Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3cQ-vgiZQKWpbKRQvIP2kh1Iwdo.roa
File: 3cQ-vgiZQKWpbKRQvIP2kh1Iwdo.roa (raw, json)
Hash identifier: YkeA5A8kGEGuyQ4bIvctu3WiTvWfKTBuxbEa+2bdOFo=
Subject key identifier: DD:C4:3E:BE:08:99:40:A5:A9:6C:A4:50:BC:83:F6:92:1D:48:C1:DA
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691094C964DA12569A4A2B9F48BCED
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3cQ-vgiZQKWpbKRQvIP2kh1Iwdo.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204572
IP address blocks: 194.209.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:94:c9:64:da:12:56:9a:4a:2b:9f:48:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddc43ebe089940a5a96ca450bc83f6921d48c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:2a:19:9d:5f:69:e1:b3:e8:61:68:40:cc:
de:cd:d5:f7:02:88:2b:ec:2e:38:54:da:81:d8:2d:
cf:90:1b:4f:07:30:c1:f0:b8:ec:a4:a4:44:1e:0a:
53:f1:1a:44:dc:fc:87:29:d4:43:dd:ee:1a:66:d0:
20:a3:91:9a:4f:ec:09:61:e9:d5:f2:a5:e7:c1:3e:
fd:02:71:9f:c0:e0:84:da:08:b0:1f:7d:b1:df:fa:
49:04:7d:82:7e:7c:f3:24:91:ac:81:6b:f0:5a:f9:
49:d3:d9:64:35:9a:05:fd:a3:09:38:45:18:cc:a4:
c7:0e:5c:f3:8f:a1:ae:43:14:ef:7e:b1:d0:20:65:
0a:e7:e2:32:e7:37:ad:d0:ca:f2:76:e2:80:7b:85:
55:00:4e:f2:1a:9c:34:5c:8e:70:bf:e5:e1:fc:a0:
0a:49:3b:b8:a0:14:cb:87:41:eb:ad:0b:25:c2:66:
e6:8c:0a:94:a5:48:29:a0:fc:04:9d:40:02:2e:43:
b9:84:e3:cf:d6:c2:3b:96:4b:be:30:7b:4d:2a:a1:
3b:f7:fc:a5:9c:b6:73:7a:a9:db:4c:8f:63:b7:3d:
f0:ea:b6:44:95:f0:7d:d7:35:3c:ba:28:b9:1c:3b:
8a:b5:ed:9a:4a:24:98:57:dc:ed:c8:77:43:f5:2e:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:3E:BE:08:99:40:A5:A9:6C:A4:50:BC:83:F6:92:1D:48:C1:DA
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3cQ-vgiZQKWpbKRQvIP2kh1Iwdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:fb:96:91:1b:b2:00:35:c9:8b:28:89:02:6f:92:ee:78:db:
39:8d:a3:e3:ae:3b:22:04:47:fb:71:84:4e:1b:c4:56:b1:da:
bb:b1:d0:39:ce:b6:31:1a:ae:5f:a4:22:7e:b4:9a:a3:1e:ef:
6c:5f:44:5a:4d:93:06:85:fc:e0:43:88:a6:0f:7c:3f:f0:b3:
6e:d6:f1:52:bd:68:7e:d3:36:7d:6e:1c:37:04:02:8a:d2:83:
44:91:57:f6:a2:5e:f6:9a:51:5d:68:75:dc:6b:86:34:83:18:
d2:22:1d:69:de:70:7e:07:43:cc:b0:65:40:4e:83:35:18:6c:
26:1d:9e:b4:91:31:53:cb:88:86:d8:54:23:36:6d:af:8c:a0:
82:9f:de:c3:77:72:50:55:fa:5a:7e:46:39:69:24:66:41:70:
ae:3f:53:37:60:98:64:3e:16:57:0b:8b:81:d7:fa:02:4c:f4:
84:f2:7b:74:d3:64:95:8f:e9:78:61:70:c1:78:4e:3f:4d:c1:
9f:2a:ff:e5:59:85:56:24:f9:37:a0:c6:53:eb:bb:23:72:b0:
cd:bd:05:d1:af:b9:65:35:f8:61:1f:f9:f0:2d:f9:75:57:1b:
f3:77:c8:5e:f2:50:b7:27:86:2c:1a:d6:47:c2:71:90:68:56:
2b:99:7b:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRCUyWTaElaaSiufSLztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGM0M2ViZTA4OTk0MGE1YTk2Y2E0NTBiYzgzZjY5MjFkNDhjMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00qGZ1faeGz6GFoQMzezdX3Aogr
7C44VNqB2C3PkBtPBzDB8LjspKREHgpT8RpE3PyHKdRD3e4aZtAgo5GaT+wJYenV
8qXnwT79AnGfwOCE2giwH32x3/pJBH2CfnzzJJGsgWvwWvlJ09lkNZoF/aMJOEUY
zKTHDlzzj6GuQxTvfrHQIGUK5+Iy5zet0MryduKAe4VVAE7yGpw0XI5wv+Xh/KAK
STu4oBTLh0HrrQslwmbmjAqUpUgpoPwEnUACLkO5hOPP1sI7lku+MHtNKqE79/yl
nLZzeqnbTI9jtz3w6rZElfB91zU8uii5HDuKte2aSiSYV9ztyHdD9S6WhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3EPr4ImUClqWykULyD9pIdSMHaMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvM2NRLXZnaVpRS1dwYktSUXZJUDJraDFJd2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtH0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQ+5aRG7IANcmLKIkCb5LueNs5jaPjrjsiBEf7cYRO
G8RWsdq7sdA5zrYxGq5fpCJ+tJqjHu9sX0RaTZMGhfzgQ4imD3w/8LNu1vFSvWh+
0zZ9bhw3BAKK0oNEkVf2ol72mlFdaHXca4Y0gxjSIh1p3nB+B0PMsGVAToM1GGwm
HZ60kTFTy4iG2FQjNm2vjKCCn97Dd3JQVfpafkY5aSRmQXCuP1M3YJhkPhZXC4uB
1/oCTPSE8nt002SVj+l4YXDBeE4/TcGfKv/lWYVWJPk3oMZT67sjcrDNvQXRr7ll
NfhhH/nwLfl1Vxvzd8he8lC3J4YsGtZHwnGQaFYrmXuH
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:58 2026 by rpki-client