Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4IXfNCHEx8HgWRo8iqa--oFPZ1c.roa
File: 4IXfNCHEx8HgWRo8iqa--oFPZ1c.roa (raw, json)
Hash identifier: u6K7h4004m1qxEDneeHCMgjRHVukoSU2gkhRGbJHEqQ=
Subject key identifier: E0:85:DF:34:21:C4:C7:C1:E0:59:1A:3C:8A:A6:BE:FA:81:4F:67:57
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236917FFEB624F5B70F3346DDA869314
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4IXfNCHEx8HgWRo8iqa--oFPZ1c.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208836
IP address blocks: 217.192.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:17:ff:eb:62:4f:5b:70:f3:34:6d:da:86:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e085df3421c4c7c1e0591a3c8aa6befa814f6757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:f0:d6:04:d5:f6:ce:1b:5a:cf:8c:4f:ab:
e7:6f:7f:34:11:1e:f8:90:4a:43:83:8f:d4:12:fd:
47:21:2d:9d:4a:1d:71:8c:5e:22:d7:2a:50:72:a9:
27:8a:81:2f:99:a6:f1:9e:5a:e6:ff:4a:4a:37:fd:
24:61:41:07:26:3e:62:a6:74:ec:89:36:bf:eb:6f:
50:c3:47:ff:6c:48:7b:d3:d1:5a:9e:d8:e6:2f:48:
ff:fa:86:02:ad:16:98:fd:af:79:97:e6:32:bf:3a:
cd:44:07:68:53:f7:30:2a:99:96:d7:d5:35:8f:ee:
d0:7b:be:8b:d4:00:c9:6e:e7:1d:09:89:bb:77:2a:
52:bc:55:2d:69:08:8d:55:dc:11:c9:c2:46:97:ba:
64:37:45:d9:26:74:8a:d7:fe:45:ae:0a:86:53:77:
e4:f7:54:48:3a:5d:15:71:f8:ed:ee:f2:a1:ce:fc:
89:7a:db:c3:2f:58:ba:2c:1e:d6:2c:99:d0:fe:1b:
c4:96:77:34:cb:b4:e8:9b:d8:2a:16:79:4c:5b:dd:
8c:dc:59:41:74:4f:18:33:fe:65:f6:8c:f2:ee:4c:
9a:04:2b:16:e2:54:4a:e2:b7:8c:37:f1:d3:bc:ea:
18:27:b5:c3:13:ea:57:28:62:1f:7d:47:0b:7c:41:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:DF:34:21:C4:C7:C1:E0:59:1A:3C:8A:A6:BE:FA:81:4F:67:57
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4IXfNCHEx8HgWRo8iqa--oFPZ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0d:d3:3b:1b:63:d3:56:13:b5:c9:a4:a3:07:4a:4e:ad:6f:
c6:33:02:36:63:c8:e3:ff:50:08:ac:85:58:dd:c7:eb:e6:0d:
d8:e3:4c:31:46:1a:12:6d:6f:5a:97:09:a1:81:86:46:d0:7d:
a4:e4:28:3e:45:b5:28:cf:d9:e0:47:f2:5c:70:b4:8a:85:d2:
4c:6e:cc:6b:cf:a5:5e:13:5b:d7:78:21:7c:2d:58:8a:06:9b:
c3:3f:ce:91:2a:15:ce:c1:db:ed:85:b0:ea:bd:84:43:08:a7:
2b:3a:69:4c:30:19:b3:2c:90:9f:ce:f4:1c:35:0c:6d:bb:58:
15:e8:5e:1a:b1:89:d8:3d:44:7d:52:28:ed:82:42:a8:bf:ea:
5f:b1:f5:49:53:03:9b:85:e5:e9:58:56:2b:62:e3:eb:d3:2c:
dc:69:a2:bb:74:78:c5:36:98:e0:00:79:ee:2a:4a:2b:9b:d8:
77:f5:22:a4:45:c3:7b:9c:95:0d:6d:be:bf:3b:6b:30:04:ac:
5d:c8:33:98:e1:24:69:fd:2b:b8:d4:44:fa:5f:a7:f3:7d:a4:
67:45:ab:d6:a1:4f:9f:76:de:f6:8a:e9:b2:2e:72:31:f8:cf:
25:0f:7a:62:00:12:4d:16:b9:b2:3b:eb:8d:e0:7e:27:bb:39:
63:48:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:41 2026 by rpki-client