Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EHGmnx3tDOnc-gsfB_tiR1ooBjI.roa
File: EHGmnx3tDOnc-gsfB_tiR1ooBjI.roa (raw, json)
Hash identifier: jjBB16jJz0gDvRLXl2ySQ4fGHREP0PWjP7azOQbn8ZY=
Subject key identifier: 10:71:A6:9F:1D:ED:0C:E9:DC:FA:0B:1F:07:FB:62:47:5A:28:06:32
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11A949153CA67B6002384CEE88C5C421E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EHGmnx3tDOnc-gsfB_tiR1ooBjI.roa
Signing time: Thu 08 Oct 2026 08:15:06 +0000
ROA not before: Thu 08 Oct 2026 08:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 109.121.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:94:91:53:ca:67:b6:00:23:84:ce:e8:8c:5c:42:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 8 08:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1071a69f1ded0ce9dcfa0b1f07fb62475a280632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:16:68:84:95:45:6a:41:06:7e:15:c6:bc:
bc:91:44:c7:1d:89:c9:f8:65:3c:ca:82:0f:44:d6:
07:9b:73:a0:53:b2:a3:15:0a:f2:f9:18:56:c8:22:
df:e5:cf:a4:60:c5:e1:f6:01:87:48:35:20:84:94:
b3:76:e8:85:fe:3a:1a:31:ce:5c:b7:b4:1d:e9:bf:
94:f7:47:1b:9e:6a:63:4b:87:f3:b7:41:c4:ca:03:
b6:3f:92:ed:03:aa:53:77:fe:28:c4:3f:01:fb:3b:
a7:b3:c4:a8:86:2e:62:e1:42:96:1a:fc:1d:40:5f:
ed:91:54:86:6b:79:ef:a6:3f:f7:1c:9f:27:0b:5e:
45:a4:94:c3:5a:0d:02:47:4f:ae:05:5a:91:a5:c9:
2b:6b:4d:fa:cd:79:50:4d:ab:2b:fd:b5:4a:30:c6:
f7:16:ed:bc:10:04:fd:8c:2a:bb:c5:7c:f4:86:9c:
60:32:da:7e:9f:a6:32:1d:b1:13:db:f5:fd:1f:55:
48:28:b7:a7:df:89:fc:fe:b8:28:44:30:ce:9f:6e:
a9:9d:a9:18:9e:1e:fd:30:cb:bc:e5:d0:19:e8:2b:
02:4e:5a:0c:72:1e:20:fd:40:a5:1e:31:ab:33:a3:
6a:12:b5:ce:b7:d4:c6:74:b2:46:09:b7:0e:ea:39:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:A6:9F:1D:ED:0C:E9:DC:FA:0B:1F:07:FB:62:47:5A:28:06:32
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EHGmnx3tDOnc-gsfB_tiR1ooBjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e0:21:5e:c9:84:ab:ca:93:c6:1e:75:3c:6e:29:21:e7:27:
5d:f9:d1:af:23:a4:c1:e9:5d:de:d0:93:b8:f7:2f:b3:72:59:
1a:97:1d:70:e4:50:54:20:de:52:95:20:2c:bf:ad:26:36:d2:
db:35:b8:75:ca:77:92:b6:e6:9f:52:6f:d7:90:25:19:0e:e5:
57:80:14:b7:4e:23:af:46:97:d0:ae:e9:2d:dc:06:e5:7c:47:
c8:86:17:9a:69:4f:f2:ee:f5:56:21:4a:9f:1e:01:d9:5f:b0:
ff:70:cc:4d:fb:2a:80:c9:cb:7a:bf:32:85:82:8a:19:18:a7:
28:11:6c:d3:d9:98:96:8e:68:f7:d3:e7:22:d5:dc:61:68:74:
05:80:9f:8b:62:18:0e:b9:bb:d9:ce:c6:6d:01:e0:07:34:4d:
25:49:c9:41:05:0d:77:d1:a8:0c:29:04:e5:67:a0:75:2e:7e:
27:af:20:93:02:4b:b5:5f:d3:b2:47:44:82:08:f8:7b:eb:50:
47:d9:8d:6a:07:7e:0c:49:f4:c5:e7:da:8e:3a:47:c8:ed:ab:
f4:86:12:01:35:15:5b:49:81:97:9b:c9:f3:18:32:fd:47:ea:
bd:c9:23:e5:4b:b7:90:b5:2f:8d:fd:3c:16:a3:e6:73:98:3a:
f4:46:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:33 2026 by rpki-client