Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/h658PKckKesTLernUES_denhymQ.roa
File: h658PKckKesTLernUES_denhymQ.roa (raw, json)
Hash identifier: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=
Subject key identifier: 87:AE:7C:3C:A7:24:29:EB:13:2D:EA:E7:50:44:BF:75:E9:E1:CA:64
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 019F2368EB0D89E60BCA49B40D66FDE6A7E3
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/h658PKckKesTLernUES_denhymQ.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 194.173.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:0d:89:e6:0b:ca:49:b4:0d:66:fd:e6:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87ae7c3ca72429eb132deae75044bf75e9e1ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:09:7d:c9:f4:1f:f6:20:91:30:59:57:bc:
ca:26:33:c0:ac:1b:5b:74:b4:30:f3:a1:9a:68:ad:
fd:8d:54:57:1f:9e:32:92:51:b9:6d:67:8a:de:74:
c5:74:6e:ef:a7:fb:96:35:4c:4c:0c:c1:b3:72:cc:
ec:d4:8f:78:e3:50:68:c0:25:7f:c4:8e:43:f2:7b:
40:72:a4:40:79:20:3e:9c:a3:b6:58:90:52:50:33:
99:a1:d9:24:d1:67:35:3b:12:18:6d:14:f9:4d:d8:
4c:ff:32:2a:11:d1:40:5f:4e:be:bb:f4:a1:32:0c:
bc:f7:21:12:91:fd:20:46:9d:1d:49:29:4e:78:4c:
5f:dc:31:30:a4:db:e7:cd:a6:35:c9:c9:80:5d:ad:
fe:63:8b:06:04:cd:fe:7b:62:ae:fc:8f:14:1f:e7:
d2:68:d4:0f:87:0d:2d:73:fb:a9:94:ed:03:17:bb:
f7:4c:13:62:17:af:ce:43:b4:3a:bc:f0:08:95:cc:
ed:c9:a2:5d:e0:03:e7:c4:d3:5a:04:84:77:50:df:
72:2c:3a:de:77:9f:8a:f5:26:56:e2:75:7c:18:10:
c0:d9:67:f6:3d:b5:f8:a5:f4:b1:74:64:0c:55:3a:
9c:49:eb:72:2b:b8:18:ff:c2:5d:7f:44:0e:64:6f:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:7C:3C:A7:24:29:EB:13:2D:EA:E7:50:44:BF:75:E9:E1:CA:64
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/h658PKckKesTLernUES_denhymQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c3:66:39:c6:f8:be:0e:e4:cc:8a:39:cb:91:f2:7d:03:e4:
59:fe:d4:21:41:bd:f1:49:f1:02:9e:64:c2:01:cf:c8:45:91:
52:05:d7:8b:cd:cb:82:4e:9b:05:c8:63:b6:3a:66:d6:bb:d4:
83:83:79:3c:f9:16:46:67:68:42:22:01:e5:77:90:bc:98:55:
b9:c8:b9:f9:78:30:a5:3b:e8:dc:5a:3d:95:7f:07:13:9d:9d:
cc:e1:3b:0f:30:a2:46:20:65:59:f4:8b:6b:7c:36:54:7a:0a:
9f:fe:19:0a:37:dd:d0:2f:11:ff:2e:22:4e:c1:e8:39:c0:60:
07:47:1e:33:d4:a3:71:45:cb:2e:d4:fc:30:47:c4:d6:37:a9:
5d:96:73:db:87:5a:8f:d7:90:4b:a3:0e:33:1f:9b:d7:6a:a3:
64:34:f5:d7:ae:ec:45:3e:73:f2:27:3f:25:d1:13:79:5b:3f:
2f:6d:47:a6:a9:74:db:26:0a:ee:c6:1e:1c:85:6e:62:e5:0d:
29:a4:47:c0:d3:58:5c:6c:8d:20:3e:be:87:b0:cf:91:b6:3c:
6c:04:23:ef:a6:c9:8c:b3:84:a0:aa:3d:5c:e1:fa:f8:0e:e2:
d1:8b:1a:fc:08:4d:34:3d:c7:8e:86:50:1b:e0:2f:10:26:b3:
86:ec:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:54 2026 by rpki-client