Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/31oQRzaDvQy3dVequoVU_ANs1fY.roa
File: 31oQRzaDvQy3dVequoVU_ANs1fY.roa (raw, json)
Hash identifier: CQM/uymHG3JKk19Jw2h+S+NLCwFmBzR/wGNs1Y09h5A=
Subject key identifier: DF:5A:10:47:36:83:BD:0C:B7:75:57:AA:BA:85:54:FC:03:6C:D5:F6
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FC454F0DB398A34C9E0B0F82C2A4
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/31oQRzaDvQy3dVequoVU_ANs1fY.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30862
IP address blocks: 194.6.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:45:4f:0d:b3:98:a3:4c:9e:0b:0f:82:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5a10473683bd0cb77557aaba8554fc036cd5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:6d:63:6f:f6:89:ff:bf:e2:db:f9:88:b8:
7f:21:0a:57:05:8f:54:e8:65:f7:4f:0a:e3:00:fe:
e7:55:50:e3:fa:88:9d:33:c6:0b:fa:dc:b8:10:a5:
39:65:eb:44:52:ea:c9:bb:03:d2:02:7a:64:2a:d0:
06:c4:86:da:a1:8f:aa:21:4b:33:44:b7:61:91:94:
d7:59:77:a2:9b:c2:16:86:9d:f8:4c:1b:6e:5c:a4:
84:88:08:e0:08:e1:83:b6:c0:92:a8:e7:aa:36:88:
7d:fd:fd:cd:e8:d4:ad:18:1a:e3:21:9b:24:b2:ad:
c1:da:15:f4:b8:a9:4b:5e:f9:14:0d:ab:56:1f:1f:
45:f7:1e:cf:53:ba:c2:11:2b:3b:d5:03:3e:2e:90:
69:d7:a5:83:2c:12:c7:d2:33:3a:9a:75:f5:4c:32:
40:99:19:de:38:91:0b:d1:ea:20:b5:6a:10:c5:88:
dc:f5:4c:e2:a6:c2:d4:ce:75:03:e8:7a:83:3f:74:
4f:cc:0a:55:f0:d8:b6:52:00:79:ff:6a:28:0c:80:
2e:e5:78:9c:ea:39:8c:c5:4a:21:d1:a3:92:ba:69:
87:6b:38:03:b6:51:d1:ff:3f:42:26:67:ad:31:04:
3b:7b:ee:dd:35:b5:b2:47:aa:a5:46:30:96:92:b6:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:10:47:36:83:BD:0C:B7:75:57:AA:BA:85:54:FC:03:6C:D5:F6
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/31oQRzaDvQy3dVequoVU_ANs1fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.178.0/24
Signature Algorithm: sha256WithRSAEncryption
37:14:46:f0:2a:da:17:b1:f5:ee:67:e6:61:04:0d:e1:68:4c:
c2:7d:03:da:86:7d:f9:e4:7f:b0:67:a9:41:df:d9:61:f8:4f:
52:94:96:a9:75:17:85:9c:cd:bf:d0:d5:c3:b9:12:a5:12:45:
d6:2e:ae:c8:9e:84:86:54:f4:c2:d1:5d:98:77:e4:1d:da:f2:
7b:34:92:97:d3:7f:57:3b:79:5b:94:d1:be:48:39:18:17:0a:
49:fc:ca:5e:16:b1:44:a8:36:2e:c7:14:e2:d2:5d:1c:dc:e2:
e4:36:9e:e9:e7:a3:c9:8c:e7:aa:c9:66:47:74:cc:6c:20:14:
b2:8e:ba:40:cd:7c:69:5c:2b:33:c1:91:7b:27:03:b6:ad:f6:
fb:ec:3a:67:88:99:85:9b:41:28:e5:9c:02:58:82:f6:83:84:
25:fb:66:b6:fe:c0:2f:16:0f:cd:c8:cc:4a:ef:c1:5b:18:a2:
7d:2c:ba:69:50:13:06:9c:95:cf:0b:77:78:84:87:26:55:18:
70:53:b4:c5:06:e8:46:32:e8:f7:14:58:8b:90:ab:37:91:bf:
e7:35:ac:85:20:c7:fa:fe:6d:55:25:6b:f8:d2:d5:78:e8:84:
61:64:5e:7a:8a:43:ef:58:58:6d:b8:23:c2:d3:db:2f:f9:7e:
db:34:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:40 2026 by rpki-client