Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D_T9V7ncsqMaHFofpNJgq0vYpI0.roa
File: D_T9V7ncsqMaHFofpNJgq0vYpI0.roa (raw, json)
Hash identifier: pbIVgB48IhNBNCTlPBQ4hUpJM+FG5AxioZsjH1Eaqoo=
Subject key identifier: 0F:F4:FD:57:B9:DC:B2:A3:1A:1C:5A:1F:A4:D2:60:AB:4B:D8:A4:8D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236900B6679C9FF70932E10647D9FA4B
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D_T9V7ncsqMaHFofpNJgq0vYpI0.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47538
IP address blocks: 212.243.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:b6:67:9c:9f:f7:09:32:e1:06:47:d9:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff4fd57b9dcb2a31a1c5a1fa4d260ab4bd8a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:67:87:2b:0f:dc:fc:88:c5:e7:4a:e2:d5:
f4:1f:f2:5e:1d:b6:ec:5a:91:5c:f7:cf:df:14:7f:
f8:e1:8b:3c:3e:e8:f3:94:c0:fd:3a:0f:e8:a4:07:
dd:7f:74:32:23:34:16:f5:da:3b:3c:f5:80:2f:e7:
25:ff:58:e5:40:e4:4d:5a:dd:22:2d:1c:31:b6:6d:
c3:14:24:e2:cb:79:72:b2:18:8c:b6:e0:1a:1c:84:
91:16:05:dc:de:c3:48:67:ad:0f:b4:d8:e9:fd:2d:
33:3c:3b:73:e9:ab:ae:f2:10:e2:cb:31:c6:1e:17:
8a:18:1a:e0:a9:20:35:cf:0e:d8:6a:7f:c4:2c:7e:
1b:bd:f7:8e:82:7b:25:b7:67:66:aa:32:95:df:7d:
00:3d:1b:46:81:6d:54:af:bf:09:03:a0:53:50:b7:
d6:f4:22:c9:30:f8:18:67:73:30:1f:f2:b7:cb:a2:
6f:7f:c0:dc:8e:e2:58:57:7e:12:8f:3a:d8:47:fd:
a5:c0:d4:b3:b5:b0:c9:20:86:39:f7:72:43:ae:e3:
bc:66:27:98:df:61:8d:cc:b8:e4:21:10:92:11:46:
43:20:54:4b:35:1e:5e:1f:64:4c:4c:2e:4c:65:e8:
aa:43:5e:f9:45:df:ee:e6:38:17:3b:5f:39:4f:df:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:FD:57:B9:DC:B2:A3:1A:1C:5A:1F:A4:D2:60:AB:4B:D8:A4:8D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D_T9V7ncsqMaHFofpNJgq0vYpI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f9:71:ed:28:fb:17:35:ac:7b:b8:fa:91:26:91:c5:f1:e2:
c9:9f:60:52:79:ba:5d:73:41:90:a5:ee:9e:44:49:1a:d1:58:
c1:19:53:5b:ae:1a:65:f0:93:4a:5a:90:f2:53:e5:b9:0d:26:
80:a1:39:ba:ad:21:94:4b:48:82:29:d8:c5:fb:66:74:90:1d:
f6:dc:b1:1a:62:68:4a:19:6f:61:93:c1:b5:14:db:49:2e:e7:
5b:0d:bd:de:bd:b1:f5:be:e8:a8:9c:ae:0a:63:47:2d:81:9a:
d0:28:5b:ee:f5:bc:22:1f:fe:67:e0:68:d3:a9:c8:d8:cd:64:
4c:09:d9:2b:23:b2:07:b6:2a:ab:71:24:6d:7b:c6:1a:31:16:
cd:65:c3:df:b7:99:c4:4e:99:ab:fc:ca:4b:ee:a3:af:e0:32:
55:e8:a6:67:02:56:f9:1c:59:65:89:c3:b5:fc:7e:95:a8:43:
c3:73:ac:02:53:49:e0:af:7b:e6:06:31:ff:b7:2a:cc:e4:81:
b0:34:98:09:4b:9e:2d:61:dc:79:bb:22:9d:24:c5:0f:53:de:
b7:bd:47:cc:c2:f2:6e:d9:c7:1c:6c:f6:d4:30:9a:7c:64:6b:
37:bf:56:55:4b:89:12:6e:11:9f:b7:00:81:fd:a5:71:36:c7:
c4:6d:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client