Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jblgkwLCHx0sVwShskjPWYtPN04.roa
File: jblgkwLCHx0sVwShskjPWYtPN04.roa (raw, json)
Hash identifier: WKcU1KUd2CErCnVlAiIGeD5nvslI+uaSVeW5BSX1xrI=
Subject key identifier: 8D:B9:60:93:02:C2:1F:1D:2C:57:04:A1:B2:48:CF:59:8B:4F:37:4E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E9BEDC089EA551DF0E1BD1598F5ACDE07
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jblgkwLCHx0sVwShskjPWYtPN04.roa
Signing time: Sat 06 Jun 2026 07:55:10 +0000
ROA not before: Sat 06 Jun 2026 07:55:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.175.103.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.227.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:ed:c0:89:ea:55:1d:f0:e1:bd:15:98:f5:ac:de:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 6 07:55:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db9609302c21f1d2c5704a1b248cf598b4f374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:0a:75:7e:82:4e:5f:b1:43:16:67:99:3a:
8f:63:3c:d8:08:bc:47:40:76:9a:8d:ab:2e:5f:3b:
03:27:87:41:af:71:f8:1a:e0:20:d5:30:f6:a9:26:
81:42:d4:07:aa:da:1c:02:8d:68:f4:60:9d:eb:b3:
56:d2:29:90:20:55:42:71:43:51:c9:4d:7e:57:ee:
8b:7f:24:b3:0e:50:ac:81:95:64:bf:96:81:96:53:
be:70:6a:d2:72:09:6e:4f:0f:c9:a8:cb:3f:7d:13:
b4:2f:d3:37:35:21:9c:c4:f4:ca:43:11:4a:57:44:
4d:04:d2:b9:1a:cf:22:da:ef:de:e1:ae:94:59:ad:
e2:42:33:15:7e:66:42:7c:d2:15:24:83:7f:d4:ea:
c9:64:01:dc:b3:1c:2f:f0:c5:f4:d2:54:7e:29:b7:
58:83:5f:47:29:12:07:1f:db:5a:26:2d:bb:2d:2d:
dc:bf:da:54:bf:44:1f:4c:a8:5c:a2:9d:d5:fe:81:
73:0a:3a:92:ea:b3:13:78:92:29:18:fc:c9:c3:8d:
58:4f:3d:55:bc:c9:13:de:79:ec:52:4f:4f:c5:6d:
3a:a5:46:b9:49:08:ab:ef:16:2b:a1:6f:b4:05:5b:
dc:e1:85:e9:a3:81:00:90:4b:50:7c:4a:ea:5c:2e:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:60:93:02:C2:1F:1D:2C:57:04:A1:B2:48:CF:59:8B:4F:37:4E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jblgkwLCHx0sVwShskjPWYtPN04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.103.0/24
81.18.48.0/24
109.121.44.0/24
178.219.6.0/24
178.253.227.0/24
185.47.91.0/24
188.255.198.0/24
188.255.236.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
89:22:4c:0c:13:27:56:b4:f8:66:ad:b8:57:cf:c6:93:f5:59:
86:15:83:cd:7d:bf:a4:4e:53:45:bb:28:5e:8b:32:4b:7c:03:
65:cc:21:d7:cd:9e:73:01:74:d1:bb:c7:dc:7c:d8:88:6c:5f:
44:20:c3:48:c6:e7:11:e3:90:c9:70:74:f0:e5:4b:f0:71:b2:
69:ea:48:8d:f0:96:6a:f9:f7:43:ff:a1:87:01:c6:e7:0a:4d:
08:51:87:96:e5:54:57:28:ef:7b:38:37:61:1a:9e:ed:15:ba:
70:a4:38:34:87:34:d8:22:b7:94:02:d7:a4:e4:9c:02:14:9b:
3e:ad:f1:35:b6:dc:09:32:62:29:ae:55:7e:ee:97:34:89:f0:
78:27:c0:e4:2d:dd:e4:2b:3c:ca:bf:d1:f3:74:65:68:95:16:
c2:be:97:c4:1f:3b:32:76:83:a1:2b:19:fe:02:ca:e7:f2:0e:
48:dd:b6:f8:b3:4f:5b:31:ea:17:3f:0f:f7:c9:e9:77:f2:68:
f8:ed:89:29:d1:df:d0:53:4c:6b:f7:e7:98:9b:18:05:da:b4:
23:de:59:99:b1:9f:ef:3f:11:5d:46:f0:02:83:d1:c3:9b:a5:
ce:01:22:98:42:82:e3:a9:5b:3a:60:6a:91:5b:06:9f:dc:9a:
43:ea:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:55 2026 by rpki-client