Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CYHBM39GxmVEBkmqSg6YTSGUxq8.roa
File: CYHBM39GxmVEBkmqSg6YTSGUxq8.roa (raw, json)
Hash identifier: YDMd46TKiNOk+bTh26sbpjtC5leB7qpo85mheltI3Qg=
Subject key identifier: 09:81:C1:33:7F:46:C6:65:44:06:49:AA:4A:0E:98:4D:21:94:C6:AF
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F3461AE9A59EB1B12F39B6FC6BB5
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CYHBM39GxmVEBkmqSg6YTSGUxq8.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15600
IP address blocks: 194.209.56.0/24 maxlen: 24
195.65.217.0/24 maxlen: 24
212.243.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:46:1a:e9:a5:9e:b1:b1:2f:39:b6:fc:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0981c1337f46c665440649aa4a0e984d2194c6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:d1:ae:2f:4a:a3:cf:61:50:c6:02:d9:55:
75:f0:82:10:57:03:51:e1:2a:2f:72:d2:63:4b:22:
74:f1:98:7a:b1:84:99:e5:67:de:b0:2e:70:a7:b2:
5a:39:d1:69:98:b4:ea:c7:82:76:5b:4d:40:5c:3d:
ab:80:63:73:b6:68:06:7d:86:df:3a:e9:b1:3c:f4:
fb:d1:da:e6:01:17:2a:f4:78:81:51:05:65:a9:bc:
89:05:4a:ea:0c:1e:1d:55:05:18:e9:1d:38:1a:a5:
be:ae:d9:78:62:84:ef:a9:e8:8f:b9:5f:58:ae:4c:
34:f6:2b:b6:d3:e9:d1:36:38:d9:fe:51:d5:76:27:
86:a2:fd:c5:04:17:6b:30:e3:bd:d2:f1:1c:33:5d:
c0:50:32:fb:77:da:7f:77:ee:66:08:59:c3:ee:e1:
b5:15:c1:46:11:32:9f:3e:66:17:4a:4f:9d:72:85:
1e:a0:08:0e:5d:0a:83:d7:6c:e9:76:14:10:35:c7:
b3:eb:0c:3e:b9:bd:3e:c3:2a:99:a9:a2:b5:16:ea:
19:0b:8d:cc:ba:b8:87:f6:10:2e:96:de:e4:10:bd:
18:39:af:cb:1f:35:c8:a0:d2:be:96:3f:cb:ac:50:
af:09:d3:09:da:d0:1b:f5:63:ca:a6:e6:5a:6f:0b:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:C1:33:7F:46:C6:65:44:06:49:AA:4A:0E:98:4D:21:94:C6:AF
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CYHBM39GxmVEBkmqSg6YTSGUxq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.56.0/24
195.65.217.0/24
212.243.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b4:60:2b:c4:fb:65:89:54:95:19:b8:e1:95:5d:5e:f0:dd:
76:71:9b:15:31:70:ee:af:21:99:1f:88:d7:c3:c4:2b:2e:16:
f2:13:a6:21:39:e0:84:4b:0d:0c:e0:80:4b:11:32:31:1b:d0:
7d:c2:c5:c7:b9:9c:0a:56:af:e1:33:7b:6c:c1:7e:5c:8f:09:
fc:16:41:16:e1:d7:d3:a1:0e:3d:09:22:fa:0e:d6:95:5c:24:
a3:25:e2:e8:e7:5b:5d:a1:2c:43:e4:59:ea:0d:7d:5c:1d:35:
eb:e5:2e:ea:02:f8:cc:34:7c:14:ac:1c:ef:df:b0:2a:3d:89:
97:45:33:44:56:10:ac:d0:e5:b3:be:f7:ec:df:5f:40:be:a6:
e8:b0:e0:dd:5d:65:05:35:1e:f2:df:d0:72:a9:c5:6a:ff:1d:
73:db:c4:6a:97:89:8b:79:96:ed:ae:e0:57:96:45:15:34:18:
7d:16:4b:f7:14:c3:fa:da:09:84:7d:95:dd:74:eb:d4:05:e4:
04:48:c7:b5:96:03:f2:09:ec:34:a7:48:f1:93:b7:fb:22:c8:
e2:7f:52:c1:d3:85:21:ff:db:9d:6f:a9:09:7c:96:52:b4:c8:
7a:82:04:ba:42:1f:b1:85:b4:e1:f4:4e:cb:02:c9:56:47:6b:
92:48:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:43 2026 by rpki-client