Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9RWuVvSTaQMtv_YQV-C_MwjOSgI.roa
File: 9RWuVvSTaQMtv_YQV-C_MwjOSgI.roa (raw, json)
Hash identifier: hcKs3i+6NuZdCklUSYGfP706iMZ+KEh1JiD+LaUjsdM=
Subject key identifier: F5:15:AE:56:F4:93:69:03:2D:BF:F6:10:57:E0:BF:33:08:CE:4A:02
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F10E3623C18CD1E4B77BF8045687
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9RWuVvSTaQMtv_YQV-C_MwjOSgI.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12651
IP address blocks: 193.246.0.128/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:0e:36:23:c1:8c:d1:e4:b7:7b:f8:04:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f515ae56f49369032dbff61057e0bf3308ce4a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:af:12:52:78:ee:c6:c2:da:3d:e0:fe:da:
b6:fc:e8:05:c1:5d:f7:89:ec:d2:1d:53:97:12:c3:
8c:07:78:73:7d:dc:a7:8c:9a:ae:69:63:87:60:c8:
26:86:04:f5:bd:25:e2:49:cf:7c:a6:4e:dd:c5:47:
3a:11:71:25:36:85:ff:fe:7a:7c:a7:cc:03:5a:39:
45:5b:82:ad:d6:93:1d:fc:0e:e2:c2:f3:8f:6a:3e:
31:48:1b:be:02:48:0b:77:d9:8c:1e:90:3d:1c:78:
93:3d:8e:42:13:45:42:b7:f3:41:d4:03:3b:98:5e:
07:90:b4:1d:6a:06:e6:ca:8d:38:85:23:fe:46:52:
11:63:94:8a:26:1d:15:0c:5e:de:16:0d:c6:b7:b6:
08:5a:ff:d7:b6:91:9c:87:fa:19:b8:98:80:12:29:
d4:9b:4e:30:07:3a:55:32:8a:0b:ba:d7:56:02:a2:
0b:25:e8:fe:a6:e7:94:90:39:e5:6b:17:e2:a5:dd:
f0:dc:79:17:68:5b:a7:a0:29:9e:80:ca:ab:bf:16:
b2:43:9d:61:e0:ec:de:e9:de:67:f5:8d:c0:28:bf:
f5:46:e4:89:e3:99:69:60:bc:78:30:9c:94:b6:8e:
f0:44:b3:d0:3c:7a:e7:3a:b4:55:b9:c0:75:41:4f:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:AE:56:F4:93:69:03:2D:BF:F6:10:57:E0:BF:33:08:CE:4A:02
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9RWuVvSTaQMtv_YQV-C_MwjOSgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.0.128/29
Signature Algorithm: sha256WithRSAEncryption
32:91:2c:20:a1:8e:9a:ad:bc:dc:df:f0:e3:19:7e:6a:08:56:
13:fc:b1:de:66:64:6b:d0:96:4b:ee:ff:65:42:22:32:b2:dd:
8f:1e:d2:af:12:8f:ca:f2:7e:ce:f4:b1:6c:84:2d:1c:16:7a:
c1:85:a0:ce:5d:e0:be:86:68:61:3f:43:b7:0b:bb:10:ef:84:
d6:52:49:60:5d:4b:30:42:c3:91:61:73:70:e9:bf:26:2b:7d:
0d:8d:76:2d:51:a8:11:35:28:30:4c:9c:07:df:3c:d1:db:43:
c7:6e:8d:31:85:01:b6:60:25:47:55:9c:76:28:0d:fd:55:07:
2d:c2:5e:70:9e:58:62:b1:e8:df:14:55:d2:fd:38:1e:b1:69:
b3:15:4f:c2:0e:45:2d:aa:90:2c:f2:34:e8:8f:cf:5f:d8:1a:
1b:37:78:42:18:77:be:d1:44:89:14:8f:fd:9d:2d:63:a6:2f:
14:7e:e4:fa:3c:b3:34:ab:bf:24:31:15:c0:80:2e:3e:b0:dc:
8a:f5:cb:25:7b:1f:30:36:c9:8c:7c:7e:6b:fe:7f:6e:6b:1a:
f9:be:d8:fb:61:0b:a2:4c:5a:8e:c9:bd:91:83:02:dd:af:ce:
fa:40:b6:76:41:0f:68:8d:93:8f:58:06:ce:e9:ce:c2:f2:d5:
38:7d:43:ec
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaPEONiPBjNHkt3v4BFaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTE1YWU1NmY0OTM2OTAzMmRiZmY2MTA1N2UwYmYzMzA4Y2U0YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GyvElJ47sbC2j3g/tq2/OgFwV33
iezSHVOXEsOMB3hzfdynjJquaWOHYMgmhgT1vSXiSc98pk7dxUc6EXElNoX//np8
p8wDWjlFW4Kt1pMd/A7iwvOPaj4xSBu+AkgLd9mMHpA9HHiTPY5CE0VCt/NB1AM7
mF4HkLQdagbmyo04hSP+RlIRY5SKJh0VDF7eFg3Gt7YIWv/XtpGch/oZuJiAEinU
m04wBzpVMooLutdWAqILJej+pueUkDnlaxfipd3w3HkXaFunoCmegMqrvxayQ51h
4Oze6d5n9Y3AKL/1RuSJ45lpYLx4MJyUto7wRLPQPHrnOrRVucB1QU92NQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPUVrlb0k2kDLb/2EFfgvzMIzkoCMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvOVJXdVZ2U1RhUU10dl9ZUVYtQ19Nd2pPU2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDwfYAgDAN
BgkqhkiG9w0BAQsFAAOCAQEAMpEsIKGOmq283N/w4xl+aghWE/yx3mZka9CWS+7/
ZUIiMrLdjx7SrxKPyvJ+zvSxbIQtHBZ6wYWgzl3gvoZoYT9Dtwu7EO+E1lJJYF1L
MELDkWFzcOm/Jit9DY12LVGoETUoMEycB9880dtDx26NMYUBtmAlR1WcdigN/VUH
LcJecJ5YYrHo3xRV0v04HrFpsxVPwg5FLaqQLPI06I/PX9gaGzd4Qhh3vtFEiRSP
/Z0tY6YvFH7k+jyzNKu/JDEVwIAuPrDcivXLJXsfMDbJjHx+a/5/bmsa+b7Y+2EL
okxajsm9kYMC3a/O+kC2dkEPaI2Tj1gGzunOwvLVOH1D7A==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:01 2026 by rpki-client