Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2Smhb2xyZhtaUXaLEAfDvhuIqJE.roa
File: 2Smhb2xyZhtaUXaLEAfDvhuIqJE.roa (raw, json)
Hash identifier: k1Vv2z2CcUs2jDe1RSy4LryrXuauu9sM1DTv9SU7Yao=
Subject key identifier: D9:29:A1:6F:6C:72:66:1B:5A:51:76:8B:10:07:C3:BE:1B:88:A8:91
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691D359A7256DEBC58F95F1955933E
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2Smhb2xyZhtaUXaLEAfDvhuIqJE.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213076
IP address blocks: 194.6.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:35:9a:72:56:de:bc:58:f9:5f:19:55:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d929a16f6c72661b5a51768b1007c3be1b88a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0f:00:6c:59:39:e1:44:37:89:aa:70:ef:13:
c0:c9:5a:b5:38:86:63:c9:9c:e8:c7:12:41:4d:93:
a9:3a:69:2f:20:44:e8:ff:7e:98:73:43:9a:8a:82:
41:ba:1c:c9:e6:6d:f5:3e:09:97:87:bd:b2:f6:c4:
d0:6d:4f:80:9f:82:f9:66:e9:06:4f:23:6d:34:33:
61:44:b2:c3:0b:71:c2:91:bb:46:a7:b0:05:15:38:
b1:74:23:7d:a3:0a:92:e5:32:e8:b1:f6:b8:42:42:
b5:9a:04:a1:9f:68:2f:b7:8f:4e:44:c1:f1:bb:30:
77:80:b5:9d:6d:bd:67:29:b3:4c:54:01:fe:eb:e7:
a7:ee:20:3d:3b:e7:13:d7:8c:56:e7:76:65:ad:f5:
23:3d:ec:44:a7:dd:d0:00:19:c3:35:be:7a:f1:56:
3c:16:c6:25:e4:fa:91:7f:54:23:51:25:8d:1e:95:
eb:94:d9:bb:d3:d0:0c:10:4d:81:4b:6f:bc:5c:0f:
93:91:85:44:7e:41:76:d8:64:dd:c5:73:5a:51:47:
ab:12:a0:90:1d:5d:d4:fe:90:02:c9:43:da:dd:4e:
d0:12:11:e1:14:f1:37:46:36:be:bb:9f:9c:d7:fa:
82:3e:a8:97:73:14:53:14:41:e2:d1:dd:6f:37:f8:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:A1:6F:6C:72:66:1B:5A:51:76:8B:10:07:C3:BE:1B:88:A8:91
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2Smhb2xyZhtaUXaLEAfDvhuIqJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.161.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:98:85:21:e9:20:f8:2f:48:6a:11:a4:cf:bf:0f:de:41:
06:f1:07:08:48:c4:7d:3a:54:d0:e5:eb:c5:33:c5:5c:1c:e2:
64:c3:b3:d0:cb:26:fb:e4:c1:ee:f9:b9:43:1c:5b:35:18:08:
5b:ad:03:50:ab:aa:78:3f:b9:a1:60:6a:23:59:3e:83:6b:d3:
e0:08:d4:71:23:88:ff:be:34:17:8a:c8:e4:f7:9b:15:53:95:
53:3d:93:f1:80:46:c7:c4:4d:e2:f3:76:8a:49:7a:1a:5f:7b:
12:d2:cb:3f:98:26:65:75:c7:9c:0a:e7:33:a7:10:0a:b1:72:
02:da:88:da:18:64:15:cb:41:6a:d8:b7:6c:e9:a5:47:ec:61:
0d:f6:df:49:f4:38:6f:3d:e2:74:50:37:ee:95:43:a4:35:c2:
2b:d3:80:13:d4:c4:cd:52:fa:05:37:74:77:35:36:07:5c:8a:
b4:e2:7c:6d:8b:e1:c0:c6:d9:ee:66:98:2a:17:20:6e:9d:44:
b1:76:a7:d9:49:38:e1:c0:8d:ed:b4:e9:31:99:9a:9c:56:35:
5c:7d:c3:9b:85:56:c9:1f:71:83:8c:ca:09:85:96:18:62:37:
7a:d4:ae:b0:e5:cc:1d:13:02:c9:d8:65:53:43:c2:dd:15:21:
89:b4:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client