Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bVdU-XFp_irGquoDoHHY4AQLUE4.roa
File: bVdU-XFp_irGquoDoHHY4AQLUE4.roa (raw, json)
Hash identifier: PKy9splYpl493l6QZniP7ZmZ2CeCaCPdcXvxJV96/Dw=
Subject key identifier: 6D:57:54:F9:71:69:FE:2A:C6:AA:EA:03:A0:71:D8:E0:04:0B:50:4E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0FC68F1392B9BA1C9B27EE64EBB31C49E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bVdU-XFp_irGquoDoHHY4AQLUE4.roa
Signing time: Fri 02 Oct 2026 11:38:50 +0000
ROA not before: Fri 02 Oct 2026 11:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 109.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:68:f1:39:2b:9b:a1:c9:b2:7e:e6:4e:bb:31:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 2 11:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5754f97169fe2ac6aaea03a071d8e0040b504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:16:e6:a1:ed:c1:b0:8f:ae:56:60:c9:0c:
7f:48:ba:ba:3d:36:ac:4d:cd:f4:96:75:a9:f8:41:
5f:53:3e:8c:2c:17:89:59:74:70:2b:e6:32:88:a7:
6f:66:20:16:c6:56:af:82:fa:ab:7f:3d:e0:db:a9:
77:53:57:7d:96:6f:b5:dc:20:a8:51:21:36:94:48:
af:83:bd:60:93:19:d1:24:34:cf:ce:2b:8b:8d:ef:
ac:97:8e:08:d6:d8:98:60:18:c5:a2:15:79:3d:fb:
89:8d:ee:ee:70:cd:dc:54:13:04:72:5f:fd:3b:6f:
35:9e:3c:4f:94:05:64:f9:e2:7d:6c:e1:5e:56:25:
c6:c9:e7:1d:f2:6e:16:56:c7:db:fa:d6:2a:6f:7a:
66:0f:36:1e:53:58:a4:8a:f8:27:26:d7:c2:ec:ed:
79:c4:21:fd:fd:8b:3b:7b:0d:8f:84:80:86:68:82:
37:c3:ee:05:fa:43:b2:85:bd:87:a8:0c:4d:72:e7:
1b:94:7b:0e:79:83:b0:22:68:08:83:85:f0:a8:fd:
91:b0:a8:58:3a:1e:6a:10:6e:81:1f:7e:f4:e3:94:
ee:1b:60:83:3d:5f:d2:d2:82:99:9e:68:21:7a:1e:
3d:15:44:ae:35:45:56:dd:e7:3e:b0:64:79:b3:8b:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:54:F9:71:69:FE:2A:C6:AA:EA:03:A0:71:D8:E0:04:0B:50:4E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bVdU-XFp_irGquoDoHHY4AQLUE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:93:72:03:02:db:6a:61:e9:a1:cf:f7:47:cc:f3:6e:73:b7:
22:4c:68:b6:40:39:75:0d:c2:a8:d2:e1:81:9d:cf:0f:37:cc:
fe:d5:1b:db:ff:4d:e4:74:ca:8c:56:92:75:ad:fd:72:44:b8:
8c:fd:eb:21:54:af:41:38:dd:bf:f2:77:77:16:1f:08:56:3a:
98:a4:2a:02:c6:77:e1:97:96:01:0d:9d:ef:cc:de:26:0f:75:
64:80:20:77:17:31:5d:01:94:36:ec:b6:4d:6d:07:61:11:65:
f2:11:d4:7a:96:fa:cd:34:a2:94:c5:0c:c0:10:aa:d5:9e:d6:
6a:96:bb:32:e3:ea:94:d8:a0:11:37:90:3e:5a:c8:37:5b:ad:
f2:6a:13:7a:89:a3:1b:c7:33:0a:6e:8a:cf:ae:2e:70:d8:be:
73:13:29:bc:13:66:44:d1:1a:a3:17:76:69:52:dd:a8:65:40:
58:be:d4:cc:f1:6d:b8:fe:e3:ab:35:65:ca:9b:a1:dc:f0:c3:
97:40:0f:cc:cf:fc:c7:d1:de:89:d1:1d:38:60:22:b8:a4:86:
2d:63:a9:dd:3d:54:ba:71:7a:3d:37:d8:1f:29:2b:0e:01:da:
88:03:4f:e7:1a:de:d1:aa:8f:a6:01:99:28:63:f2:22:43:a0:
ff:44:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:50 2026 by rpki-client