Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M7dp7k5G-GNvjCk13A6elQfvG6Y.roa
File: M7dp7k5G-GNvjCk13A6elQfvG6Y.roa (raw, json)
Hash identifier: iq3bDJJMFZFxkZejg5n/cG/Xby1K0Ry8hPAlvFJs2Qw=
Subject key identifier: 33:B7:69:EE:4E:46:F8:63:6F:8C:29:35:DC:0E:9E:95:07:EF:1B:A6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11A94924024C9CCF52E7949F4A5360FDB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M7dp7k5G-GNvjCk13A6elQfvG6Y.roa
Signing time: Thu 08 Oct 2026 08:15:06 +0000
ROA not before: Thu 08 Oct 2026 08:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 79.175.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:94:92:40:24:c9:cc:f5:2e:79:49:f4:a5:36:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 8 08:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b769ee4e46f8636f8c2935dc0e9e9507ef1ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:2e:d7:e9:0a:43:6d:70:3c:4a:b9:9a:fa:
2a:ef:7e:81:fc:4c:22:c8:ca:f6:c3:b3:96:5c:e7:
94:28:86:b9:03:d5:52:3f:89:04:9b:7d:e5:13:c6:
3f:21:69:a7:a3:39:9c:31:35:d0:79:8d:f4:8c:e1:
f6:53:01:d1:ed:23:3b:7e:8b:77:71:31:d2:f9:14:
aa:96:a2:00:89:68:2f:de:38:4d:96:19:15:1e:da:
0a:54:10:b7:fe:04:86:b2:9a:b5:fa:89:a4:03:16:
f0:0b:bf:51:0e:16:7d:91:7d:51:09:63:88:e5:c9:
13:2f:d4:b9:3a:11:33:c1:b6:61:dd:08:bf:79:86:
33:0e:d6:bd:af:58:f6:ca:0f:0f:06:f0:df:d5:a2:
78:96:a0:0d:5d:bc:52:51:c3:4f:d1:fe:fa:e1:e5:
6c:cb:d1:82:7a:49:50:ed:6b:43:cd:03:6d:09:e0:
3d:77:e3:39:5d:72:75:1a:93:ed:5c:2b:73:70:94:
b1:f5:43:60:3a:f1:7e:f6:70:e8:74:f7:0f:1e:ef:
7d:b9:f5:f7:39:0b:ef:ba:02:74:9e:ef:f2:89:cc:
a7:3f:78:95:6b:1a:9d:51:d6:f2:95:88:58:b1:6c:
77:cb:e9:00:80:3f:50:18:e9:f3:40:24:ab:fa:50:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:69:EE:4E:46:F8:63:6F:8C:29:35:DC:0E:9E:95:07:EF:1B:A6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M7dp7k5G-GNvjCk13A6elQfvG6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.64.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4f:cb:9c:52:9e:bd:e5:18:77:6f:04:17:76:8d:3e:5a:af:
ce:d2:91:94:da:1a:dc:f4:74:cd:48:17:45:64:f0:28:ff:10:
f4:95:8f:93:0f:45:71:b4:67:9c:97:ac:7a:24:ce:a4:11:7b:
db:2d:6f:0a:5e:bf:e6:52:9b:ab:47:28:25:05:2c:93:62:c8:
d6:1c:f0:61:45:5e:78:8a:03:84:58:42:a3:62:4f:49:3d:8a:
f0:b7:ca:1a:06:b0:d9:fa:27:a1:29:07:e0:52:c9:87:42:a3:
b3:88:43:94:bd:54:ef:b3:85:8d:18:b6:ba:c7:87:df:77:bd:
37:fa:5b:4b:58:16:a0:e3:f8:5c:01:41:3d:68:8a:1d:64:68:
e3:ee:6e:af:00:08:59:25:46:76:cc:29:d4:ec:bd:45:36:61:
40:b6:e6:7f:35:90:e0:7f:3a:7b:19:ff:54:fa:bd:1e:4a:73:
43:f2:a0:01:7a:b5:56:51:3f:99:1f:03:f5:1f:b7:e8:aa:07:
ac:ba:ab:2c:9e:9e:9f:85:b3:c5:7b:a1:84:0e:53:59:2f:5b:
ad:c5:7d:1a:ea:02:ce:4b:ee:41:f9:9c:cd:e6:b3:89:47:a0:
3a:4e:e7:5b:6b:1f:5a:74:a1:74:07:25:4f:72:1a:a4:ba:29:
69:d1:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:31 2026 by rpki-client