Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f73dBtfpu1QoyYEtCYkd3uNXCfw.roa
File: f73dBtfpu1QoyYEtCYkd3uNXCfw.roa (raw, json)
Hash identifier: GM68F/+8S/tqRCigv8lcanJMNP91R5AaQQ386dK+lhE=
Subject key identifier: 7F:BD:DD:06:D7:E9:BB:54:28:C9:81:2D:09:89:1D:DE:E3:57:09:FC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019FA7260535F53CFBA8EDAFAD01CE72A45B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f73dBtfpu1QoyYEtCYkd3uNXCfw.roa
Signing time: Tue 28 Jul 2026 05:15:14 +0000
ROA not before: Tue 28 Jul 2026 05:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.175.105.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.219.7.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:26:05:35:f5:3c:fb:a8:ed:af:ad:01:ce:72:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 28 05:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fbddd06d7e9bb5428c9812d09891ddee35709fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:00:58:c4:a6:5e:fd:69:50:84:b2:94:48:
78:1e:eb:4d:75:e1:f5:e4:bf:ad:37:50:4a:21:40:
90:b7:5c:98:59:0e:cd:d5:f4:22:6f:b6:2c:6b:d7:
33:0a:2e:34:03:40:2e:76:11:91:ba:43:d4:6d:86:
c2:35:13:b1:bb:7e:35:96:83:6c:5d:4b:fd:64:31:
93:d7:f2:42:38:a7:cd:3a:18:54:5b:2d:f5:a9:dc:
6e:58:a2:9b:5b:be:30:7d:91:f0:5b:3a:e9:23:0e:
16:79:85:7f:9f:ef:e2:48:1c:f4:4f:5b:12:a1:02:
8a:bc:94:52:dd:b5:cf:91:5f:da:26:d5:b4:28:83:
87:34:f5:3a:6f:75:84:e4:70:a7:21:0f:0b:df:aa:
24:58:f1:a5:51:1f:e2:dd:9a:2d:fc:fd:62:23:47:
86:90:93:28:a0:71:59:7c:8b:18:07:2e:da:32:2f:
4c:ad:8d:5f:05:6d:78:c7:91:13:38:dd:be:b9:df:
46:f8:a9:be:fa:2a:2e:03:11:28:02:09:d7:a5:32:
2c:61:12:92:21:a7:fa:6b:57:83:f5:c8:56:f8:fc:
43:68:9d:0d:de:89:ee:1b:5b:36:e5:36:38:6f:6d:
79:3e:bc:2f:ea:f2:cc:ae:e4:02:06:47:35:f8:36:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:DD:06:D7:E9:BB:54:28:C9:81:2D:09:89:1D:DE:E3:57:09:FC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f73dBtfpu1QoyYEtCYkd3uNXCfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
81.18.48.0/24
109.121.44.0/24
178.219.4.0/24
178.219.6.0/23
185.47.91.0/24
188.255.198.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:93:f9:4f:a0:92:c3:b6:8c:99:87:e7:c3:5c:a9:cb:05:6a:
91:25:f3:d4:6f:66:aa:e2:cf:81:fa:56:10:71:ed:04:84:ab:
11:27:80:a5:dd:09:59:7d:14:95:c4:13:c5:48:d0:18:71:0c:
40:9f:2b:8f:38:86:10:1e:ba:49:ad:aa:a7:1e:83:cb:98:a1:
ba:c4:0a:e6:ba:bc:f3:0a:ed:5d:cb:a4:a5:62:21:a3:55:af:
3b:41:1a:62:d2:6e:0e:8b:50:77:bf:c0:b3:cf:58:1b:ce:cb:
a4:99:31:0f:7c:61:e8:cc:70:07:96:43:5c:b7:09:8f:8f:b8:
c1:c9:d6:83:e7:72:d6:73:4c:76:35:44:ed:5b:43:e2:67:3d:
0c:21:e8:2e:82:e8:55:3a:71:a1:a9:c8:7a:6a:ca:93:f2:6c:
55:6f:8e:f8:13:94:8c:54:30:63:2f:2d:6d:0f:8e:bd:56:20:
c2:7b:3f:ca:17:87:9d:db:a6:1a:36:56:59:4a:b5:1d:f3:42:
30:a0:96:c5:15:ff:c0:9d:b0:f9:f8:de:63:1a:a8:31:c8:84:
75:f5:81:02:8c:f5:74:72:25:50:01:37:48:59:40:aa:87:93:
ba:dc:9a:cc:6d:0b:3e:de:a6:be:6f:e6:69:81:72:79:08:c6:
98:fd:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:49 2026 by rpki-client