Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_jjtrrFhyYONcx3cauUGp_KtkeI.roa
File: _jjtrrFhyYONcx3cauUGp_KtkeI.roa (raw, json)
Hash identifier: UM4S5Vow5GJj7t/fS49QP/iuMkfjNOy0tjQOR9j6pTw=
Subject key identifier: FE:38:ED:AE:B1:61:C9:83:8D:73:1D:DC:6A:E5:06:A7:F2:AD:91:E2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D7179C1DAD8EABDA44F12D43AC92A6373
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_jjtrrFhyYONcx3cauUGp_KtkeI.roa
Signing time: Thu 09 Apr 2026 09:01:38 +0000
ROA not before: Thu 09 Apr 2026 09:01:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401856
IP address blocks: 212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:79:c1:da:d8:ea:bd:a4:4f:12:d4:3a:c9:2a:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 9 09:01:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe38edaeb161c9838d731ddc6ae506a7f2ad91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:b2:78:c5:06:f1:e8:04:53:2e:08:c1:c9:
6f:df:5b:a1:41:15:45:ab:c9:f0:95:19:67:d8:a4:
29:9c:27:57:b1:9c:06:9a:46:50:fc:bf:45:50:e9:
00:ea:82:30:56:dd:27:79:65:00:2b:3d:28:4b:72:
bd:1a:87:51:e9:3a:67:88:0f:57:b6:ed:b4:38:7f:
12:6f:70:46:fd:22:d0:4f:99:70:68:1a:ae:48:59:
a7:99:ca:59:b5:be:ce:67:1a:38:a1:d2:8f:6e:f2:
d1:26:80:07:57:4d:8d:83:5b:7c:1e:23:37:ae:66:
d5:47:f4:e1:e1:71:88:dd:4d:98:c0:17:92:bd:c5:
fc:53:da:7d:e6:42:88:57:c2:6c:bc:ea:44:6d:13:
94:0b:74:af:e7:98:71:88:53:08:80:6e:33:27:65:
fe:5f:50:12:7c:66:63:a1:da:b1:b2:9a:4e:e9:40:
da:f4:da:a7:8b:ca:09:a2:05:8a:74:5d:ec:99:16:
73:dc:8b:63:f6:53:91:a3:41:75:81:2d:55:15:23:
1d:54:c7:5f:b8:59:b2:f4:27:d5:84:88:3f:a4:ba:
d9:80:e7:0a:f7:b6:74:d8:41:d1:d8:c2:c2:9e:6a:
54:67:e7:06:4d:09:59:f3:c0:ef:16:7b:d5:5f:9d:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:ED:AE:B1:61:C9:83:8D:73:1D:DC:6A:E5:06:A7:F2:AD:91:E2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_jjtrrFhyYONcx3cauUGp_KtkeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:15:d3:d2:71:1c:87:cb:d3:94:42:2d:4d:80:bd:d4:7e:80:
d1:25:1e:e0:b3:ef:2a:ec:90:47:7c:2a:a4:12:e2:0d:4d:ff:
9c:80:e0:4e:e9:f2:84:98:c1:e1:25:6f:02:8d:eb:a1:f4:62:
b8:d4:3d:91:44:44:4c:46:6b:04:0d:ec:2b:25:5c:67:e6:ce:
ab:fc:41:3f:b5:0f:42:02:32:e7:58:76:d2:8c:1b:6a:db:cb:
de:10:d9:c0:22:8d:b6:01:9d:ca:12:a3:7d:b6:a5:22:d6:b2:
40:ea:85:c8:61:6e:65:f5:09:fe:91:65:74:9d:0a:a9:8e:dd:
78:4d:8e:ec:c6:f2:86:10:6a:a2:74:79:11:83:ce:bd:db:5f:
9d:78:8b:9e:8d:df:3b:24:7d:80:12:83:6e:a9:43:29:52:3e:
d3:b9:09:be:bf:e2:bc:85:fc:f8:d9:2c:2d:d5:72:09:62:4f:
31:37:fe:eb:32:fd:51:f0:d7:cd:6b:81:b7:99:ea:5d:63:03:
37:c7:0d:24:25:5a:5a:17:be:f2:da:0d:05:fb:55:d8:fb:38:
9c:fd:72:8e:99:e4:f0:d2:ed:b6:56:09:50:90:76:3e:b8:21:
a9:98:53:81:2e:d0:71:de:3a:c8:be:21:e5:e3:1d:e9:8c:2e:
84:ab:ed:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1xecHa2Oq9pE8S1DrJKmNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNDA5MDkwMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTM4ZWRhZWIxNjFjOTgzOGQ3MzFkZGM2YWU1MDZhN2YyYWQ5MWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iiyeMUG8egEUy4Iwclv31uhQRVF
q8nwlRln2KQpnCdXsZwGmkZQ/L9FUOkA6oIwVt0neWUAKz0oS3K9GodR6TpniA9X
tu20OH8Sb3BG/SLQT5lwaBquSFmnmcpZtb7OZxo4odKPbvLRJoAHV02Ng1t8HiM3
rmbVR/Th4XGI3U2YwBeSvcX8U9p95kKIV8JsvOpEbROUC3Sv55hxiFMIgG4zJ2X+
X1ASfGZjodqxsppO6UDa9Nqni8oJogWKdF3smRZz3Itj9lORo0F1gS1VFSMdVMdf
uFmy9CfVhIg/pLrZgOcK97Z02EHR2MLCnmpUZ+cGTQlZ88DvFnvVX50ZGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP447a6xYcmDjXMd3GrlBqfyrZHiMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvX2pqdHJyRmh5WU9OY3gzY2F1VUdwX0t0a2VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EULMA0G
CSqGSIb3DQEBCwUAA4IBAQAfFdPScRyHy9OUQi1NgL3UfoDRJR7gs+8q7JBHfCqk
EuINTf+cgOBO6fKEmMHhJW8Cjeuh9GK41D2RRERMRmsEDewrJVxn5s6r/EE/tQ9C
AjLnWHbSjBtq28veENnAIo22AZ3KEqN9tqUi1rJA6oXIYW5l9Qn+kWV0nQqpjt14
TY7sxvKGEGqidHkRg86921+deIuejd87JH2AEoNuqUMpUj7TuQm+v+K8hfz42Swt
1XIJYk8xN/7rMv1R8NfNa4G3mepdYwM3xw0kJVpaF77y2g0F+1XY+zic/XKOmeTw
0u22VglQkHY+uCGpmFOBLtBx3jrIviHl4x3pjC6Eq+2m
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:44 2026 by rpki-client