Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/69DloM6NSrsrStsHyb3JdgKsdfw.roa
File: 69DloM6NSrsrStsHyb3JdgKsdfw.roa (raw, json)
Hash identifier: 5Mr4GKRHm2xu31StUT78jvngmfQ52gZnUV7pZ18XcwQ=
Subject key identifier: EB:D0:E5:A0:CE:8D:4A:BB:2B:4A:DB:07:C9:BD:C9:76:02:AC:75:FC
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690B2FD99CF900A62B9552AF328029
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/69DloM6NSrsrStsHyb3JdgKsdfw.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200815
IP address blocks: 212.243.60.0/24 maxlen: 24
212.243.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0b:2f:d9:9c:f9:00:a6:2b:95:52:af:32:80:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd0e5a0ce8d4abb2b4adb07c9bdc97602ac75fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:1e:90:87:5b:f5:1b:5b:58:c5:b6:e7:d2:
9f:26:92:67:11:bb:b5:f1:87:8c:e3:7e:c3:01:d0:
d9:b4:cb:5e:26:3f:47:fd:3c:10:d0:b7:ea:13:4f:
f4:f7:ea:c2:c6:be:ec:63:6f:3b:33:5d:ee:61:df:
31:26:c1:f6:76:2d:c1:cb:8d:f9:33:11:fa:3f:41:
1c:f3:0d:d3:0b:a7:ba:36:66:cd:6a:c5:77:db:ea:
9a:25:31:d8:bd:37:95:a9:b0:0c:59:6d:65:36:60:
cf:70:3a:ce:2f:bd:13:22:9e:24:2b:82:00:25:7b:
e0:80:1b:e9:8d:0a:1e:9a:82:95:44:e5:de:a6:99:
e5:de:f0:4b:73:de:b9:fc:86:77:54:9c:ac:a3:06:
10:83:5e:fb:88:00:6d:5a:9d:0b:48:02:91:c4:d3:
cc:3c:ac:23:6e:09:b2:89:96:9b:d1:c3:c9:e4:b6:
05:15:47:11:aa:bd:8d:af:f9:fd:d0:b7:04:d1:91:
50:3b:73:91:6a:90:fb:2d:e9:02:f8:03:9c:9a:7c:
13:34:34:b1:ab:db:9c:58:4c:d4:b1:e3:4b:9d:f6:
e1:87:78:20:4b:e5:61:56:da:1e:b0:fe:e8:5c:68:
b5:0c:86:cb:3d:98:ad:d0:c7:ad:71:7f:63:c5:2e:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:E5:A0:CE:8D:4A:BB:2B:4A:DB:07:C9:BD:C9:76:02:AC:75:FC
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/69DloM6NSrsrStsHyb3JdgKsdfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.60.0/24
212.243.66.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ff:e8:2e:fc:70:46:70:2c:8b:e5:72:ae:30:84:e8:8a:9a:
0a:8e:39:57:f9:f7:53:a5:03:56:35:47:03:11:a4:50:bd:e0:
07:63:e0:a3:20:c6:9a:0b:25:89:33:c3:48:d5:08:8a:7e:df:
8e:16:c6:58:a2:a6:c2:20:17:31:3f:30:a7:77:e4:51:b4:6a:
67:3a:17:14:3b:8d:ad:34:06:1b:1b:84:73:dd:ce:c3:64:85:
50:85:bd:4e:d2:af:1f:cf:39:d8:84:9c:16:da:f1:bd:6f:ad:
1d:4d:6e:9b:e0:fd:5f:6f:31:44:11:06:97:c1:ce:6b:04:b2:
a3:72:7f:bb:77:45:9a:6b:4b:f1:0f:e3:1c:e9:d7:08:65:bc:
cf:21:c7:97:df:61:1e:10:7a:d4:d1:59:e0:08:f5:37:be:04:
f1:6a:03:04:bc:f9:86:4f:ae:5a:ef:e9:e9:3c:33:b0:db:44:
c4:77:c8:04:64:9d:17:3a:2c:b2:60:bd:fb:b4:4a:40:3e:d3:
8b:65:85:93:a9:b7:52:79:a1:85:8a:05:3e:74:92:9d:e0:1c:
15:d6:d2:a2:9a:8d:bc:22:56:7e:c8:64:9d:79:61:85:9f:d7:
eb:5d:b8:1a:c2:22:d5:70:f2:1b:d2:fd:85:29:52:f6:f7:b2:
e1:13:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client