Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vDemngAx3UwGRvjTNfobujz4IMk.roa
File: vDemngAx3UwGRvjTNfobujz4IMk.roa (raw, json)
Hash identifier: RoQZJuWBHqC099JvirbJRFKPpdsA6ftNFd87PHGrURI=
Subject key identifier: BC:37:A6:9E:00:31:DD:4C:06:46:F8:D3:35:FA:1B:BA:3C:F8:20:C9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0BDDAC9D49F1EDE8CFC8286F0804418DC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vDemngAx3UwGRvjTNfobujz4IMk.roa
Signing time: Sun 20 Sep 2026 08:07:07 +0000
ROA not before: Sun 20 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.121.44.0/24 maxlen: 24
178.219.4.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:da:c9:d4:9f:1e:de:8c:fc:82:86:f0:80:44:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 20 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc37a69e0031dd4c0646f8d335fa1bba3cf820c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:79:b2:27:ec:30:76:81:e9:7c:69:f9:b4:
f6:21:97:b5:1e:3c:a1:b1:75:73:15:87:da:8b:7e:
46:78:cb:f4:29:ec:d2:c3:a2:2d:d3:d4:1e:e5:91:
e1:19:ed:81:c9:5f:3d:2f:53:6a:d4:c5:c5:73:91:
cf:d3:ac:dc:a8:14:68:4f:b0:b2:c9:a8:d3:2f:2f:
22:6a:49:4d:79:5c:60:7b:50:61:b6:89:34:87:f5:
12:8d:7e:d5:92:39:22:23:5a:03:b6:88:58:a9:40:
78:c8:80:2f:2f:9a:87:9e:13:73:01:d2:ce:0f:f6:
3b:50:3a:69:54:12:0a:0f:a1:05:b3:8c:e8:ea:64:
98:a6:8c:4e:86:ea:a6:90:b0:65:d2:3a:8f:81:68:
13:cf:53:7a:eb:bc:e8:bc:ef:f2:2b:7f:50:6e:6d:
9a:3e:9d:dc:7d:1f:ad:f2:aa:1c:01:42:95:49:44:
56:da:6c:91:69:d4:e8:1e:58:52:73:10:75:f6:01:
1d:c2:1e:ac:72:83:f2:a6:0a:c5:fe:6f:9e:8e:d7:
f7:a6:e7:9f:bc:be:37:03:bc:df:f6:25:9d:1e:ca:
db:96:55:3b:61:00:c0:e9:0e:93:7b:b0:b6:41:08:
b7:3d:17:f7:e2:2f:7a:6e:ca:20:c4:da:46:ef:e8:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:A6:9E:00:31:DD:4C:06:46:F8:D3:35:FA:1B:BA:3C:F8:20:C9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vDemngAx3UwGRvjTNfobujz4IMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
178.219.4.0/24
178.219.6.0/24
185.47.91.0/24
188.255.148.0/24
188.255.198.0/24
188.255.247.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a6:85:ad:ae:51:cb:94:6c:f9:48:cb:7e:0d:57:cd:f4:34:
64:25:2b:d3:e1:11:2a:7e:76:91:0b:38:82:f0:4a:0d:77:54:
18:88:0b:74:ba:a4:db:b5:fa:ce:92:7b:c2:92:41:c0:20:2e:
63:a5:51:a5:8e:d5:84:f5:00:c6:52:c3:68:21:23:75:59:f8:
22:f1:10:32:7c:ec:3f:07:52:71:68:a2:13:8a:3e:76:41:13:
41:14:46:ad:1e:88:12:9f:d9:98:3a:17:04:b7:6b:0e:f4:de:
17:4d:71:49:57:f8:b6:5d:e7:12:d6:2a:c3:39:0b:b8:9e:fc:
2b:c5:9e:34:9c:2a:41:53:d7:a8:26:0d:ce:6b:67:c0:3b:56:
f9:03:e0:85:2f:6b:79:76:69:99:9a:8a:59:34:f1:90:96:6c:
45:29:8a:10:93:fa:42:66:03:7b:c1:0c:ed:de:d8:65:30:75:
71:52:9c:8c:02:f9:bc:4e:b8:9b:f5:24:7d:ca:c0:a2:fb:89:
33:84:65:af:22:15:cd:44:f5:30:cd:30:7d:fb:be:3f:9f:b0:
eb:da:48:35:48:1b:35:4b:31:d2:ea:b8:07:06:0d:1a:f1:dc:
60:65:e7:b1:5f:b5:63:93:ab:ff:a8:e7:95:e9:f7:a1:1d:79:
15:13:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:42 2026 by rpki-client