Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/utnnEmCJyjgM_ZYoEwfXnDqxzXo.roa
File: utnnEmCJyjgM_ZYoEwfXnDqxzXo.roa (raw, json)
Hash identifier: g+x7c+c1JOP5Dv4edPaC2DMAYgLUuVMZUuO0mAzgC54=
Subject key identifier: BA:D9:E7:12:60:89:CA:38:0C:FD:96:28:13:07:D7:9C:3A:B1:CD:7A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DB91272EF998ADCD94DB213F6B1DC2200
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/utnnEmCJyjgM_ZYoEwfXnDqxzXo.roa
Signing time: Thu 23 Apr 2026 06:41:27 +0000
ROA not before: Thu 23 Apr 2026 06:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 188.255.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:12:72:ef:99:8a:dc:d9:4d:b2:13:f6:b1:dc:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 23 06:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad9e7126089ca380cfd96281307d79c3ab1cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:83:5d:97:5d:1c:c3:28:a5:66:09:da:8e:
e3:8f:ef:7e:2c:22:fe:f2:5f:3d:3c:de:4d:c1:45:
0e:f1:a8:8b:a9:4b:0b:d9:90:13:61:2f:4b:a0:80:
5b:0b:64:76:8c:b5:c5:11:bf:58:a8:77:98:0c:50:
18:bd:88:10:86:82:ec:b3:1a:7b:98:f4:2d:6f:ad:
0c:d6:7b:bc:31:fc:e6:51:79:a4:3d:b9:29:fe:1f:
fd:50:ad:c3:e2:c7:e7:f1:94:62:51:27:f9:52:1c:
a5:85:62:a7:a1:af:5b:1a:b0:45:63:cf:74:58:15:
36:13:fa:6b:9b:5a:db:91:f0:74:db:ff:36:34:36:
50:7e:fa:b5:45:53:43:5f:6e:76:ee:0e:2f:58:43:
a6:02:99:47:86:f5:23:33:17:f9:47:7a:79:bd:9d:
eb:3e:cc:f2:e6:02:94:5a:90:0f:55:fb:12:1d:c0:
c2:9c:6c:37:fe:44:ec:60:ba:6b:48:ea:d8:b3:68:
25:30:83:e5:8d:a3:3c:83:9a:c7:11:6d:4e:85:1a:
5b:89:01:96:ff:6f:6e:58:6f:d4:82:17:1a:4e:15:
39:19:7b:81:4b:47:a1:90:88:cc:98:8c:c7:80:fd:
f5:5c:e2:12:a1:50:5d:c8:21:8b:fb:42:2f:f8:aa:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:E7:12:60:89:CA:38:0C:FD:96:28:13:07:D7:9C:3A:B1:CD:7A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/utnnEmCJyjgM_ZYoEwfXnDqxzXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:8a:50:43:ce:af:bc:03:4c:ac:61:34:1a:c8:62:7f:b6:
0b:fe:ae:eb:dc:47:22:ec:31:71:67:be:82:d7:90:1f:70:69:
cb:78:19:7c:00:14:0d:a8:ec:ff:14:15:e4:f6:da:ff:99:e3:
e2:dd:33:51:55:fc:9b:70:17:d1:f7:ee:89:99:4b:56:32:56:
67:f0:3a:a3:72:46:6e:e4:8e:56:b1:05:1e:1f:42:ab:a5:c3:
46:49:5e:d4:dc:86:1c:bd:64:e7:5e:26:dc:7c:f6:6b:93:33:
d2:37:83:ed:5b:35:0a:0a:84:e1:2a:76:68:fd:ef:87:db:fb:
35:d4:60:1c:07:8c:e0:c8:4e:72:1a:ae:50:4d:c3:b8:80:0d:
51:d8:47:13:c0:fa:ab:38:ed:ac:cc:24:50:bb:e5:d5:8c:2c:
9c:70:25:07:9f:9f:1b:93:9c:15:b6:52:e5:9b:56:2d:7b:b0:
bb:dd:b6:f7:ec:d0:c9:8c:9a:12:c3:7d:bf:1e:ae:65:6a:bf:
1a:c4:1b:c2:f0:29:42:1d:67:ac:7c:8a:da:5b:89:31:66:0d:
ff:12:43:42:4c:a5:9f:4f:23:08:03:04:e0:5f:66:37:0d:16:
e4:92:fa:04:98:33:56:7f:27:e1:33:c6:47:7b:05:29:a9:ce:
36:33:27:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ25EnLvmYrc2U2yE/ax3CIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNDIzMDY0MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQ5ZTcxMjYwODljYTM4MGNmZDk2MjgxMzA3ZDc5YzNhYjFjZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbqDXZddHMMopWYJ2o7jj+9+LCL+
8l89PN5NwUUO8aiLqUsL2ZATYS9LoIBbC2R2jLXFEb9YqHeYDFAYvYgQhoLssxp7
mPQtb60M1nu8MfzmUXmkPbkp/h/9UK3D4sfn8ZRiUSf5UhylhWKnoa9bGrBFY890
WBU2E/prm1rbkfB02/82NDZQfvq1RVNDX2527g4vWEOmAplHhvUjMxf5R3p5vZ3r
Pszy5gKUWpAPVfsSHcDCnGw3/kTsYLprSOrYs2glMIPljaM8g5rHEW1OhRpbiQGW
/29uWG/UghcaThU5GXuBS0ehkIjMmIzHgP31XOISoVBdyCGL+0Iv+Kq96wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrZ5xJgico4DP2WKBMH15w6sc16MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvdXRubkVtQ0p5amdNX1pZb0V3ZlhuRHF4elhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+kMA0G
CSqGSIb3DQEBCwUAA4IBAQBNIIpQQ86vvANMrGE0Gshif7YL/q7r3Eci7DFxZ76C
15AfcGnLeBl8ABQNqOz/FBXk9tr/mePi3TNRVfybcBfR9+6JmUtWMlZn8DqjckZu
5I5WsQUeH0KrpcNGSV7U3IYcvWTnXibcfPZrkzPSN4PtWzUKCoThKnZo/e+H2/s1
1GAcB4zgyE5yGq5QTcO4gA1R2EcTwPqrOO2szCRQu+XVjCyccCUHn58bk5wVtlLl
m1Yte7C73bb37NDJjJoSw32/Hq5lar8axBvC8ClCHWesfIraW4kxZg3/EkNCTKWf
TyMIAwTgX2Y3DRbkkvoEmDNWfyfhM8ZHewUpqc42Mye+
-----END CERTIFICATE-----
Generated at Wed May 13 09:09:11 2026 by rpki-client