Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3d6sX-FbrxgunVEYKNdBckSwf8w.roa
File: 3d6sX-FbrxgunVEYKNdBckSwf8w.roa (raw, json)
Hash identifier: oVmkmU0Gf0KDG/wCYq3Uofds7YHHcecbANUhChbIziU=
Subject key identifier: DD:DE:AC:5F:E1:5B:AF:18:2E:9D:51:18:28:D7:41:72:44:B0:7F:CC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C6F7B3CA0D8E0DDA84E77C48C670EF152
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3d6sX-FbrxgunVEYKNdBckSwf8w.roa
Signing time: Wed 18 Feb 2026 06:41:13 +0000
ROA not before: Wed 18 Feb 2026 06:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 178.219.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:7b:3c:a0:d8:e0:dd:a8:4e:77:c4:8c:67:0e:f1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 18 06:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dddeac5fe15baf182e9d511828d7417244b07fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:ae:8f:ea:a6:e0:ce:2e:88:d7:61:8d:f2:
67:0e:24:2f:5f:8e:77:ff:8d:12:76:4c:0d:31:6a:
a8:5d:e8:e5:86:53:26:5c:99:e2:71:08:57:34:f9:
cf:74:eb:4a:92:4e:0d:8e:a6:b1:f4:d6:0a:4e:93:
ba:50:f0:4b:74:96:21:50:df:5f:a1:1a:3c:86:d7:
ba:35:87:fa:46:ae:da:a0:42:02:ce:d2:a5:29:53:
43:0b:70:8b:5d:fd:81:fa:b9:c9:ac:c1:77:3e:84:
d9:82:ab:04:5c:ee:fd:3b:5c:4d:79:73:cb:b3:4e:
97:34:28:03:7a:d7:13:47:36:94:5f:30:16:f7:ca:
13:f3:77:a5:af:e3:6a:c1:c7:64:77:be:8b:37:1b:
f4:af:9e:a5:55:25:28:9a:71:b1:8e:d8:39:ba:d2:
71:6e:55:64:5d:0c:8d:08:a9:8c:52:71:60:58:c0:
00:2f:b7:fe:ba:34:6d:99:43:dc:ea:9f:bd:ee:14:
68:1c:1d:44:03:44:75:ba:40:ff:86:9a:98:c7:1e:
29:c8:52:4c:08:f6:2f:cf:14:91:4d:a5:c2:16:17:
33:ee:24:34:f2:5e:57:64:2f:58:3e:53:2f:47:01:
c0:69:25:cc:81:36:66:4c:9f:8d:2f:8c:44:6b:6a:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:AC:5F:E1:5B:AF:18:2E:9D:51:18:28:D7:41:72:44:B0:7F:CC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3d6sX-FbrxgunVEYKNdBckSwf8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0a:b6:2b:2d:ad:6f:3f:13:83:e9:98:c7:3e:c1:22:98:ab:
69:6f:52:02:0a:dd:da:78:0b:ec:c4:5a:aa:6d:e2:c7:8e:3e:
c3:59:89:3c:3d:0e:26:a6:0e:4e:05:d8:c7:82:9f:03:25:51:
f3:88:80:e8:76:88:b6:76:95:97:ee:77:84:78:93:70:eb:14:
71:1f:98:86:31:bd:d3:28:b6:92:30:7f:a4:82:44:03:eb:08:
08:e8:3f:fb:f6:ee:0f:2c:a4:22:3d:ff:69:59:b9:29:25:13:
c1:0d:04:dd:83:ad:fb:f2:af:2e:7d:8d:94:41:87:8b:65:9e:
3e:df:f4:d5:9b:46:87:47:d6:ce:5e:07:9b:a6:1a:29:56:3c:
db:99:f1:5e:77:99:a7:42:32:6d:35:a0:cd:e3:f0:ac:f7:d5:
40:30:35:cf:90:2d:e3:e4:2b:26:c0:19:58:98:6c:11:fd:46:
60:1d:22:17:a3:ea:18:8e:f7:71:01:a9:00:a1:f6:ee:e1:b1:
2b:0d:99:09:4a:45:1d:2b:39:30:23:cb:f3:d5:2b:0d:79:3d:
c7:ef:63:89:be:f9:72:37:85:0a:07:6e:74:64:7c:43:e3:66:
70:4c:34:9b:c5:27:f2:67:74:75:d6:2d:50:b0:89:c3:91:c5:
e1:af:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:38 2026 by rpki-client