Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DDaGsRZh-luJEWpcLalSCOzMfk0.roa
File: DDaGsRZh-luJEWpcLalSCOzMfk0.roa (raw, json)
Hash identifier: b3QdNgXLf9elgJF5kgNM/X+E5xt3es694EJQjy2dp5A=
Subject key identifier: 0C:36:86:B1:16:61:FA:5B:89:11:6A:5C:2D:A9:52:08:EC:CC:7E:4D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690F6D8A1D81C71BCDAA1A5772C52E
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DDaGsRZh-luJEWpcLalSCOzMfk0.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203104
IP address blocks: 194.209.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:6d:8a:1d:81:c7:1b:cd:aa:1a:57:72:c5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c3686b11661fa5b89116a5c2da95208eccc7e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:29:24:3f:13:8d:c9:22:21:2f:05:2f:fd:
cd:80:b3:2b:06:e2:7f:78:1f:ae:e1:a9:1c:b3:fc:
3c:82:db:88:36:8f:ae:ee:90:43:f1:f8:52:9b:85:
35:a8:87:cc:c9:a2:6a:fa:13:fe:ea:31:5a:87:96:
e7:41:55:e3:dc:70:67:3d:da:2b:33:43:80:36:79:
12:3c:db:4d:89:aa:85:3e:74:ed:5b:30:6f:38:b0:
2c:50:35:ca:1b:4a:62:90:75:f8:78:a5:05:17:75:
e8:21:fe:ca:2d:7d:9c:37:e1:4f:83:58:20:27:ab:
1c:88:cd:db:e1:5f:ab:b2:3e:9e:eb:03:b5:c3:19:
39:cf:30:e0:3d:29:18:8d:b5:89:df:83:a4:91:36:
be:d6:40:3e:fd:d6:b4:04:77:74:25:a7:5b:08:ed:
55:d9:f4:eb:95:f5:39:71:f7:2a:26:c2:d7:d9:31:
b8:7a:bc:57:4c:80:43:2c:ad:b0:2e:c7:76:e6:e2:
38:57:87:2d:6d:40:d5:76:97:d8:89:e6:5c:9f:2d:
b6:61:6f:59:18:ac:d3:1b:47:e0:f9:8c:64:bd:12:
dd:b2:99:e1:71:ba:38:15:98:53:75:90:d3:fd:9c:
0c:6a:9a:f7:74:2f:03:56:97:5f:12:de:81:62:8f:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:36:86:B1:16:61:FA:5B:89:11:6A:5C:2D:A9:52:08:EC:CC:7E:4D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DDaGsRZh-luJEWpcLalSCOzMfk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
92:60:08:07:2a:6e:76:25:92:4c:22:f4:d1:c8:04:e2:5b:61:
c9:a7:61:47:da:c4:4c:99:c9:13:83:02:23:41:19:f5:0c:10:
a4:bc:0c:bd:cd:9f:83:11:67:dd:93:21:26:c0:42:62:dc:d4:
bd:13:d2:94:21:d8:b7:e0:00:ac:0a:bf:9c:d8:72:79:22:5e:
5f:43:9b:f4:c0:1e:2a:e0:cc:23:cf:ca:e4:b5:d4:6d:da:f6:
ce:8e:c9:98:af:20:37:f9:de:b5:5a:fb:25:f3:56:3f:04:9e:
b7:29:4d:10:a3:3f:3a:de:f6:e9:0a:f0:31:2e:d7:ab:41:70:
a0:23:49:ef:a6:3d:59:a1:9c:f4:d8:d1:4c:66:c2:76:0d:ff:
c1:cf:fb:04:f7:f0:dd:b4:23:62:7f:16:2c:36:2f:ec:1d:0e:
02:47:3c:12:5b:8c:e0:6d:17:9a:58:1a:13:53:7c:e8:d6:ad:
61:4e:41:03:20:23:0f:b4:d9:22:8b:6d:8a:95:dd:c7:d8:63:
8f:4d:13:e7:62:64:33:f0:f4:bf:f2:06:c3:4d:03:f6:13:39:
c7:d2:cb:fb:e2:97:1e:52:7b:04:a1:3d:c7:5b:da:c3:06:4d:
97:ea:89:5d:73:26:9f:9d:1d:df:a9:da:7e:88:e9:7a:2b:5f:
cb:98:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client