Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-x3tOTk7NxFlr-brBl3EYHKP0b0.roa
File: 1-x3tOTk7NxFlr-brBl3EYHKP0b0.roa (raw, json)
Hash identifier: geBnPQ8BgW86rin21myS4IsB+dEs3GaOuDzhBBEqlr8=
Subject key identifier: FB:1D:ED:39:39:3B:37:11:65:AF:E6:EB:06:5D:C4:60:72:8F:D1:BD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0DD57D059702932570417FE67B2A5F93A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-x3tOTk7NxFlr-brBl3EYHKP0b0.roa
Signing time: Sat 26 Sep 2026 10:51:54 +0000
ROA not before: Sat 26 Sep 2026 10:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40929
IP address blocks: 188.255.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:57:d0:59:70:29:32:57:04:17:fe:67:b2:a5:f9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 26 10:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb1ded39393b371165afe6eb065dc460728fd1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:f8:ee:6c:2f:7b:38:1c:b0:0f:60:af:b7:
fa:3c:4f:35:bb:aa:2b:9b:9d:dd:9b:b4:a1:d0:06:
44:ca:c7:b0:f8:33:6d:db:62:b0:89:fe:1a:bf:89:
8d:4b:ef:2e:11:d6:56:34:53:17:b1:61:40:86:83:
9c:e5:d8:fd:92:b0:b8:a3:d5:a2:90:0f:5f:a1:b2:
66:e3:90:88:64:8e:96:1f:ef:50:5e:5f:26:09:dc:
23:7e:75:93:93:16:8d:c1:69:6c:79:ed:2b:88:4f:
d3:9d:81:cb:84:e3:ee:8b:92:c8:31:e9:05:11:36:
a8:ca:cf:3d:f0:1c:6e:a8:4a:0c:51:49:d6:f8:a0:
37:7c:39:c4:75:cd:b4:60:84:8a:d1:0f:3a:40:95:
37:42:fa:30:54:a0:30:2c:b4:a3:d1:ed:b7:fc:9e:
ee:ab:c9:30:42:a5:20:ea:ae:c0:2a:09:f7:25:77:
ff:f5:5a:45:5d:46:7a:c1:10:72:a8:c1:24:0a:0c:
a1:e8:a8:eb:c5:e5:bf:38:7f:c6:9e:47:ff:4f:17:
29:83:83:f6:45:27:a7:c4:09:2c:6c:57:be:95:0e:
e5:b7:d8:9f:89:61:ee:95:61:8e:87:61:bb:de:5c:
3a:fc:48:ea:20:e9:ef:39:12:e5:93:22:39:d5:01:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:ED:39:39:3B:37:11:65:AF:E6:EB:06:5D:C4:60:72:8F:D1:BD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-x3tOTk7NxFlr-brBl3EYHKP0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:09:95:b7:3b:73:f0:e3:cf:a2:64:8a:94:fb:57:89:09:5a:
0f:6a:37:70:40:a4:f8:78:ab:61:83:3a:d1:82:84:8f:82:99:
6d:63:f6:79:11:34:99:1f:7a:34:05:b4:47:4a:5f:ea:f5:a3:
4c:d4:dd:f9:f8:44:1b:63:79:1c:05:0f:2e:ca:75:45:3f:3e:
2a:a5:cd:6b:ff:81:e7:dc:b4:f1:19:47:ae:de:a0:f2:77:88:
3a:8c:66:73:63:b7:b1:27:0d:e0:f5:8c:40:5a:6b:2b:25:6e:
e2:fe:63:4a:41:4a:aa:b3:93:c1:e3:5a:d6:25:1a:16:25:a8:
70:e8:e1:aa:8d:fd:67:54:22:f4:52:e5:7d:00:53:09:1c:2b:
be:53:8b:4f:0a:24:9d:87:2b:93:96:8d:69:4f:03:d9:37:12:
d9:0e:f6:a3:4b:fe:34:68:dd:1a:1c:11:e8:21:bd:2d:1d:49:
74:4e:4a:3a:0e:99:63:8a:67:67:ac:f5:2c:f0:cc:0c:44:7c:
3c:35:03:71:75:5d:9d:15:23:12:90:9a:5b:24:d9:90:f4:11:
9a:9b:54:97:4f:85:b9:b2:59:94:9c:43:38:fa:8f:cf:99:f2:
34:a4:60:ce:75:8e:f5:d1:b4:4f:b5:57:0f:97:90:41:3f:d9:
84:ef:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:50 2026 by rpki-client