Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa
File: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (raw, json)
Hash identifier: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=
Subject key identifier: 86:D2:FA:12:47:E1:CE:81:36:E5:F2:7B:71:6E:2E:A8:82:FE:FF:A6
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 019F2368665510C956000BCCF5EB821C4F5C
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60022
IP address blocks: 178.212.231.0/24 maxlen: 24
2a11:e680::/32 maxlen: 48
2a11:e681::/32 maxlen: 48
2a11:e682::/32 maxlen: 48
2a11:e683::/32 maxlen: 48
2a11:e684::/32 maxlen: 48
2a11:e685::/32 maxlen: 48
2a11:e686::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:55:10:c9:56:00:0b:cc:f5:eb:82:1c:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86d2fa1247e1ce8136e5f27b716e2ea882feffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:ee:57:67:c3:6a:ae:70:9b:d6:30:b7:be:
41:c8:dd:47:fa:bf:6e:c3:62:27:22:b9:5e:19:43:
36:ef:82:b6:d4:45:48:8e:b2:e3:3a:c0:ec:25:79:
36:49:41:14:3b:55:91:b1:71:05:12:f3:f4:4a:de:
d3:6d:14:de:81:e1:b3:1a:8b:c7:aa:8b:d2:1c:90:
82:55:ea:b7:26:b5:d2:55:82:14:8d:df:9c:fe:d9:
12:bc:83:31:da:b5:8e:0c:d4:7d:92:cf:3b:bc:ab:
07:c7:40:09:55:95:1f:67:b1:1c:8d:4c:70:04:26:
e9:af:76:40:ee:8a:8f:f5:f9:59:dc:48:2f:3d:2d:
84:7a:b6:09:ea:6d:ac:11:5d:12:51:d8:b7:f0:78:
dc:ef:67:6c:7d:ca:af:df:af:09:bc:46:b9:b6:b6:
0f:0a:99:c4:ef:b5:63:b9:6a:5c:a5:26:8c:dc:ff:
cf:be:fe:64:94:8c:9e:85:3d:38:eb:4b:eb:3e:d5:
12:87:f8:a4:d9:25:64:e4:c9:d9:a2:c5:9a:12:37:
54:79:bf:3c:db:1d:70:9f:49:6f:3e:2e:3e:00:f8:
f1:ad:79:c8:06:f8:73:3c:3f:2f:56:57:56:c9:f4:
d1:35:f0:64:e5:7f:5d:7b:fc:b0:a5:3a:6d:2a:5c:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:FA:12:47:E1:CE:81:36:E5:F2:7B:71:6E:2E:A8:82:FE:FF:A6
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.231.0/24
IPv6:
2a11:e680::-2a11:e686:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:6d:9a:65:1d:f2:a8:af:dd:b9:07:96:ca:62:97:97:fe:2d:
00:c8:32:84:da:55:47:61:b7:af:07:72:34:e6:48:31:88:f1:
ab:2e:b2:95:ba:db:3b:14:dc:a7:35:7b:52:49:37:88:0c:94:
6d:81:f1:a1:20:7a:c3:67:45:79:2b:f0:25:8f:7d:1c:4c:ef:
7e:5b:6a:2b:c5:03:e8:a3:43:c0:ca:18:77:9f:21:0a:3b:83:
c0:4f:bb:69:57:cb:2d:c1:00:3f:44:a3:0a:ea:9e:22:31:c6:
a2:21:43:6c:3f:d8:d1:fa:50:7e:22:11:94:99:d0:33:d2:25:
f1:87:53:ce:bf:4e:5b:04:90:70:af:7c:96:4b:09:27:20:a7:
94:12:f4:c3:0a:34:4c:35:69:27:fa:15:42:14:15:1e:dd:67:
42:38:33:60:3c:c6:09:81:96:2b:fe:6f:ca:e5:b4:ee:9f:ca:
58:10:89:e2:c0:f2:93:20:de:a6:2c:bb:ba:76:1d:8e:ee:80:
8f:f6:0b:85:4a:17:f8:83:2c:02:8f:e8:53:67:be:88:a8:3d:
bf:f1:79:ef:65:ef:41:0f:51:cd:2b:53:49:c6:13:da:76:63:
b6:fa:7c:f7:78:6a:d3:e3:6e:33:63:38:b9:d9:6f:c2:98:09:
a4:a4:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:55:52 2026 by rpki-client