Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sCyVBiZwF1bGiFdHeWVjKHdjHzs.roa
File: sCyVBiZwF1bGiFdHeWVjKHdjHzs.roa (raw, json)
Hash identifier: LZWghHZbe6EL1IwxXjkAlFtUTpxTEklmk74jXwZLifA=
Subject key identifier: B0:2C:95:06:26:70:17:56:C6:88:57:47:79:65:63:28:77:63:1F:3B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A07A8088170B28ADEE7DBEDA882BB0E186
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sCyVBiZwF1bGiFdHeWVjKHdjHzs.roa
Signing time: Mon 07 Sep 2026 06:13:58 +0000
ROA not before: Mon 07 Sep 2026 06:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.121.54.0/24 maxlen: 24
178.219.0.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
188.255.174.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:80:88:17:0b:28:ad:ee:7d:be:da:88:2b:b0:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 06:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b02c950626701756c68857477965632877631f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:85:d6:6f:f2:a7:ef:75:76:32:5f:4b:69:
e6:ee:d1:ee:d3:18:ad:16:17:a9:05:77:71:03:0c:
65:54:82:b8:a2:2b:ec:13:9f:cf:bd:57:45:18:f5:
ee:5f:63:a7:5f:3a:f7:e2:37:76:c4:6b:b7:0d:df:
ee:98:11:a1:70:41:f4:b4:3c:b4:1c:58:86:6c:0e:
65:1f:31:cb:35:a0:44:d3:19:b0:65:c5:fb:be:5f:
26:6e:75:05:c4:0c:d8:1d:6f:cb:b8:79:a5:dc:02:
f0:91:dc:29:bb:f4:20:4c:6d:6a:ab:da:2b:60:da:
f1:8f:98:cf:10:9c:63:24:4f:f7:a6:00:7c:ef:be:
fc:78:6c:5e:92:fc:60:f8:5b:c9:12:73:8c:d0:72:
49:e4:ed:3e:9e:2c:b9:9e:57:42:2b:2b:ce:57:6a:
fa:4d:4a:a5:5c:f2:45:88:ff:29:ba:60:d1:c1:e9:
a8:57:9d:00:6d:5c:f1:f7:6b:bd:08:5d:6e:26:34:
0e:d1:c5:f9:13:f7:8a:e3:64:16:b8:9d:90:13:bc:
8e:4f:81:1f:cb:df:5d:78:bb:21:41:b5:e6:e5:61:
ea:15:09:74:2e:4a:04:28:3f:b7:17:77:2f:ce:4d:
0d:79:1f:6b:8e:49:ae:2b:27:99:00:ab:75:0c:f6:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:95:06:26:70:17:56:C6:88:57:47:79:65:63:28:77:63:1F:3B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/sCyVBiZwF1bGiFdHeWVjKHdjHzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.54.0/24
178.219.0.0/23
188.255.174.0/24
188.255.201.0/24
Signature Algorithm: sha256WithRSAEncryption
57:19:cf:34:9f:9c:a9:0b:e7:f1:ee:3a:90:48:e9:80:c8:55:
c1:10:d8:f9:10:a8:ee:72:30:3f:3f:3d:a7:cf:2e:45:68:1a:
b0:70:f9:05:d1:c0:ce:32:32:5b:6d:bd:79:b7:36:74:c6:47:
00:84:df:ea:87:bb:52:96:31:1c:d0:44:6f:7c:2b:38:34:a1:
45:ed:f1:2c:a8:a9:db:e6:63:6d:7a:34:64:f9:74:75:ae:4b:
80:9d:5a:16:1c:90:0f:4c:e4:c2:c4:7c:d6:0c:6b:0a:73:09:
b6:c9:60:f6:4e:61:75:bf:b6:01:e1:3b:4b:29:d1:0a:0d:4b:
df:7a:68:75:bd:ea:d9:d7:cd:ae:f2:c8:0b:97:98:d0:e7:0a:
8c:2a:9b:a4:a3:4f:20:8f:fd:c1:b9:0f:b9:ce:70:1e:08:9d:
7e:d8:71:e8:64:8f:4b:50:8d:e0:b1:a8:71:2b:13:ae:11:98:
4a:c1:17:51:be:66:da:cb:75:03:ad:4b:e4:c2:e4:1a:a4:a2:
55:09:7c:3f:8b:68:3c:71:30:b5:66:c8:1e:1d:2e:f3:2f:a5:
86:b8:cb:e1:6e:16:d6:63:98:aa:66:f9:da:57:d3:c0:fc:e3:
a8:40:33:a6:80:88:8b:1d:32:3b:56:d5:50:e9:d3:05:d3:03:
a4:43:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:03 2026 by rpki-client