Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HO0WJjIA4JiQEtx1rbN-JIa6S2k.roa
File: HO0WJjIA4JiQEtx1rbN-JIa6S2k.roa (raw, json)
Hash identifier: CLLaj3omTB0Cgds5vStCw0221cMkqOZIEt3s30xWCV0=
Subject key identifier: 1C:ED:16:26:32:00:E0:98:90:12:DC:75:AD:B3:7E:24:86:BA:4B:69
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11110F4E8C48871F527AAD5FEE1D073EE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HO0WJjIA4JiQEtx1rbN-JIa6S2k.roa
Signing time: Tue 06 Oct 2026 11:54:46 +0000
ROA not before: Tue 06 Oct 2026 11:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219289
IP address blocks: 79.175.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:10:f4:e8:c4:88:71:f5:27:aa:d5:fe:e1:d0:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 6 11:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ced16263200e0989012dc75adb37e2486ba4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:fe:24:5f:33:f1:8d:7a:ac:21:d1:7a:84:
39:bf:85:46:6e:39:45:3f:14:5e:12:95:94:52:1c:
04:6f:a3:e8:36:42:b4:92:4e:5a:5f:62:f2:23:29:
ec:53:fc:d4:32:b8:e3:5e:ec:a7:19:87:18:cd:c6:
33:90:3d:22:93:2b:da:7c:db:bb:b4:31:02:6f:6a:
e5:e1:72:7a:8d:11:6f:77:05:dd:6e:60:1a:16:1a:
a9:4f:f8:98:41:1e:6b:2a:aa:13:19:95:bc:6a:20:
0a:88:52:2a:2b:b1:78:a6:3c:a9:fd:c3:58:23:03:
f9:78:af:35:fe:f4:95:62:26:75:ac:15:14:5b:08:
0f:e7:51:7a:33:53:1d:88:54:60:15:df:78:c1:a8:
50:99:9a:56:5c:ef:b5:c2:8e:2f:ba:4e:0e:82:1b:
3a:9b:d1:37:50:9b:7f:a3:8d:eb:9d:2d:a6:01:09:
85:c7:75:0c:b7:a8:4a:ab:4b:f1:f0:ac:7b:eb:ad:
40:2c:64:0c:17:8a:a2:a4:2c:d1:d0:fb:bb:64:5e:
89:22:52:49:05:af:22:7c:fc:55:d2:06:fb:d0:80:
8f:d9:20:df:f1:44:ca:09:50:e3:05:4e:d5:38:db:
f2:ae:5c:df:15:fe:98:54:8d:f7:8e:35:1e:4d:a3:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:16:26:32:00:E0:98:90:12:DC:75:AD:B3:7E:24:86:BA:4B:69
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HO0WJjIA4JiQEtx1rbN-JIa6S2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
Signature Algorithm: sha256WithRSAEncryption
64:05:7f:6e:a9:fe:75:73:3e:72:07:ab:b7:49:16:82:51:21:
27:da:a6:4e:36:a5:7b:85:99:39:eb:1e:c1:e8:3c:25:75:40:
98:27:98:e1:92:de:50:69:40:cf:77:60:10:b5:92:b2:93:5c:
66:e4:dc:c1:ff:c8:f8:89:72:1b:d7:0d:c1:5e:ed:a0:3e:8b:
09:c1:e8:22:1e:2b:75:77:a8:77:ab:02:d0:64:a6:73:0f:da:
07:eb:74:8c:4e:e1:b4:e9:da:35:08:da:1e:5b:64:4b:e8:d7:
d5:15:1f:69:52:f6:a5:db:c1:f5:34:6f:f3:d9:ca:92:4d:17:
aa:14:f3:bf:fb:91:dd:67:7e:fb:e8:03:02:b6:24:04:2f:3d:
3b:12:e7:9d:5a:33:85:06:cf:e6:ed:3c:a4:c1:b0:67:f0:75:
ee:41:d0:ec:41:64:48:45:6a:ef:b9:41:4a:bb:59:b9:75:76:
60:84:02:b3:2d:40:e0:a8:a1:83:d4:36:6e:3d:3e:3b:ef:7d:
55:2c:73:32:c4:a0:55:26:e6:55:a7:65:46:e0:1f:db:38:cb:
a9:79:26:d3:d9:2f:71:d5:52:12:19:0a:ad:12:9e:8f:6b:90:
0e:6c:0c:e4:a1:2a:a0:11:bc:9e:41:44:11:7a:37:1f:73:bb:
fa:82:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:33 2026 by rpki-client