Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/906tKK6kDm0wSQ7eRts9__Jfwbo.roa
File: 906tKK6kDm0wSQ7eRts9__Jfwbo.roa (raw, json)
Hash identifier: 0OAWs2uO32e8G81S64Ey4+z37Bkoc9EHF/1GKofJJTI=
Subject key identifier: F7:4E:AD:28:AE:A4:0E:6D:30:49:0E:DE:46:DB:3D:FF:F2:5F:C1:BA
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236903CD722735BD6E8B1E64D406A2D9
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/906tKK6kDm0wSQ7eRts9__Jfwbo.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50476
IP address blocks: 195.65.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:cd:72:27:35:bd:6e:8b:1e:64:d4:06:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f74ead28aea40e6d30490ede46db3dfff25fc1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:4d:f2:05:c6:1a:45:6b:73:ba:b4:e6:30:
63:54:81:a4:06:74:98:37:75:0e:99:fa:f2:8e:53:
7b:9c:8e:62:57:d5:d6:1a:20:04:37:c4:e0:94:2c:
30:7f:a7:ef:56:61:5f:9d:a7:b3:52:24:e4:42:85:
b8:d7:6a:ae:49:e0:29:ed:1a:bd:29:40:0a:57:14:
c4:5f:8d:16:f5:2b:0b:35:de:ee:72:f7:d1:0a:5f:
cc:e5:ac:02:fe:67:26:12:b9:34:fb:4b:a7:a9:63:
18:bc:83:9a:2c:fe:70:a6:a6:5e:86:59:b4:9d:ee:
5a:68:db:23:31:3a:d4:7d:c6:fe:22:24:4e:c1:e5:
d9:ce:c1:88:2b:a6:12:ae:dc:b3:33:95:75:24:a2:
c1:0b:fe:ed:4e:49:de:e4:9b:46:44:67:af:3e:d6:
60:06:4a:df:3b:bd:ba:45:a6:df:7d:b7:ab:e2:55:
25:81:c8:7d:a2:94:34:6a:42:1d:98:cc:2c:06:04:
a6:ef:62:7c:5d:e7:09:9e:4d:62:f9:74:77:4e:4b:
7b:7d:d7:47:02:dd:54:7b:45:79:cd:05:3d:3f:f6:
c9:b1:24:93:07:07:d7:dd:78:35:57:39:80:40:6e:
66:80:f3:c3:da:90:68:dc:ca:69:c1:9a:07:37:3c:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:AD:28:AE:A4:0E:6D:30:49:0E:DE:46:DB:3D:FF:F2:5F:C1:BA
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/906tKK6kDm0wSQ7eRts9__Jfwbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:99:2c:1a:a7:bb:46:87:1a:96:22:24:66:1c:7f:df:02:
15:75:04:78:a9:cf:8a:54:72:07:7f:6d:d0:49:ae:20:b2:66:
54:47:29:cd:78:2a:71:24:f4:19:ec:c0:ec:28:df:d2:f2:6d:
b6:32:ff:7e:98:8e:30:53:de:f3:fc:47:17:e2:2a:eb:20:75:
b7:d6:4e:2f:73:45:f0:c9:d9:3e:50:6b:8b:12:25:6e:d6:c6:
d8:b8:22:43:59:e5:3b:24:92:bd:db:91:ec:2e:78:1f:ff:33:
c7:be:d5:59:70:50:40:37:44:37:78:6b:1c:54:a0:8e:a0:fe:
32:0c:37:ac:a3:a3:e5:b9:b9:34:dc:64:17:41:43:7e:35:35:
e7:b2:4a:71:28:8f:3b:54:de:ac:69:69:1a:60:21:c3:a2:7f:
8a:ea:af:b3:20:90:d5:28:a0:85:ab:83:cd:be:29:4e:33:c1:
12:a8:12:67:6e:47:66:99:31:9e:7c:2c:57:e6:92:6c:e6:1b:
c5:88:e2:c0:be:30:71:68:41:43:87:ac:54:1d:08:cc:98:fd:
ac:09:68:27:a8:aa:a3:6b:1e:de:f7:62:ee:f1:7f:c1:79:0f:
27:d1:79:56:5f:9a:c0:37:d1:0e:7f:79:f1:11:8c:ab:4e:e2:
75:48:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:24 2026 by rpki-client