Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HTuIqicGmiMK1zSdcDkfsOpvSdw.roa
File: HTuIqicGmiMK1zSdcDkfsOpvSdw.roa (raw, json)
Hash identifier: 3+R6iyHQVzuhJH7syZYhSnk0xfAgu7Ea40gV0bn5pBs=
Subject key identifier: 1D:3B:88:AA:27:06:9A:23:0A:D7:34:9D:70:39:1F:B0:EA:6F:49:DC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0F24EB8825F2B0BA226C98715F4BAC522
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HTuIqicGmiMK1zSdcDkfsOpvSdw.roa
Signing time: Wed 30 Sep 2026 12:34:00 +0000
ROA not before: Wed 30 Sep 2026 12:34:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 188.255.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:4e:b8:82:5f:2b:0b:a2:26:c9:87:15:f4:ba:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 30 12:34:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3b88aa27069a230ad7349d70391fb0ea6f49dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:21:a9:02:07:5d:83:c6:e7:15:92:99:3e:
55:bf:78:24:7e:a4:96:6a:ad:1e:8a:25:55:c4:80:
48:e6:fb:6d:47:e0:2c:ea:ac:b9:bd:65:d5:c1:20:
da:98:38:a0:b0:1f:9a:2e:7a:dc:bf:87:65:60:43:
82:48:19:b8:60:aa:31:8d:48:87:71:38:a2:6b:47:
51:6c:df:ac:5d:86:f8:d8:3a:de:79:03:d8:a0:f2:
64:0f:7a:7c:ab:92:eb:7a:ef:03:6e:54:15:a1:9b:
94:3a:7c:10:bc:f4:dc:d1:77:31:df:bd:0e:0f:b3:
2a:0f:6c:d8:d6:13:04:95:54:83:93:47:99:17:87:
0a:c9:ea:29:ad:51:1a:c2:e3:05:b6:99:c5:70:f9:
03:95:76:f0:42:fb:43:6b:6e:1c:6b:5b:4b:db:69:
0f:0c:d1:25:b3:18:e2:c1:96:54:01:1c:8a:e4:67:
86:fb:52:a1:14:c8:fb:43:77:d4:cc:f0:17:c3:cd:
6d:b9:54:bb:83:b6:b8:94:66:64:52:c3:d8:0c:ed:
f4:a5:7a:ae:b7:04:2f:a8:49:00:f7:26:07:f6:61:
2f:1f:e7:04:5c:f7:30:05:9f:21:f2:17:47:3b:7d:
55:f8:83:f3:dd:15:58:93:a3:d2:56:2d:ce:cc:36:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:88:AA:27:06:9A:23:0A:D7:34:9D:70:39:1F:B0:EA:6F:49:DC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HTuIqicGmiMK1zSdcDkfsOpvSdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.136.0/24
Signature Algorithm: sha256WithRSAEncryption
77:17:1e:14:b1:38:dc:f7:d5:20:5a:f8:6b:e6:2c:55:60:29:
16:a9:48:d0:f4:d1:26:0c:41:e8:d8:d3:d4:b6:fa:72:3d:8a:
2b:22:48:a1:c8:80:96:0e:cf:6b:a3:68:b4:b7:e5:93:9d:d4:
c3:34:01:c8:9c:de:aa:14:83:89:06:29:04:3c:a3:e5:c1:ac:
6d:22:0b:f4:1e:d5:b1:cf:32:57:1e:47:44:03:72:1b:d9:8c:
7e:4b:a0:0c:e8:48:3d:1b:1e:d5:19:30:44:6f:7f:51:08:18:
48:64:b9:a2:78:69:7e:5f:7d:03:6a:a4:d4:6d:9a:fa:f0:1e:
8d:d0:3c:e3:80:49:1c:aa:f1:78:c8:2c:0b:fa:53:d2:8d:0c:
92:e0:e9:ca:1c:19:85:cb:71:93:03:a3:12:4a:5d:c6:34:e1:
68:88:5e:b8:4c:cd:2e:92:3a:81:d6:60:70:89:fb:99:84:76:
01:f4:98:fe:9e:26:1c:17:b1:05:41:b7:ea:fd:c5:70:28:a6:
d5:c9:2c:ad:9e:b3:e1:f4:75:1f:d4:1f:15:48:b3:8d:ce:4e:
ef:96:27:b2:c4:f8:e1:3f:8b:aa:bd:e5:ca:57:6f:70:90:3a:
56:52:7f:d6:b4:08:59:15:27:b8:75:8d:c7:dd:64:a8:af:b8:
20:46:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:53 2026 by rpki-client