Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dgXLg_XkuzoKW-0NigOx9U_mIOk.roa
File: dgXLg_XkuzoKW-0NigOx9U_mIOk.roa (raw, json)
Hash identifier: h2+LWYxOSIXbgyZ4LDkW027ub4J4Lq+1yR/WkmatgwI=
Subject key identifier: 76:05:CB:83:F5:E4:BB:3A:0A:5B:ED:0D:8A:03:B1:F5:4F:E6:20:E9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A07A79D8B69C1723DC8304D064791101C0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dgXLg_XkuzoKW-0NigOx9U_mIOk.roa
Signing time: Mon 07 Sep 2026 06:06:40 +0000
ROA not before: Mon 07 Sep 2026 06:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402970
IP address blocks: 188.255.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:79:d8:b6:9c:17:23:dc:83:04:d0:64:79:11:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 06:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7605cb83f5e4bb3a0a5bed0d8a03b1f54fe620e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:d7:56:65:70:2f:97:04:09:49:3a:34:6d:
fc:fe:2d:ec:e7:ef:94:0f:ce:7a:db:58:92:e6:bf:
79:de:45:69:80:79:d5:eb:6a:4e:16:26:58:77:0d:
9e:93:30:c0:d1:52:35:f4:d6:52:fd:58:86:ce:54:
f1:5c:ef:f3:87:14:68:08:14:eb:5a:a8:a4:5e:b3:
62:d3:8d:af:d7:d5:86:87:98:72:4b:03:49:cd:d7:
7c:af:96:25:21:61:15:e1:06:86:3e:3d:f1:88:76:
51:f5:4a:5e:a1:f9:48:cd:a7:b4:74:10:c0:d7:a9:
0e:7b:67:1d:fb:76:ed:e3:92:8e:ea:7a:54:47:39:
30:a4:e1:d6:e8:2e:4b:4d:c9:b8:83:f3:52:3f:df:
31:85:45:96:8d:6e:4f:d7:3f:41:25:e1:28:b3:98:
46:4b:8e:e8:95:63:71:a4:af:6d:5b:c3:2f:67:e1:
0c:cf:12:87:6e:f9:4f:ab:11:2f:d1:84:da:aa:14:
79:b0:c2:74:2c:5d:59:83:86:db:bd:47:f1:cd:e6:
f0:81:08:0f:35:80:bb:cb:28:92:39:70:3c:40:d1:
45:ac:2d:6e:79:9a:31:46:f6:78:1c:4e:71:1d:dd:
80:28:bf:6c:fb:92:48:a2:f2:79:10:a9:a3:bb:c6:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:05:CB:83:F5:E4:BB:3A:0A:5B:ED:0D:8A:03:B1:F5:4F:E6:20:E9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/dgXLg_XkuzoKW-0NigOx9U_mIOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.249.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:3d:3c:5b:a6:c3:16:1c:ed:bc:68:98:b4:c8:5c:03:3a:bc:
37:c4:43:dd:c7:12:12:a8:c8:e1:64:6f:94:56:9a:60:c6:9f:
f4:41:23:10:a3:ad:d2:a4:4a:c2:d6:2d:f1:c9:a1:e8:a1:e0:
26:42:3b:2a:1d:7d:b0:0f:a0:aa:6f:55:18:d0:11:78:36:b2:
1f:93:28:a7:3d:f4:f6:18:79:09:06:47:71:8a:b4:21:31:93:
95:49:22:44:23:81:32:4e:dd:e8:cd:f1:04:11:98:b5:b2:aa:
32:a3:97:55:1c:07:d5:a4:f2:67:17:fc:3d:2e:f1:26:c6:97:
f5:46:a9:75:68:9b:90:96:6c:03:05:c0:74:32:a4:4b:a3:f8:
3a:f1:3e:01:d8:6a:0f:e9:77:d0:71:f3:3e:74:1b:5d:45:65:
f9:33:e1:54:b8:0d:4f:f5:98:7c:bc:d5:6e:90:29:ba:b0:bd:
51:41:b6:86:16:a0:8c:b9:00:e9:86:17:9f:16:98:b0:6e:c0:
b9:b2:d0:44:00:21:13:10:73:87:66:a7:e4:90:c2:d2:a3:6a:
84:dd:e2:07:3e:02:15:9f:53:78:e2:73:61:10:78:e4:d6:c2:
9e:2a:6f:f4:d5:75:23:7e:42:7c:09:12:9e:62:c4:df:7e:a9:
f7:59:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:13 2026 by rpki-client