Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CzhTy6I9sb5aVRUB89w84CsDMVA.roa
File: CzhTy6I9sb5aVRUB89w84CsDMVA.roa (raw, json)
Hash identifier: dq4+DUpMjGx6FoWLjs31FtjoI0ZJ8wPT3BPBGWCh8k0=
Subject key identifier: 0B:38:53:CB:A2:3D:B1:BE:5A:55:15:01:F3:DC:3C:E0:2B:03:31:50
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690620B8F117ABF05EE34A3FDF12AB
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CzhTy6I9sb5aVRUB89w84CsDMVA.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51820
IP address blocks: 138.188.136.0/24 maxlen: 24
138.188.138.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
194.209.67.0/24 maxlen: 24
195.65.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:20:b8:f1:17:ab:f0:5e:e3:4a:3f:df:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b3853cba23db1be5a551501f3dc3ce02b033150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:fd:04:25:44:f7:bf:35:fb:6a:d7:35:88:
ca:4e:83:16:39:15:c2:91:af:7f:2f:33:82:24:dd:
0a:61:74:aa:54:8f:dc:b0:ea:ff:32:c0:d5:b9:0c:
38:76:f4:07:18:a5:fb:5d:9d:59:cd:82:99:79:5c:
d3:75:23:2e:70:cd:c5:aa:f1:41:90:36:73:58:3e:
fc:63:72:55:d5:4b:c1:51:9c:d3:81:84:6f:7b:c3:
0e:7f:fd:6c:4f:09:0f:33:68:43:87:3e:24:fa:16:
16:5e:89:92:8f:bb:95:8b:c4:fd:12:86:14:d4:84:
57:51:8e:3f:d8:64:c4:2f:a0:ff:04:ee:0b:3d:4b:
c6:ad:67:72:4d:03:81:f4:9d:47:28:81:e0:f5:fe:
b8:4d:90:c3:7e:44:ba:4f:4a:d3:ea:29:ea:96:2e:
50:fb:4c:96:8d:b0:d3:a0:76:00:29:92:14:bc:64:
1b:f6:fa:64:56:05:82:e9:d6:cd:36:9e:df:f7:f5:
ea:c7:a3:78:1e:a6:73:77:f7:d2:4c:11:9e:18:05:
8f:8e:15:ef:bf:86:b6:a6:a5:03:d8:85:a9:ad:b3:
94:46:c3:d5:72:2f:69:3c:00:51:9f:60:4b:60:a7:
75:a6:0d:f4:da:db:45:63:9c:4a:ce:c7:e2:89:de:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:38:53:CB:A2:3D:B1:BE:5A:55:15:01:F3:DC:3C:E0:2B:03:31:50
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CzhTy6I9sb5aVRUB89w84CsDMVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.136.0/24
138.188.138.0/24
193.5.63.0/24
193.247.90.0/24
194.209.67.0/24
195.65.47.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3b:d7:a6:1e:ab:7e:73:3a:f5:eb:cd:c0:86:f4:b6:c6:4b:
4d:a8:86:fb:e2:f3:34:ee:1b:51:61:5c:26:b7:49:51:e9:33:
97:ee:5f:af:f6:9a:75:36:d3:c7:28:20:fd:22:c2:50:a3:ff:
f3:65:91:d0:85:97:d3:cd:6a:61:5a:1a:c1:6e:42:6c:07:c6:
56:2f:ec:e4:8b:9b:ba:cf:6c:88:6d:43:22:35:81:c1:31:fb:
92:9b:47:cd:23:86:2f:d0:b2:8c:71:4f:03:a5:95:2b:d0:97:
47:2a:a9:72:a4:bf:94:cf:1f:58:12:13:32:a0:29:aa:33:07:
d8:bf:e0:85:e1:d4:31:ae:21:f8:ec:ee:f8:d1:c1:67:cf:65:
e8:07:c5:d3:ed:ee:7c:4e:ba:65:c8:19:5e:45:02:b1:70:5b:
f5:51:0d:16:44:fa:7d:5e:55:47:7a:d7:5a:38:3b:c0:05:80:
51:65:ff:a2:35:86:d5:5b:d1:6f:81:aa:aa:7e:2f:76:39:47:
05:74:69:76:ff:be:cc:04:4c:8a:7f:a3:f6:74:2c:f0:f3:aa:
0c:fd:7e:f7:50:f0:6f:60:3b:cb:65:fa:2f:d2:c8:9e:9d:83:
e3:e0:8b:fa:bd:1d:93:b2:10:74:ee:e5:3f:3c:d1:40:e9:be:
8b:c3:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:54 2026 by rpki-client