Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4eDZ66Tun-racdQm-SC28xZFBdg.roa
File: 4eDZ66Tun-racdQm-SC28xZFBdg.roa (raw, json)
Hash identifier: AqyNexQaxzoiNnPC+ZXBzjDsZRaRgC1Fiha/9qRewgk=
Subject key identifier: E1:E0:D9:EB:A4:EE:9F:EA:DA:71:D4:26:F9:20:B6:F3:16:45:05:D8
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369047BC6301C6E182EE39A4384AC29
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4eDZ66Tun-racdQm-SC28xZFBdg.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50734
IP address blocks: 194.209.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:7b:c6:30:1c:6e:18:2e:e3:9a:43:84:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1e0d9eba4ee9feada71d426f920b6f3164505d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:e3:04:2b:a9:b2:46:df:71:93:13:cb:cf:
e0:98:f3:2d:77:a2:a5:5a:cc:66:35:59:bd:b7:29:
cc:22:6f:1d:9f:80:0f:d4:8a:87:b5:2b:fc:33:f2:
0f:2f:98:06:b5:83:e3:e5:94:3c:9c:62:5e:e8:8b:
fa:ec:b8:78:2a:ce:45:32:99:27:41:86:03:9c:c8:
a0:c7:8a:e3:d1:54:3c:3c:64:ea:df:b9:a0:e5:df:
f3:22:17:30:68:a7:62:0a:90:c2:3f:e7:1c:c7:62:
b9:45:b4:bf:78:92:62:b8:3b:39:29:38:91:37:81:
9a:5f:eb:13:62:41:97:f5:d2:f4:02:83:dd:9d:5a:
9f:98:ba:01:3f:50:60:cb:67:3f:f1:23:2b:95:2b:
4d:69:51:1f:5d:ce:cf:76:c2:89:03:f7:6b:05:27:
43:27:77:2e:03:3d:96:61:98:39:d0:41:7e:82:e8:
64:b6:da:76:14:13:e2:4d:62:9d:b2:96:bf:a3:2d:
44:89:53:b5:37:f1:e8:bc:08:e6:e2:43:e3:8b:f9:
b1:03:fc:b4:19:e7:a2:c0:17:7c:ed:0d:2a:fa:ff:
d8:40:6d:b6:06:45:fa:4d:a4:e8:27:20:81:c2:f4:
0f:77:cf:b1:31:b7:16:51:19:7e:c1:ad:4a:30:94:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:D9:EB:A4:EE:9F:EA:DA:71:D4:26:F9:20:B6:F3:16:45:05:D8
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4eDZ66Tun-racdQm-SC28xZFBdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.78.0/24
Signature Algorithm: sha256WithRSAEncryption
55:50:2b:e0:4b:f3:32:13:f8:d7:c8:cc:5a:03:b2:18:d4:cd:
be:d0:5e:d5:ff:0c:8b:85:e7:9e:1f:cd:06:b8:07:7d:c5:a4:
5e:27:49:5b:3b:d1:ce:0e:fa:e0:19:08:54:ca:b9:2b:9e:b0:
01:30:bf:13:c2:e1:80:e2:e1:51:73:7d:70:98:94:b8:d4:50:
8e:38:37:8d:1a:28:34:49:48:bb:01:79:b0:61:45:8f:7f:4f:
9b:ac:41:2d:f7:f2:c4:3f:5f:8c:87:d9:4f:d4:21:08:73:4c:
92:e2:5d:72:1e:46:89:e1:18:c2:55:d8:b4:05:66:72:2c:39:
53:fa:a1:32:bc:52:c3:89:c7:ff:c0:c5:da:1c:18:cd:39:00:
8d:ab:0f:73:2a:94:ed:b1:17:58:cb:7e:e6:27:35:93:98:7f:
47:6a:41:8e:49:f1:89:ce:2e:6c:43:c3:2b:09:76:33:3e:e1:
15:e6:d5:76:f0:1a:2b:e6:1b:bd:73:24:28:4a:e6:e7:97:ad:
cb:c9:9b:28:88:ea:52:7b:c1:06:49:5c:b8:3f:6b:48:b6:0d:
cf:d5:84:ee:d3:67:70:6f:f5:99:93:00:62:75:39:8c:20:57:
ce:06:d5:8a:2a:74:60:5c:5b:80:a7:01:5b:56:2d:9a:20:9c:
62:17:80:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQR7xjAcbhgu45pDhKwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWUwZDllYmE0ZWU5ZmVhZGE3MWQ0MjZmOTIwYjZmMzE2NDUwNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHjBCupskbfcZMTy8/gmPMtd6Kl
WsxmNVm9tynMIm8dn4AP1IqHtSv8M/IPL5gGtYPj5ZQ8nGJe6Iv67Lh4Ks5FMpkn
QYYDnMigx4rj0VQ8PGTq37mg5d/zIhcwaKdiCpDCP+ccx2K5RbS/eJJiuDs5KTiR
N4GaX+sTYkGX9dL0AoPdnVqfmLoBP1Bgy2c/8SMrlStNaVEfXc7PdsKJA/drBSdD
J3cuAz2WYZg50EF+guhkttp2FBPiTWKdspa/oy1EiVO1N/HovAjm4kPji/mxA/y0
GeeiwBd87Q0q+v/YQG22BkX6TaToJyCBwvQPd8+xMbcWURl+wa1KMJSItwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHg2euk7p/q2nHUJvkgtvMWRQXYMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvNGVEWjY2VHVuLXJhY2RRbS1TQzI4eFpGQmRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFOMA0G
CSqGSIb3DQEBCwUAA4IBAQBVUCvgS/MyE/jXyMxaA7IY1M2+0F7V/wyLheeeH80G
uAd9xaReJ0lbO9HODvrgGQhUyrkrnrABML8TwuGA4uFRc31wmJS41FCOODeNGig0
SUi7AXmwYUWPf0+brEEt9/LEP1+Mh9lP1CEIc0yS4l1yHkaJ4RjCVdi0BWZyLDlT
+qEyvFLDicf/wMXaHBjNOQCNqw9zKpTtsRdYy37mJzWTmH9HakGOSfGJzi5sQ8Mr
CXYzPuEV5tV28Bor5hu9cyQoSubnl63LyZsoiOpSe8EGSVy4P2tItg3P1YTu02dw
b/WZkwBidTmMIFfOBtWKKnRgXFuApwFbVi2aIJxiF4Cq
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:12 2026 by rpki-client