:71:7b:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 20 05:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dfb20d153a23aae57b69f5241fbbfa66182c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:ff:70:54:99:3d:15:89:4d:fb:b5:8e:fc:
60:e6:7d:84:47:ab:e0:da:75:f2:79:f5:74:78:0d:
e5:36:0e:b1:8e:4e:98:e7:02:76:42:54:85:99:2c:
a6:94:ee:40:56:7a:bd:9e:0d:84:db:ff:50:b9:e3:
07:67:4c:85:4f:f9:2b:2b:e0:d3:23:f2:73:51:64:
fc:a1:d6:41:71:1c:6f:21:9c:ac:26:87:0b:ac:9e:
af:4b:ff:ea:1c:ef:ae:33:42:23:97:d2:8f:c6:13:
27:bb:76:51:c3:95:e4:03:90:a7:45:18:1b:2c:ea:
b4:fd:2b:2b:e6:21:38:c6:54:31:8c:5d:f9:01:12:
cf:8d:e6:fd:39:8b:42:67:33:df:dd:dc:d7:07:1b:
19:4e:7e:5b:fd:39:8d:c4:fc:c9:83:81:13:c9:73:
82:eb:30:10:0e:a4:85:99:72:4b:47:e6:f7:ea:26:
78:e3:dd:2b:85:f8:57:0c:d2:9c:29:5b:d0:50:1e:
91:35:48:a2:78:b6:71:6f:0a:4a:35:ed:9b:b1:c5:
f6:6d:f0:fb:42:55:9f:05:f0:e3:0d:f0:bb:db:b4:
c4:7f:4a:60:e7:62:a5:25:01:1c:3a:84:8d:16:39:
44:9d:17:77:b0:fb:7c:ff:8a:98:5e:56:28:e5:a1:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:20:D1:53:A2:3A:AE:57:B6:9F:52:41:FB:BF:A6:61:82:C4:A6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nfsg0VOiOq5Xtp9SQfu_pmGCxKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:be:75:84:dd:2b:bf:50:12:4c:04:3e:d2:0c:1e:16:7b:e6:
5c:1c:08:8c:24:f4:3a:c1:14:8d:38:36:ed:c4:5f:88:aa:5e:
a5:be:1e:09:fc:30:a6:b6:15:39:84:78:2c:ba:03:92:23:da:
b6:89:66:ea:df:95:9a:b9:8c:d4:9a:f8:69:a2:3e:23:c2:4c:
b8:c0:cc:db:c4:b6:fa:1a:e2:7b:af:fc:e1:a2:72:93:f8:ef:
5f:ca:c1:14:37:e4:7f:2c:fd:79:77:33:fd:62:d3:84:76:82:
42:c6:7e:59:45:51:a5:d8:c4:9f:e2:2c:13:b7:d7:f6:61:a9:
e2:b2:52:7f:30:7f:4d:a6:9e:b4:9b:20:72:40:14:3c:c5:81:
1e:39:ca:83:df:69:71:1a:a6:6f:6a:ea:73:a5:33:bf:f1:f2:
f6:12:15:f4:63:f1:7f:67:da:29:3f:72:0c:75:9e:d4:a3:5d:
61:2c:46:1b:50:89:41:2a:3d:3a:42:7e:06:0b:a6:11:43:a7:
5a:28:65:c6:85:80:72:e6:8b:86:d2:01:16:bb:5d:c0:be:ac:
3a:da:b2:a5:4a:7c:67:a7:a9:5a:8b:79:29:e7:2f:ba:32:c9:
f5:03:87:9f:07:11:ee:24:0c:cd:51:8e:cf:c2:75:4f:cc:de:
5f:6f:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:01 2026 by rpki-client