Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa
File: CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa (raw, json)
Hash identifier: yFinRGejY7CI0wek+NR7BAvOn5Z0rhxA2bcYeyVF/jE=
Subject key identifier: 0A:35:B0:20:1C:D9:29:CC:0D:67:B1:3E:3B:4E:A9:C8:28:C4:67:B1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019ECFBA9C998B89BE28348A80DC2334F34B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa
Signing time: Tue 16 Jun 2026 09:19:33 +0000
ROA not before: Tue 16 Jun 2026 09:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201738
IP address blocks: 109.238.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:ba:9c:99:8b:89:be:28:34:8a:80:dc:23:34:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jun 16 09:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a35b0201cd929cc0d67b13e3b4ea9c828c467b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:7e:ff:39:d8:f5:38:b6:5a:39:d1:a2:8c:
4b:3e:8a:48:a8:ad:20:ca:09:70:cc:5f:c0:77:c7:
85:7d:c6:ba:b8:df:11:97:5e:7d:a9:c0:58:e8:ba:
2c:d8:dc:6c:4b:83:1f:67:db:b9:11:e9:1e:cb:1a:
57:9d:02:25:e6:c2:92:51:3a:c6:32:c9:96:71:3b:
dc:a9:45:0d:f0:8d:99:b3:7e:6a:92:0b:2f:70:ee:
45:52:66:d6:16:84:52:79:56:c2:80:eb:f3:13:f6:
8e:12:f5:e3:d9:16:25:2b:7c:af:b9:3d:d6:6c:e3:
33:bb:e4:14:d4:16:12:18:77:8b:c4:96:1f:94:ca:
0b:a0:36:27:1a:f5:ba:6c:04:90:3f:56:78:23:9e:
ce:5c:3c:5b:18:60:14:0e:94:2e:de:e1:cc:e0:f1:
3d:b1:1f:c0:7e:89:b9:b3:ae:34:49:d2:56:ae:0a:
e0:71:58:dc:b4:bd:59:ac:c3:6c:ac:57:96:bf:8b:
d5:61:ca:4f:43:2c:a6:9b:05:37:2a:91:49:e5:c8:
d6:7a:6e:9d:fd:74:0d:9d:d3:64:7f:d8:eb:5c:04:
1d:ba:c8:1d:d7:3a:13:ee:c4:2b:90:76:c0:5b:46:
04:65:c8:2e:f1:45:e1:bc:a7:29:7c:64:93:b8:74:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:B0:20:1C:D9:29:CC:0D:67:B1:3E:3B:4E:A9:C8:28:C4:67:B1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ca:61:d8:58:26:d7:88:dc:fa:39:a4:34:1c:67:22:08:bc:
73:3e:ad:94:4c:69:b4:c5:d6:fb:fc:c7:a1:93:d8:01:61:83:
70:45:00:e9:9c:97:d4:98:81:bd:c2:73:98:e7:7b:5e:0e:e2:
10:ca:92:2a:50:7a:0a:5b:2a:88:6b:8a:0e:0d:2c:77:4c:6f:
77:91:a0:99:4f:35:86:49:e5:77:66:74:a5:e5:06:15:61:10:
b2:4d:67:ad:a8:99:9c:a5:98:ae:15:3b:ae:42:e7:3c:f5:bd:
4d:54:a5:9a:3e:c0:b7:84:4f:59:a2:35:3f:be:f9:bd:3d:17:
b3:2a:16:45:fd:79:02:1c:da:61:e8:fd:20:9c:9b:de:cd:2b:
5f:8d:44:fe:bd:6c:5e:8c:e7:f3:d0:ec:98:44:9d:a5:23:6f:
d8:31:6e:0f:99:ec:16:82:da:0c:cf:4c:25:42:09:71:0d:e4:
41:24:09:f8:15:de:22:96:36:48:59:c5:c5:2e:14:c0:22:85:
86:f4:a0:32:0a:64:11:c7:d1:a9:63:5a:45:f3:da:86:43:38:
ff:87:9b:9f:b5:19:e5:5c:03:64:86:4e:df:e5:fe:28:5f:6a:
fb:79:e7:c2:c5:ee:da:e7:8c:5e:d8:a2:80:9d:16:99:2b:e8:
5e:67:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:16 2026 by rpki-client