Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A_fK6T8mpqDUpzZA60iaq-lAFoQ.roa
File: A_fK6T8mpqDUpzZA60iaq-lAFoQ.roa (raw, json)
Hash identifier: AH/F+8BNPENS7naxOUGMef7lq/rHbZ0JyFi1rW2H+fs=
Subject key identifier: 03:F7:CA:E9:3F:26:A6:A0:D4:A7:36:40:EB:48:9A:AB:E9:40:16:84
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A13A4613398CDAE5BBF10F13B250B8A47E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A_fK6T8mpqDUpzZA60iaq-lAFoQ.roa
Signing time: Wed 14 Oct 2026 11:57:13 +0000
ROA not before: Wed 14 Oct 2026 11:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 178.219.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:46:13:39:8c:da:e5:bb:f1:0f:13:b2:50:b8:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 14 11:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03f7cae93f26a6a0d4a73640eb489aabe9401684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:47:92:a1:5a:5e:cb:6f:d4:b5:7e:e1:44:
5d:a1:75:b4:5b:3a:63:5b:71:aa:b4:16:47:26:73:
0f:d5:72:0b:02:62:45:4c:55:0f:8f:07:bc:ac:59:
1d:ff:47:5a:13:06:c5:f7:71:32:cd:ae:10:81:bb:
a0:65:70:03:f7:2c:ba:c3:ec:40:50:5d:b0:06:2d:
7f:0d:23:57:91:fd:dc:bd:21:69:86:d3:e3:81:63:
56:b0:65:de:71:6d:a4:43:48:95:3c:97:d3:08:f3:
ff:32:64:71:ec:59:5a:be:88:24:0b:a1:fb:f1:30:
78:be:a3:fc:1a:db:c9:33:e0:11:98:f9:be:28:5b:
89:26:16:28:31:1d:a0:14:7d:e9:2c:00:d0:74:da:
21:8b:3d:c8:18:df:62:26:59:38:80:49:4b:18:8d:
4a:84:29:24:40:9e:7c:8d:58:80:80:7b:80:20:11:
da:cf:4c:d5:c9:25:dd:70:68:92:54:00:d0:e1:2d:
6d:03:89:c2:5e:76:32:d8:0c:16:11:3f:12:32:93:
ef:8e:30:4c:a6:42:79:0c:6d:dd:1b:dd:fe:0b:66:
ce:d0:dc:20:23:6b:cc:7d:d3:a5:cf:b5:fa:19:73:
29:6f:a8:f5:d7:c4:a9:4e:62:27:04:9d:72:dc:ad:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:CA:E9:3F:26:A6:A0:D4:A7:36:40:EB:48:9A:AB:E9:40:16:84
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/A_fK6T8mpqDUpzZA60iaq-lAFoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.1.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1e:9a:fe:77:b7:7c:5c:cf:09:f4:98:64:37:cf:5a:a8:76:
a4:7e:3c:5f:f2:60:19:c0:e9:4f:9e:ee:69:50:e6:98:95:fa:
2e:a6:c7:56:f1:93:18:df:60:88:2f:11:d8:68:a4:1c:98:10:
65:75:aa:98:6f:cb:09:d2:37:6a:c2:21:9c:52:a1:02:0b:6a:
df:49:d1:a3:3a:aa:ca:43:2e:b8:75:74:83:69:e1:cb:66:8f:
81:c1:99:fe:3c:6f:b1:94:59:3a:cb:ee:54:7d:54:36:3a:61:
ba:d7:33:eb:b5:e0:5d:67:ea:95:7c:dd:c6:9a:0e:c1:a5:cc:
d6:7e:da:95:cc:06:11:35:38:2a:1a:fc:5f:7a:2c:fc:58:bd:
e9:75:99:1f:83:f0:38:d0:1f:f5:26:f6:d3:23:7a:14:4d:f9:
79:ea:e6:c6:c1:f0:72:b9:b8:40:b8:0e:82:21:65:91:8f:82:
34:9b:56:36:90:9b:67:4d:c9:03:75:a0:ab:58:06:bf:0f:ce:
97:e1:9f:b9:64:cc:87:c6:84:df:d4:bf:a4:77:ed:e0:0e:cf:
8c:b4:94:e4:ab:43:f7:ef:c0:ba:ca:b7:7b:d0:c5:2c:1e:7d:
b5:4e:e2:43:7a:7c:5e:7e:13:d2:9f:a2:59:1d:a8:65:26:e7:
3c:a7:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:34 2026 by rpki-client