Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/L2DZH_-19eBDXvhBwCTHdxJxTzo.roa
File: L2DZH_-19eBDXvhBwCTHdxJxTzo.roa (raw, json)
Hash identifier: eMJTgxOWbndfu2zcd62gNMpoMOiMxhRIvgeNw2RkrmU=
Subject key identifier: 2F:60:D9:1F:FF:B5:F5:E0:43:5E:F8:41:C0:24:C7:77:12:71:4F:3A
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690EF9A90053994DCF7627BAE9767C
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/L2DZH_-19eBDXvhBwCTHdxJxTzo.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203042
IP address blocks: 194.209.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:f9:a9:00:53:99:4d:cf:76:27:ba:e9:76:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f60d91fffb5f5e0435ef841c024c77712714f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:07:a6:0c:e3:c0:5a:5a:9a:6f:f2:d7:58:
a8:c4:6b:b8:13:c3:4e:88:a8:82:01:9e:e5:ae:ec:
65:70:ce:15:a7:ef:f8:a6:ab:29:95:c5:c4:4b:02:
65:95:8c:40:06:39:60:7d:0d:22:67:2d:ac:52:e6:
ca:85:9e:79:86:cb:37:e6:84:28:f8:d3:3d:81:41:
fe:6c:5b:be:b7:f6:c9:46:f7:4a:af:92:6a:68:11:
8e:27:fd:93:ac:a9:1f:3f:12:35:3f:75:11:cd:29:
4c:65:e0:81:6c:a1:b7:c3:d5:e0:76:7b:16:d3:c6:
e7:50:84:63:27:9e:00:e3:c5:e9:72:1f:43:d7:86:
56:0c:e4:1e:8e:3d:90:7b:c9:ee:bb:73:a5:b6:c8:
e4:17:8b:a4:73:c6:c0:72:2f:75:78:24:01:fe:fb:
6c:53:c8:d7:38:56:f3:62:a6:cf:b3:07:6b:ec:a0:
18:a0:08:e9:7c:77:73:c0:af:b7:15:72:bc:c0:86:
4a:da:d9:8f:1f:fc:98:c6:af:59:5b:2d:95:11:ea:
d7:7b:c2:c7:ad:74:54:a1:bd:95:42:54:52:ce:3e:
e5:b3:40:fa:70:d7:ed:9b:98:18:19:1e:15:47:f2:
c8:87:51:75:db:df:2d:3e:33:e3:b1:66:70:b4:84:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:D9:1F:FF:B5:F5:E0:43:5E:F8:41:C0:24:C7:77:12:71:4F:3A
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/L2DZH_-19eBDXvhBwCTHdxJxTzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.64.0/24
Signature Algorithm: sha256WithRSAEncryption
54:21:9a:6a:8e:41:a1:0b:2f:db:31:de:96:e2:2c:9d:c4:43:
97:cb:b1:f0:a2:e4:b4:3d:0a:04:3c:5d:54:6d:3a:85:e1:78:
87:7d:6a:a2:eb:e2:f6:97:fb:30:47:a3:d6:a2:6d:6e:11:d5:
25:9a:b0:17:3f:b8:04:1d:a8:79:8e:dc:ce:99:bd:8f:e2:d8:
93:8f:8a:0b:12:30:59:db:20:e7:c8:8e:ed:0d:05:f4:38:26:
58:e1:42:69:e3:cf:d5:22:84:2d:a8:24:d8:e2:20:53:db:d1:
e1:85:39:f4:15:ec:38:43:75:d8:4d:d7:96:96:57:78:0c:10:
0c:ab:e3:a8:fd:10:33:38:44:01:6c:28:d1:8f:f3:0f:28:75:
b8:fe:cf:ed:dc:4b:7b:3c:57:37:45:fb:7f:f6:62:89:bb:fa:
0a:3b:f8:d4:1c:e6:7d:9d:43:b1:3d:6d:45:75:75:ed:eb:1d:
cd:08:7a:46:30:f4:fc:a5:fe:71:bc:13:1d:59:8b:eb:dc:0f:
ff:b3:c6:a4:55:56:fc:4a:36:b3:30:62:ce:53:9f:dd:b3:0e:
91:cb:99:ca:f7:13:d3:94:c1:c1:02:85:18:7f:f0:76:56:38:
16:09:a4:e4:75:de:50:f9:01:30:0c:d5:b3:8d:93:73:c9:46:
64:5c:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client