Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OIvhZ9af0xuxZ4IAlTpOsLa5A9w.roa
File: OIvhZ9af0xuxZ4IAlTpOsLa5A9w.roa (raw, json)
Hash identifier: uXbW7KZrc6AOvOyBcy+HT33ScXn55J4SFAukM9/CEfo=
Subject key identifier: 38:8B:E1:67:D6:9F:D3:1B:B1:67:82:00:95:3A:4E:B0:B6:B9:03:DC
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F0B7F3F0871DE500FB24B9D19330
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OIvhZ9af0xuxZ4IAlTpOsLa5A9w.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12511
IP address blocks: 195.65.34.0/23 maxlen: 23
195.65.34.0/24 maxlen: 24
195.65.35.0/24 maxlen: 24
2001:918:ffeb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:b7:f3:f0:87:1d:e5:00:fb:24:b9:d1:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=388be167d69fd31bb1678200953a4eb0b6b903dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:42:fc:44:61:17:a9:d4:e5:03:26:b5:fd:
a5:11:85:31:10:22:3f:87:12:ca:7a:f5:e3:e0:f2:
75:6e:0b:3d:e5:22:97:26:93:b1:aa:5e:f2:b9:b3:
9f:cc:da:ea:d2:f7:40:59:4f:ae:f8:cd:a3:15:69:
a9:92:9c:fd:66:0a:1a:cf:45:96:eb:d1:63:35:31:
f1:bc:5c:6c:49:9c:f7:9c:f2:e5:e8:66:f2:ee:63:
f5:7b:ec:f0:37:9c:36:f1:61:0c:3e:a7:09:b9:fc:
89:9d:21:be:70:6d:c4:86:34:a8:65:4b:78:8e:05:
29:1a:df:f4:52:dc:67:bb:78:48:c6:46:73:74:af:
a1:0c:df:79:8d:60:a0:ce:14:24:8c:43:49:c7:cb:
a2:a9:ec:82:11:b3:43:54:e7:4e:64:c0:ec:28:1a:
7c:45:c2:74:4e:7c:54:da:73:43:ff:2d:8d:8e:e4:
eb:6a:36:f1:98:af:ed:b8:5c:0b:79:2a:18:f5:34:
5f:e9:b5:b8:dc:05:8e:46:ef:d9:eb:09:fa:d1:82:
4f:48:09:e0:d7:01:35:6c:3b:58:ee:12:41:fa:46:
d0:10:63:f4:f1:ce:c6:1c:ab:52:67:4a:53:30:23:
9c:6f:41:fd:25:cc:9d:f9:74:78:e2:81:fd:0c:f0:
3d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:E1:67:D6:9F:D3:1B:B1:67:82:00:95:3A:4E:B0:B6:B9:03:DC
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OIvhZ9af0xuxZ4IAlTpOsLa5A9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.34.0/23
IPv6:
2001:918:ffeb::/48
Signature Algorithm: sha256WithRSAEncryption
7b:89:fd:76:f0:ea:2d:a2:81:05:13:b2:39:d0:97:27:fe:5d:
10:50:fa:80:fb:8a:b9:de:6d:64:69:89:95:a5:98:bf:3b:82:
82:99:7b:f2:3e:b0:b6:f2:85:d4:05:ae:73:30:4b:f7:5b:51:
68:7d:d9:4f:90:ca:2d:db:e9:f1:f6:5a:e4:9a:07:01:84:5e:
6c:cc:a3:69:71:fa:da:e7:17:f0:ad:96:f9:c4:51:ac:e7:46:
1c:58:56:80:ec:5b:32:53:93:9e:cf:3c:24:ca:8d:12:24:06:
69:11:ce:65:84:fe:a4:1e:93:cd:e9:f9:da:c0:61:84:d5:0f:
0a:23:ca:d5:32:cc:4e:a0:c9:30:0a:c1:45:1c:82:62:9d:e9:
34:e7:a3:cf:ac:27:f3:5b:6e:24:a5:05:bc:4a:d5:c6:24:b2:
92:0e:14:a8:05:55:cb:56:af:3b:8d:f2:2d:9e:81:dd:73:f6:
cc:56:bd:63:31:4c:c2:bc:f0:24:b9:0b:fb:08:c5:6d:0e:ae:
d1:0b:7d:54:f6:2a:f5:b8:47:ea:93:c2:bd:52:30:e2:fd:9b:
b7:b4:b1:fd:36:d1:b8:11:79:d8:9d:15:43:fe:e2:c0:20:99:
8a:4e:b5:64:a2:2d:1c:e4:89:be:cc:fa:3f:1a:eb:46:a8:bf:
f9:65:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:22 2026 by rpki-client