Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nDgkSdY5Bn3Y0CifTqSPZV7bodw.roa
File: nDgkSdY5Bn3Y0CifTqSPZV7bodw.roa (raw, json)
Hash identifier: ijsuRXxXX+pk+7sBu+FYpq7sPBqjeuReHE9OchMchmc=
Subject key identifier: 9C:38:24:49:D6:39:06:7D:D8:D0:28:9F:4E:A4:8F:65:5E:DB:A1:DC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0FC68F02B37D415DA0F36A390BC2BE9CD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nDgkSdY5Bn3Y0CifTqSPZV7bodw.roa
Signing time: Fri 02 Oct 2026 11:38:50 +0000
ROA not before: Fri 02 Oct 2026 11:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:68:f0:2b:37:d4:15:da:0f:36:a3:90:bc:2b:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 2 11:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c382449d639067dd8d0289f4ea48f655edba1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:ec:e4:56:22:0a:42:71:e4:5e:8e:b2:85:
c2:50:9d:4b:53:b8:00:0d:cd:36:48:e7:f0:40:da:
ec:a0:f5:8c:c5:49:d4:11:dd:27:7e:c3:3d:f2:c6:
a0:27:66:3c:86:ab:67:67:01:af:f5:d6:41:0b:ea:
5b:5a:cc:4e:12:78:9f:50:3f:56:57:ab:bb:30:54:
a2:48:b6:85:e5:0f:20:61:a9:4b:c9:0a:29:21:56:
00:6a:2c:f9:bd:5e:29:8e:06:ed:2a:9f:41:0f:08:
51:5e:6b:e2:29:e1:65:ee:c0:48:43:d4:74:37:d9:
26:f9:c1:c1:2e:1f:31:2b:ec:50:6d:be:5d:0c:88:
88:b4:ed:5f:56:78:47:64:72:03:39:fe:27:d7:ea:
3e:09:9f:a1:79:13:45:ef:d4:04:a2:87:e4:76:c0:
5c:59:73:99:3c:63:32:a4:f1:ce:60:38:78:07:bd:
04:12:56:e9:ba:b6:79:6d:c9:43:06:fc:ce:15:11:
c6:28:00:44:8b:fe:c6:3c:fd:65:00:86:07:a4:4a:
80:31:66:b5:70:dd:2a:8a:bc:15:73:95:f1:ec:6a:
81:78:ba:3c:ab:97:d1:88:9a:d9:62:c6:b8:d9:74:
5c:03:f7:63:e4:f8:75:67:83:39:91:0d:ef:4e:8f:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:24:49:D6:39:06:7D:D8:D0:28:9F:4E:A4:8F:65:5E:DB:A1:DC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nDgkSdY5Bn3Y0CifTqSPZV7bodw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.148.0/24
188.255.198.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f4:60:4c:29:a9:11:06:8d:35:24:bc:ec:83:54:e9:b9:2d:
15:ec:70:55:b5:fc:de:85:49:f3:73:f5:41:44:c5:5a:a0:50:
b1:b2:19:85:f2:40:9b:3c:49:d6:a0:8c:e3:8b:04:e6:a9:35:
7b:7f:c7:4b:82:fc:64:5a:b9:e1:5e:3f:c7:86:c0:38:e7:15:
02:a2:a6:4f:9f:a9:17:50:63:65:82:55:74:1b:49:3b:6e:c7:
f2:83:23:ea:0a:6e:ef:01:69:c3:99:6c:f9:f1:de:30:5f:06:
ee:af:99:ec:c8:a6:c2:ff:86:90:77:ec:16:fd:d4:0f:1f:e9:
65:93:03:d8:73:a6:06:d0:12:ab:a0:ac:e1:f5:f9:4a:cc:fa:
44:96:5e:16:1e:a7:2e:d1:38:c7:e7:c9:ae:0a:a5:3b:58:d0:
60:77:dd:43:0e:d9:89:32:1a:9e:12:19:43:5c:c6:64:2f:14:
ec:4b:3f:07:21:00:e9:1c:2b:0f:c8:fc:a9:10:04:d6:3e:06:
ee:03:6c:98:c1:90:04:41:1c:b6:f2:1a:06:e8:02:97:1f:e6:
66:1d:d3:d2:b5:ec:71:b8:c9:f5:d6:0f:22:99:f6:3e:75:45:
aa:2d:76:c1:b5:90:dd:78:b4:b1:0c:03:29:12:28:a9:da:4d:
d1:b4:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:30 2026 by rpki-client