Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D-f0aRZ4D-Q_MH4UPoal9EXHLcE.roa
File: D-f0aRZ4D-Q_MH4UPoal9EXHLcE.roa (raw, json)
Hash identifier: U2Vqji/2Ruc4OnMkjC3EPMzFyT/NvJQBdb2ShxMKP6I=
Subject key identifier: 0F:E7:F4:69:16:78:0F:E4:3F:30:7E:14:3E:86:A5:F4:45:C7:2D:C1
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691BCC8A227CBB459EA4F8A85EDF93
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D-f0aRZ4D-Q_MH4UPoal9EXHLcE.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212823
IP address blocks: 194.209.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1b:cc:8a:22:7c:bb:45:9e:a4:f8:a8:5e:df:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fe7f46916780fe43f307e143e86a5f445c72dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:f6:34:3a:43:ae:7d:c0:80:f4:f2:f3:80:
cd:b3:12:e6:f7:a8:c6:6a:b0:cb:3f:45:50:78:1e:
a5:0b:03:da:18:8a:be:78:a1:bd:b4:95:55:6c:ba:
81:cf:a7:fe:62:e7:83:84:77:93:2f:43:41:4e:72:
19:53:bf:ec:c6:be:77:a1:19:c3:9b:6f:ee:db:84:
5d:b5:40:d1:44:fb:60:6a:90:03:7a:6b:a6:57:50:
16:5c:9a:ec:20:14:de:46:00:cf:bb:ea:71:26:ed:
af:2c:8e:10:6e:41:34:ca:cb:6d:24:3b:a5:43:36:
a1:e9:ff:49:ae:64:09:d1:66:c2:94:c3:d6:fb:47:
0d:11:1e:00:35:c6:aa:db:7f:f2:93:09:4e:f2:e7:
52:f3:f6:f2:35:16:f3:bd:4e:59:67:80:d7:37:de:
50:ac:60:e2:87:11:4d:85:46:f5:e6:80:92:68:81:
09:6f:1d:30:bc:8e:3f:23:83:a1:ea:87:fc:23:a1:
4e:18:f1:39:83:4b:75:2f:85:50:ed:1d:d2:e0:e2:
5d:cb:42:99:86:c2:78:ae:5f:74:c2:ec:0d:f4:d5:
b4:16:c3:64:2d:39:e3:c5:a4:df:6b:4e:88:89:7b:
8e:b5:d4:26:8d:2e:0c:92:42:45:b6:da:85:c2:58:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E7:F4:69:16:78:0F:E4:3F:30:7E:14:3E:86:A5:F4:45:C7:2D:C1
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D-f0aRZ4D-Q_MH4UPoal9EXHLcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.192.0/23
Signature Algorithm: sha256WithRSAEncryption
18:1d:b5:d5:68:1c:e5:4b:6e:b3:cb:6e:95:5e:6a:49:3e:86:
53:44:ef:f9:86:1a:a8:e5:3b:38:fd:5f:12:14:6d:71:8a:0e:
a3:c5:01:e1:fc:4c:c1:54:42:1d:28:d8:5b:b7:f8:87:b0:6d:
4e:07:ec:55:6d:03:56:fe:74:e8:31:52:7f:32:69:fd:a9:6d:
f6:ed:d2:d6:7a:7c:fc:32:42:5e:d9:9a:64:92:09:6a:a2:4b:
4e:87:fe:9e:b2:d2:b3:87:c9:33:ab:d2:00:12:36:44:1c:b2:
3f:26:ab:af:bb:c0:f5:c1:9a:90:02:a0:e6:99:c6:8d:82:de:
15:4d:f7:92:a2:a4:cf:84:bb:0c:1b:fe:a6:8e:1e:ef:2e:17:
2c:a9:90:f3:2a:ea:c0:99:cf:06:6b:e2:81:bf:03:c1:ad:d4:
3a:f2:98:db:e6:b9:a1:09:3f:da:fe:38:53:55:dc:26:99:6c:
d3:ef:fd:87:8b:2d:ab:0b:ec:91:2a:0f:36:a4:13:32:1d:8c:
f7:84:6a:21:2c:0f:50:2f:a8:ee:21:f3:33:10:7c:53:bc:0d:
8c:fe:f4:6c:28:5d:d8:d6:97:72:53:5f:ac:31:c7:49:a1:61:
09:eb:3a:09:0a:82:1a:10:f8:29:a8:dc:5e:a4:14:b0:8e:55:
35:39:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:00 2026 by rpki-client