Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3X5t6WK-QI3TF1UsCf3_GVzljLk.roa
File: 3X5t6WK-QI3TF1UsCf3_GVzljLk.roa (raw, json)
Hash identifier: sOld64Z25ffscqDZANqFcxK80ATjrWxvCVWgH9fIBSE=
Subject key identifier: DD:7E:6D:E9:62:BE:40:8D:D3:17:55:2C:09:FD:FF:19:5C:E5:8C:B9
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236915C8FE6F863543573A2C529D269A
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3X5t6WK-QI3TF1UsCf3_GVzljLk.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206147
IP address blocks: 194.6.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:c8:fe:6f:86:35:43:57:3a:2c:52:9d:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd7e6de962be408dd317552c09fdff195ce58cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:9a:73:6a:4b:27:12:98:d6:46:2d:47:09:
e7:68:c2:20:d5:c7:0c:49:31:32:e1:6f:e7:89:fc:
9a:0d:0b:5a:88:f1:09:9b:3d:f8:13:9c:15:7b:d1:
13:a0:de:43:8c:44:00:1f:d7:56:7e:2f:99:9d:e0:
12:78:5f:67:e1:af:58:fc:5d:79:3d:ad:01:dc:8c:
a4:f6:b4:0a:9e:48:93:32:97:b3:88:90:d9:54:4e:
5e:c1:5f:ff:cc:23:22:a5:7d:85:31:6e:da:90:55:
6c:49:f9:f3:bd:45:27:d7:bd:6a:db:f7:79:95:62:
1f:27:69:3f:78:f8:6f:7b:07:26:73:6c:94:c7:4e:
48:71:c8:d5:6f:86:66:8a:ca:d5:4b:a8:a8:3b:f1:
41:98:5d:20:b1:c2:06:b8:3f:6a:81:4d:c1:27:65:
cf:57:0f:99:08:11:d3:79:e4:4e:78:96:b5:6f:50:
6f:1f:da:08:8a:df:d5:44:88:da:86:16:a8:67:57:
dc:77:76:1a:ca:88:90:b2:15:ab:17:96:a0:f9:06:
05:fe:df:21:fc:3e:8a:40:b1:c1:f0:a9:a2:fd:93:
eb:ba:3c:e2:a8:f4:ce:85:25:95:cd:e4:52:d0:33:
72:ad:3f:29:85:52:71:76:e4:f2:a7:87:8f:8d:e0:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:6D:E9:62:BE:40:8D:D3:17:55:2C:09:FD:FF:19:5C:E5:8C:B9
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3X5t6WK-QI3TF1UsCf3_GVzljLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5c:02:57:33:fc:39:0c:0a:5e:88:05:6f:5e:2b:61:23:d0:
89:a8:cb:28:8b:1c:c1:f3:d4:fe:e3:d8:6f:36:fb:a4:26:99:
c2:58:9a:ae:9c:c8:2e:41:2c:13:01:b3:c2:15:8f:5c:c4:ca:
dd:6d:bb:fe:72:6b:6d:71:0a:66:5f:8e:32:78:fe:f9:73:e9:
2e:41:d3:de:bf:c4:c9:1c:a5:93:e1:45:45:57:73:74:04:f6:
ed:63:c7:60:74:24:5c:57:a5:5f:49:f3:22:08:a8:95:e7:97:
0f:b0:02:11:aa:99:d7:92:60:90:7f:7c:29:4f:d1:88:20:43:
54:0c:ce:49:27:49:1c:39:b8:57:46:c7:dc:1f:13:13:0a:50:
0d:8f:d4:94:dd:22:66:d1:47:94:b0:20:b1:04:1b:bf:c9:0b:
1e:bc:62:a8:40:ca:db:90:e4:07:21:0e:e6:23:8f:f6:bc:e5:
58:e9:75:a4:66:aa:1f:5f:1b:4c:0f:03:aa:2e:ac:6e:ba:32:
e6:c0:e1:03:9c:fe:b4:d0:41:0c:6b:eb:ae:60:6d:b3:cb:79:
43:0e:81:1e:b5:11:4d:fa:80:b9:34:f6:32:42:91:ec:a1:67:
43:05:17:c7:46:d8:d9:0b:1c:b5:7a:0f:6e:e8:1b:74:08:e9:
02:d2:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client