Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l0M32dnk26W-wQVj2LDPbCW4Glg.roa
File: l0M32dnk26W-wQVj2LDPbCW4Glg.roa (raw, json)
Hash identifier: aTuNJRdWIp8FLj8B5Ws8CWSqijxMKhPVCFEGpthJ5vw=
Subject key identifier: 97:43:37:D9:D9:E4:DB:A5:BE:C1:05:63:D8:B0:CF:6C:25:B8:1A:58
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0DD55FBADF3BFCBFC3EE44795A7E39E8E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l0M32dnk26W-wQVj2LDPbCW4Glg.roa
Signing time: Sat 26 Sep 2026 10:49:54 +0000
ROA not before: Sat 26 Sep 2026 10:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.121.54.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
188.255.174.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:55:fb:ad:f3:bf:cb:fc:3e:e4:47:95:a7:e3:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 26 10:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=974337d9d9e4dba5bec10563d8b0cf6c25b81a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:61:6b:bd:2d:46:7d:87:96:f2:78:e4:99:
88:12:8d:9a:e5:b0:17:19:0a:be:ea:ee:43:cf:29:
bb:36:3f:d2:30:b0:c8:7a:56:65:4b:e2:4a:57:ea:
6d:9e:e3:ce:bb:b0:9a:36:ea:5a:a0:3b:6a:6f:4e:
35:54:6b:92:84:2a:57:ca:2b:88:e3:25:b5:50:2e:
62:73:9d:75:79:4d:0f:5e:3e:70:55:5d:bd:1a:92:
01:ad:34:d6:45:bc:e3:db:de:6d:78:1b:95:c4:ac:
2d:8c:a0:8a:5c:be:1a:f1:96:ec:90:09:0e:b2:47:
c2:1e:d4:f4:7e:3d:59:dd:a9:4e:3a:a8:04:23:e5:
51:66:4e:14:88:a0:cd:32:77:26:51:e8:2b:4f:20:
0d:d0:db:c4:f9:fa:bd:80:ed:82:6e:9d:f4:cb:2b:
29:54:17:4d:d3:e0:64:e6:d5:f5:13:7d:6a:29:be:
82:08:82:7f:1b:5a:5d:0b:ec:1a:a1:99:00:cb:56:
c1:09:ff:a5:57:f4:8d:f5:ef:af:2f:61:82:e8:35:
fc:b6:3e:41:f9:82:c3:dc:5d:3f:b2:12:0a:0c:30:
a9:39:a7:7a:b3:ba:1b:21:59:89:c7:2e:44:3e:34:
bc:a5:86:6d:5a:83:84:db:ac:7e:0f:6b:85:b0:45:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:37:D9:D9:E4:DB:A5:BE:C1:05:63:D8:B0:CF:6C:25:B8:1A:58
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l0M32dnk26W-wQVj2LDPbCW4Glg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.54.0/24
178.219.1.0/24
188.255.174.0/24
188.255.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3e:3c:86:7a:0b:88:3b:3a:76:8c:fa:d9:0c:f6:cc:a3:ed:
9c:5d:14:46:6e:87:87:1f:54:f3:f1:c1:96:c7:b6:39:81:ba:
7d:12:b7:08:6a:48:39:32:65:08:b2:29:dc:05:6e:df:8f:d7:
e1:be:ac:a8:43:ff:98:2c:f1:37:db:4f:45:cf:a1:65:3c:45:
0a:1e:ba:0a:8a:99:26:73:d5:9e:17:fb:ab:81:96:ad:e1:13:
1a:f0:b5:8c:f7:22:db:8c:3f:ac:3f:dd:4f:a2:97:b9:12:7e:
d1:e8:d7:5e:72:36:65:f6:09:66:03:d5:ea:a2:75:2f:c3:1e:
f4:43:c8:ca:01:8e:1f:be:d0:b9:e3:e1:11:23:df:ba:dc:15:
74:bc:12:0d:e8:64:90:9a:0d:c1:51:c8:06:74:48:99:39:81:
32:35:7a:99:a5:86:27:ec:39:dd:68:65:5b:48:1f:d2:32:cf:
53:9d:6e:ff:81:ae:95:ab:97:4f:0f:05:f4:74:f1:e0:e0:6d:
d6:d2:e9:2c:eb:16:af:7b:45:af:9d:37:9d:f2:81:95:96:41:
d8:6c:66:86:a8:d6:64:13:25:33:ee:04:06:76:c1:c3:6a:3b:
7d:13:37:0b:b5:23:58:c5:87:d5:fe:70:d9:37:58:8f:a4:7d:
20:96:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:01 2026 by rpki-client