Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/32rBssWzHuQK0McJ93Nir22ZQ8E.roa
File: 32rBssWzHuQK0McJ93Nir22ZQ8E.roa (raw, json)
Hash identifier: FkbYMUabqumQBBz1wrbin5Dso67/jsrRdJV3fpgMEO8=
Subject key identifier: DF:6A:C1:B2:C5:B3:1E:E4:0A:D0:C7:09:F7:73:62:AF:6D:99:43:C1
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368EFF5A155E84E4F130A3615181796
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/32rBssWzHuQK0McJ93Nir22ZQ8E.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9096
IP address blocks: 212.243.80.0/24 maxlen: 24
217.192.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:f5:a1:55:e8:4e:4f:13:0a:36:15:18:17:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df6ac1b2c5b31ee40ad0c709f77362af6d9943c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:47:8e:da:ae:95:92:29:9e:8d:d8:3f:49:
e3:26:65:9c:7b:eb:66:c2:e4:52:a8:f2:6e:e9:ef:
b2:64:cd:ac:aa:de:83:70:c4:67:85:2d:17:06:ef:
8f:a9:71:29:65:a5:e1:b8:b2:3b:a1:fe:7e:09:c3:
67:68:d5:52:e1:36:a5:42:bf:ff:b1:dc:3b:ae:d4:
ce:5a:6f:16:38:09:22:b3:7a:0e:53:10:03:ab:93:
7f:66:e0:b2:2d:4e:af:7c:05:f9:15:b6:e0:6b:b3:
98:84:c9:a4:35:a3:57:2c:07:b8:54:96:80:05:41:
a0:a5:32:96:cc:e1:82:cf:fe:d2:5b:91:53:99:48:
be:de:15:b3:d0:61:8f:e1:af:88:7c:91:a9:57:cb:
a7:96:a1:6e:14:12:ff:d7:ad:11:13:28:61:20:94:
c4:76:96:db:9b:34:08:e6:9e:95:80:18:f5:ea:a0:
ca:35:18:27:2c:84:69:fd:5d:13:7e:50:b8:80:bc:
8d:9a:2f:c1:d4:2c:3d:5e:7c:cb:89:d3:d1:f5:2d:
e8:61:04:d8:ba:1a:e4:c3:ce:cc:5d:e6:54:0c:83:
37:72:23:41:c2:28:53:9a:7f:d7:80:64:d6:67:c6:
46:5e:6b:db:cf:91:99:b6:4d:63:0d:74:2a:49:ba:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6A:C1:B2:C5:B3:1E:E4:0A:D0:C7:09:F7:73:62:AF:6D:99:43:C1
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/32rBssWzHuQK0McJ93Nir22ZQ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.80.0/24
217.192.86.0/24
Signature Algorithm: sha256WithRSAEncryption
41:71:0a:6e:c5:7e:97:78:b5:9c:3d:c0:f1:19:73:5f:b9:c2:
79:37:0e:d4:e6:60:14:02:3c:e8:7f:8e:36:26:a7:71:f1:70:
25:ea:d6:ff:a8:72:bf:31:b0:f4:29:db:30:dc:50:6b:fb:52:
d7:0a:98:ef:e1:09:2d:64:78:c9:05:0d:26:03:fe:16:d7:a4:
de:04:8e:a4:ad:ba:6b:37:4d:2a:47:5b:f1:db:bd:7d:dc:55:
46:fa:f8:3a:32:14:cd:96:67:2d:81:04:27:96:1e:23:e1:ad:
bd:d5:4e:4e:74:fc:e8:58:f6:fc:e6:36:e9:f7:8d:00:89:45:
4f:5a:ba:cf:1e:99:76:8c:07:df:e7:d3:01:cf:e2:83:f7:cb:
de:63:10:4e:fc:d6:2d:74:a4:6e:94:1f:91:68:03:0a:94:c0:
ba:eb:e0:b6:db:1d:55:4f:7f:8a:e4:70:cf:38:91:14:18:8c:
26:3e:b7:dc:03:90:4c:01:84:b3:1b:fd:ea:53:11:29:1d:ba:
79:8a:f3:07:8c:7f:e4:17:47:b8:36:ff:ec:74:94:44:08:c2:
ae:f0:dc:09:d4:fd:c1:59:f8:ea:12:e4:ad:d4:1a:d5:ce:5d:
50:6a:3d:fd:98:46:e3:4d:f3:a6:04:0e:6e:cd:aa:d1:91:ae:
88:62:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client