Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ab6V7-y8n7krYm4hYX5lu-QwfGc.roa
File: Ab6V7-y8n7krYm4hYX5lu-QwfGc.roa (raw, json)
Hash identifier: 7H+ksUYLT6VlKQQ7tfyD7ob0PbfhymHUIzPfj4t8x1U=
Subject key identifier: 01:BE:95:EF:EC:BC:9F:B9:2B:62:6E:21:61:7E:65:BB:E4:30:7C:67
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690983064E359E4CA204910208442F
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ab6V7-y8n7krYm4hYX5lu-QwfGc.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199225
IP address blocks: 212.243.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:83:06:4e:35:9e:4c:a2:04:91:02:08:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01be95efecbc9fb92b626e21617e65bbe4307c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:1f:58:9d:51:aa:08:03:7b:ee:38:1a:f3:
29:93:48:6c:d4:cf:a9:40:ec:74:0d:7f:86:8b:b2:
3d:37:51:af:49:55:52:34:3a:a3:7d:4b:34:5f:83:
c3:4b:84:26:ca:3e:d8:55:f5:35:48:39:4f:8f:2e:
f2:bd:77:79:30:bc:a5:7c:90:cb:98:29:f0:89:49:
4c:cf:fe:ee:fc:d7:47:d1:7c:b2:af:29:65:2d:a3:
77:56:3c:3b:3e:ad:06:22:3d:dd:11:a9:4e:11:21:
73:65:54:f8:71:a1:38:03:0d:53:ad:e8:04:86:29:
c1:06:dd:b3:74:23:7c:24:32:83:dd:e7:77:be:2b:
73:c5:ab:e6:7a:22:f9:1f:c6:70:77:f4:30:7f:e4:
25:52:b9:2d:41:e7:19:3a:12:36:db:46:e3:34:dc:
b5:13:8f:cb:7e:14:3f:95:45:8b:84:b3:84:86:26:
cf:10:18:0f:fa:09:79:70:f4:57:21:0d:32:6d:35:
1f:4e:26:9e:d0:d9:bb:c2:3b:6b:57:1a:87:be:fb:
04:6a:af:8e:d5:3b:a8:e9:61:df:c5:2f:4b:b8:71:
95:49:b6:be:94:81:7a:8a:a5:8a:96:7a:11:ef:b3:
81:22:d6:32:58:5b:7c:5c:81:ea:d7:f6:b9:7e:eb:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:95:EF:EC:BC:9F:B9:2B:62:6E:21:61:7E:65:BB:E4:30:7C:67
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Ab6V7-y8n7krYm4hYX5lu-QwfGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
09:39:35:77:01:80:6b:c3:fb:ae:a4:46:ff:b5:75:bb:de:57:
82:34:a5:a9:00:92:61:fa:dc:ca:3a:2c:e8:7c:58:be:30:0b:
24:25:25:b6:55:c8:aa:f3:17:2b:84:d0:87:8d:6a:82:bf:28:
b6:2a:65:17:9a:fa:6a:e4:dc:37:71:a8:df:4a:ed:50:f9:2d:
1f:fc:40:6a:8f:49:47:99:48:a6:d0:46:2c:2f:15:14:4e:6f:
bc:a5:ef:26:5e:32:2e:2d:c3:9d:71:49:cc:b6:28:bf:fe:08:
a6:c5:9e:08:2b:a7:65:6a:c3:b5:12:12:dc:c9:ac:3d:93:16:
ea:3d:80:da:bb:6f:8a:72:c5:d0:be:8c:81:1c:f6:11:8f:f1:
ed:e3:33:5f:ce:bc:30:50:39:22:43:cd:ab:22:e7:30:93:41:
8a:3e:f4:44:79:00:94:f8:24:b9:49:a2:ac:66:25:2a:d0:83:
1a:d9:ee:44:23:1d:db:cb:ed:50:fd:55:33:03:5f:85:ab:d1:
82:51:6b:b3:7a:25:dc:a8:e1:79:60:33:37:25:f4:1c:2f:3f:
80:76:1e:47:b5:01:14:ed:df:de:84:a7:26:e6:7f:a8:90:60:
7a:7f:c0:69:29:d4:f9:eb:17:62:8e:dd:ad:7a:43:ab:e0:03:
20:64:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:32 2026 by rpki-client