Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zE5N0PLcY7ZAPJFF5qYVFZvG9lU.roa
File: zE5N0PLcY7ZAPJFF5qYVFZvG9lU.roa (raw, json)
Hash identifier: mKgIwHvfCAfoUwq44TRowCLrMLOmmuFgkNdLUdoK8ec=
Subject key identifier: CC:4E:4D:D0:F2:DC:63:B6:40:3C:91:45:E6:A6:15:15:9B:C6:F6:55
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D09F207D14A5444751E86F8CB197DB7CC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zE5N0PLcY7ZAPJFF5qYVFZvG9lU.roa
Signing time: Fri 20 Mar 2026 06:32:29 +0000
ROA not before: Fri 20 Mar 2026 06:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 109.121.36.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:f2:07:d1:4a:54:44:75:1e:86:f8:cb:19:7d:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 20 06:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc4e4dd0f2dc63b6403c9145e6a615159bc6f655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:dd:3e:79:c9:e2:31:f4:53:b9:a4:09:53:
28:60:9c:28:30:7b:42:e6:ec:77:81:1d:70:dc:a2:
f5:31:51:54:dd:96:2e:9f:66:8d:76:55:74:04:54:
40:f1:41:85:d3:bc:5a:db:cb:76:e3:c6:a8:19:95:
0c:dc:12:e5:81:50:d8:0d:0a:b5:bb:be:0c:65:7b:
63:30:03:e1:7a:0e:7b:f3:8f:6d:ba:97:08:53:73:
f0:f8:ec:b8:c8:28:36:ac:22:e8:7a:6f:56:7d:28:
71:13:a3:c9:57:30:15:53:19:7c:08:72:ed:11:9a:
b1:c1:c9:7f:05:43:b0:2e:03:f7:26:35:3c:6f:a6:
69:6b:70:98:a1:e2:9f:8b:94:47:98:31:76:ac:3f:
7f:f1:cc:25:35:02:76:30:a4:b7:a5:75:7c:80:7a:
cf:c2:ee:91:1a:42:51:78:e8:50:e1:7c:ca:5c:8c:
08:a6:8e:30:9d:89:4c:96:92:3b:0a:e2:34:70:c9:
a1:42:bb:1e:41:ac:15:48:28:3d:bc:0c:d3:80:31:
44:2d:1c:b1:5a:07:78:65:71:9e:71:f2:f4:24:bc:
e7:73:b8:e5:08:24:e2:e4:e3:4a:b3:87:b7:8a:16:
02:8d:0e:77:85:cd:93:75:29:ff:34:b2:d4:0b:4a:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:4D:D0:F2:DC:63:B6:40:3C:91:45:E6:A6:15:15:9B:C6:F6:55
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zE5N0PLcY7ZAPJFF5qYVFZvG9lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d7:27:9e:49:45:27:6f:d5:79:ca:0f:28:6b:86:0d:8a:c2:
07:6c:34:ca:4d:f0:2b:95:15:78:4f:99:84:57:6e:09:a5:46:
77:9d:59:97:db:e9:25:e0:f8:ae:25:03:df:5e:59:30:3a:e9:
40:cd:55:04:eb:b5:b1:48:7a:2e:f1:12:ca:fb:e4:94:77:34:
85:1d:a2:02:2b:5d:0e:76:1c:5a:71:15:7f:fc:e3:cf:ca:d4:
d1:4c:e5:80:8e:ec:cc:7b:63:79:19:77:ba:20:d2:33:21:36:
b1:83:89:cb:5a:3c:e5:7f:30:24:b2:8e:45:07:7c:34:7b:99:
9f:01:de:84:6c:3e:4b:34:2b:d7:71:3c:70:2d:c5:72:16:18:
13:dc:9e:b9:c4:90:4b:73:a5:fc:c0:85:16:90:2f:bc:50:92:
3d:75:37:88:9d:f6:d1:b1:72:d2:90:70:e7:4f:f7:eb:fe:be:
8f:6f:e8:7f:22:95:41:39:2c:a1:a5:db:80:74:8d:43:35:ca:
a4:ff:27:a9:5e:1d:34:5f:8c:24:81:5f:0b:97:4e:78:b7:68:
21:a8:36:b8:62:8c:86:df:2b:a2:c9:3a:86:0e:54:02:ae:41:
d5:6e:3c:28:02:cd:eb:7c:cb:65:dd:e8:ef:f0:a9:f5:2a:e5:
34:b4:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:30 2026 by rpki-client