Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xNnFTITSJVYalb0-4k__oQVG4HE.roa
File: xNnFTITSJVYalb0-4k__oQVG4HE.roa (raw, json)
Hash identifier: lIiiQi2BIIf5YDFbXDc9564yXa/E6FfYKfoKxpjdjc8=
Subject key identifier: C4:D9:C5:4C:84:D2:25:56:1A:95:BD:3E:E2:4F:FF:A1:05:46:E0:71
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C5C3E9E1102997E0845D0C8D4C2A3AD9F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xNnFTITSJVYalb0-4k__oQVG4HE.roa
Signing time: Sat 14 Feb 2026 13:02:13 +0000
ROA not before: Sat 14 Feb 2026 13:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 109.121.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:3e:9e:11:02:99:7e:08:45:d0:c8:d4:c2:a3:ad:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 14 13:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d9c54c84d225561a95bd3ee24fffa10546e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:9f:5e:17:b8:54:df:0f:f9:b4:91:76:49:
0d:ae:dc:4b:89:26:3b:55:ee:d3:50:a4:bd:b6:31:
94:95:56:3e:84:c9:51:8f:18:1f:96:e5:06:14:6f:
1d:cf:ce:43:c5:3a:1b:ee:5c:45:5a:7d:fa:70:01:
6a:41:c5:f1:c9:08:56:67:e1:50:c6:37:75:99:e9:
f2:35:13:6d:58:45:8e:e1:ac:5c:14:bd:b6:4f:4f:
b6:4a:49:59:01:40:b4:62:83:d9:00:ac:1c:06:57:
63:a8:69:fb:4d:1b:c0:93:dd:db:35:5f:b2:30:89:
ce:69:87:4c:f0:83:1a:f1:5c:95:ee:56:31:2d:43:
a6:20:15:92:20:d8:fb:c0:8e:c8:e2:20:c0:c1:1b:
22:76:e9:fc:5e:aa:6b:cc:e6:d3:be:0e:96:87:ca:
50:de:77:ab:b1:de:2a:f7:b1:d4:e3:d6:9f:f3:65:
a2:5a:a5:4c:b3:79:0c:e8:0b:01:cb:16:e1:9e:fd:
43:98:07:9c:fc:66:0e:81:5f:fa:dd:b3:10:cf:72:
1d:8c:ff:e1:23:41:66:fa:a8:49:e2:19:9d:99:1e:
36:cf:47:be:49:99:e8:11:ae:77:3c:60:99:f4:ab:
b7:25:99:b1:22:98:71:00:4a:2a:79:63:96:c1:dd:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:C5:4C:84:D2:25:56:1A:95:BD:3E:E2:4F:FF:A1:05:46:E0:71
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xNnFTITSJVYalb0-4k__oQVG4HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:30:ea:fe:0f:b4:b0:e4:bd:2b:0b:48:a5:c1:54:72:8a:60:
28:74:7b:63:c0:36:1a:3e:23:33:fc:90:0c:6e:e9:b5:db:a6:
37:80:e2:fd:ee:f0:9d:93:22:eb:67:d0:a3:6b:13:0b:48:2b:
ff:5d:7e:db:ff:f2:b1:58:82:b9:6c:5e:50:ce:f2:ef:92:7d:
93:a6:3e:7f:b9:2f:7c:29:8c:8b:25:d1:0f:98:1e:37:5a:9a:
17:34:9c:51:0a:59:8b:65:da:73:57:2b:5f:84:ef:40:10:74:
b9:eb:fd:1a:0c:1b:11:66:a5:1a:29:09:68:e0:05:41:f4:2d:
51:76:56:36:89:8f:3b:67:68:e0:cc:2f:23:6b:49:dd:71:d5:
c2:86:fa:c3:6d:d7:85:c9:c9:6e:89:59:41:52:dd:b4:ee:e9:
2a:b9:03:d0:ab:e5:85:04:4e:54:0a:ef:93:cd:4b:2c:51:45:
28:fb:a1:4c:6c:82:e1:a7:5a:dd:1c:71:d5:20:9b:26:a1:c3:
db:5e:04:f7:20:32:02:01:00:0c:e6:29:8a:f1:19:42:fa:7f:
c4:1e:91:80:b3:81:54:87:29:1b:31:6b:8a:bc:6a:c6:d1:76:
09:84:1a:fb:2b:f6:78:36:b0:57:5c:65:52:97:4f:a9:3c:71:
ba:ad:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:33 2026 by rpki-client