Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2nhwn2o_rsmIDB-m3B0Hb3OtmrY.roa
File: 2nhwn2o_rsmIDB-m3B0Hb3OtmrY.roa (raw, json)
Hash identifier: 5tKugiIEN969+ui/ZwCCo/exJ7oNpO0Y+Pal6Ogibao=
Subject key identifier: DA:78:70:9F:6A:3F:AE:C9:88:0C:1F:A6:DC:1D:07:6F:73:AD:9A:B6
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FDB40C99CF44D0B40978ADBE8C1D
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2nhwn2o_rsmIDB-m3B0Hb3OtmrY.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 194.209.23.0/24 maxlen: 24
212.243.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:b4:0c:99:cf:44:d0:b4:09:78:ad:be:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da78709f6a3faec9880c1fa6dc1d076f73ad9ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:7b:db:27:b6:2c:1d:88:e6:62:69:f5:50:
88:ac:01:32:f1:ee:76:a9:a8:06:35:49:64:e4:e1:
b7:0b:11:3e:f4:26:ca:a2:b7:94:47:8a:4c:60:ad:
73:09:1e:cf:f1:60:9c:03:ce:cb:0d:45:30:e0:ce:
da:1c:8d:be:b4:26:6d:e5:8f:11:4a:73:3e:4a:1d:
0d:cb:54:bc:be:dd:f0:bb:8d:5b:df:4a:6c:63:33:
ce:bd:68:17:d9:c6:70:ae:bb:1a:dc:1c:10:bb:19:
ab:0d:fd:e8:76:71:6a:29:71:92:c6:5f:7c:c9:bf:
66:cd:f7:fb:a1:92:4e:eb:bc:1d:d4:e0:51:cc:51:
f1:50:63:99:92:76:72:8b:32:c8:1d:2b:85:28:2a:
05:54:3d:6f:0b:37:63:06:f5:d3:a5:2e:83:d4:f4:
16:f5:aa:46:65:3b:39:8c:02:c1:7f:11:fd:57:c5:
5a:b0:ce:13:87:8b:ce:9f:b6:ff:30:d5:9f:3c:3b:
6a:80:d0:2d:10:d4:a9:83:74:e1:30:61:1c:91:27:
a6:41:da:8b:92:7e:76:08:43:46:5a:b3:6d:97:e9:
bd:49:86:c8:c9:31:a1:5a:6f:b9:ec:f4:64:05:81:
5c:35:32:3b:d0:c2:dd:b7:09:0b:10:76:5f:87:f6:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:70:9F:6A:3F:AE:C9:88:0C:1F:A6:DC:1D:07:6F:73:AD:9A:B6
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2nhwn2o_rsmIDB-m3B0Hb3OtmrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.23.0/24
212.243.33.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0c:7d:47:1e:d0:68:dd:52:e5:8b:12:e5:5a:cf:ce:8d:b2:
60:0c:7f:ea:f5:91:2b:04:9e:63:f3:17:74:7b:78:43:79:d8:
32:04:87:4d:ed:b6:5a:32:ad:d1:c2:77:ba:f8:9c:4a:ab:bd:
3e:f7:18:4d:61:58:5a:af:e8:49:7e:31:35:76:77:1d:c9:13:
c7:fc:a1:64:b3:36:21:4d:d9:f4:13:d0:cf:55:92:70:40:61:
b8:ad:bc:e4:20:d7:b3:67:13:53:12:55:85:62:68:6c:43:9b:
7a:1f:db:aa:c3:72:55:10:f3:35:ad:06:49:e1:42:55:2f:b2:
fd:12:88:b5:82:7b:1e:3d:c3:76:03:ec:51:19:05:bf:86:72:
7c:a1:51:9d:d2:5f:2d:07:d7:c7:c1:63:6d:b0:3f:92:05:76:
d4:02:cc:b5:88:fa:86:5a:f6:42:57:8b:fd:8d:d3:51:cf:31:
48:54:0f:7b:50:43:4b:92:25:1a:64:b4:bb:f2:06:48:25:d9:
7e:fe:06:6a:cb:5a:f6:0d:39:c0:83:1e:c1:15:54:49:70:76:
c6:19:83:2a:25:00:88:55:7e:ea:aa:76:fa:b3:37:c4:ad:c1:
63:cf:c7:56:1d:1c:1e:f6:7e:68:5f:02:6e:e5:88:56:c9:6a:
b7:c8:e2:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaP20DJnPRNC0CXitvowdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc4NzA5ZjZhM2ZhZWM5ODgwYzFmYTZkYzFkMDc2ZjczYWQ5YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQR72ye2LB2I5mJp9VCIrAEy8e52
qagGNUlk5OG3CxE+9CbKoreUR4pMYK1zCR7P8WCcA87LDUUw4M7aHI2+tCZt5Y8R
SnM+Sh0Ny1S8vt3wu41b30psYzPOvWgX2cZwrrsa3BwQuxmrDf3odnFqKXGSxl98
yb9mzff7oZJO67wd1OBRzFHxUGOZknZyizLIHSuFKCoFVD1vCzdjBvXTpS6D1PQW
9apGZTs5jALBfxH9V8VasM4Th4vOn7b/MNWfPDtqgNAtENSpg3ThMGEckSemQdqL
kn52CENGWrNtl+m9SYbIyTGhWm+57PRkBYFcNTI70MLdtwkLEHZfh/ZO+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNp4cJ9qP67JiAwfptwdB29zrZq2MB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvMm5od24yb19yc21JREItbTNCMEhiM090bXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtEXAwQA
1PMhMA0GCSqGSIb3DQEBCwUAA4IBAQAhDH1HHtBo3VLlixLlWs/OjbJgDH/q9ZEr
BJ5j8xd0e3hDedgyBIdN7bZaMq3Rwne6+JxKq70+9xhNYVhar+hJfjE1dncdyRPH
/KFkszYhTdn0E9DPVZJwQGG4rbzkINezZxNTElWFYmhsQ5t6H9uqw3JVEPM1rQZJ
4UJVL7L9Eoi1gnsePcN2A+xRGQW/hnJ8oVGd0l8tB9fHwWNtsD+SBXbUAsy1iPqG
WvZCV4v9jdNRzzFIVA97UENLkiUaZLS78gZIJdl+/gZqy1r2DTnAgx7BFVRJcHbG
GYMqJQCIVX7qqnb6szfErcFjz8dWHRwe9n5oXwJu5YhWyWq3yOLC
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client