Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9fv5TwwkJAAKHyG92cYkXoEPcUY.roa
File: 9fv5TwwkJAAKHyG92cYkXoEPcUY.roa (raw, json)
Hash identifier: 2e3gGJy+lwomea2/XCF544Fux8zFqZrmuFwedyD7CBw=
Subject key identifier: F5:FB:F9:4F:0C:24:24:00:0A:1F:21:BD:D9:C6:24:5E:81:0F:71:46
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FE49A0C0B3576692E7805710E972
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9fv5TwwkJAAKHyG92cYkXoEPcUY.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35276
IP address blocks: 194.6.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:49:a0:c0:b3:57:66:92:e7:80:57:10:e9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5fbf94f0c2424000a1f21bdd9c6245e810f7146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:74:8f:00:f7:bc:b5:b6:71:97:fd:cd:87:
61:02:76:8b:11:5a:72:65:e1:22:0b:27:f1:64:c0:
4e:38:fe:4f:1b:f5:bb:32:db:b1:18:95:3a:6f:d5:
fe:70:26:cb:35:49:e5:98:5a:c4:10:2f:b8:32:60:
6e:0b:0f:42:70:3e:e4:1e:3c:ac:67:15:62:1f:a3:
e7:7e:ed:db:3d:04:e7:43:f4:f0:54:45:13:d5:f4:
8f:08:88:46:a7:28:e1:64:01:c6:f3:75:4a:dc:ed:
f6:6e:7a:c3:0b:97:de:ed:ad:33:30:fb:ce:f9:fb:
70:b7:ef:a1:13:38:ea:09:9b:51:6b:4c:88:f3:1a:
03:91:0f:77:4c:a3:87:60:a3:80:33:d7:a3:18:79:
1b:5d:10:fe:92:08:8e:37:2b:4d:fb:f9:83:f2:22:
02:da:c0:a2:60:0d:5d:5c:ff:ac:c3:57:5d:f0:53:
93:ce:8c:62:97:d4:d9:4b:e7:bd:4e:45:1d:3a:e5:
89:6c:76:17:20:13:c1:51:92:5d:4a:d9:68:67:8c:
83:c0:f3:db:2c:c3:fc:50:a0:79:40:e4:73:51:2f:
e2:47:1f:68:fa:a8:ba:91:aa:d2:49:e1:c7:eb:6c:
f8:63:da:f9:47:cc:63:ec:52:47:49:ad:11:fd:2f:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:F9:4F:0C:24:24:00:0A:1F:21:BD:D9:C6:24:5E:81:0F:71:46
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/9fv5TwwkJAAKHyG92cYkXoEPcUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.179.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ad:cd:71:16:75:b2:1a:07:bd:38:45:0e:be:74:34:e9:ce:
81:bb:40:27:10:ff:a2:f0:da:b0:e9:b8:e4:5a:8f:0d:c9:9c:
a3:70:fb:12:0c:5a:48:a7:f5:10:d7:a8:e6:89:09:1f:b3:c7:
d7:86:8d:ef:dd:26:73:b8:41:25:b6:3a:a6:35:01:6a:75:1d:
aa:fc:70:7c:4b:f7:b8:c5:dd:53:3c:71:b7:31:16:f1:d0:5c:
ae:6b:41:d6:63:18:7d:d7:9f:cc:5b:44:16:34:63:d1:75:9a:
15:7c:ee:38:7b:a3:81:22:eb:b9:44:09:94:de:30:62:f0:be:
46:f1:3a:17:3a:9f:0c:ff:33:34:48:fa:9d:2c:41:a1:0c:c9:
e1:31:6d:e7:53:37:96:4b:a3:2f:27:75:39:18:0f:21:72:99:
06:93:4f:10:38:58:c5:7d:fb:28:d3:3f:18:c4:34:c7:f3:47:
8b:dd:a2:ee:8e:12:f6:f8:4f:cd:ed:9a:50:2d:d6:64:74:75:
4b:ef:90:89:15:c8:b8:03:d1:38:8a:35:92:32:a7:6f:64:81:
0b:8c:4f:e1:ae:ea:4c:50:1f:0f:0d:56:3e:c1:47:f5:98:90:
01:b0:3d:17:43:aa:64:6a:88:4a:c6:22:0d:54:e2:91:74:3c:
5c:fd:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:56 2026 by rpki-client