Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/P1mh2yCNhFV_jBIx5sIW8EqYdA4.roa
File: P1mh2yCNhFV_jBIx5sIW8EqYdA4.roa (raw, json)
Hash identifier: bO4HCej+SXcDrjzwW/Twt1Jbo2s1HrsiEnziugJDGuE=
Subject key identifier: 3F:59:A1:DB:20:8D:84:55:7F:8C:12:31:E6:C2:16:F0:4A:98:74:0E
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690116AB21EF815A842FC0BA81491A
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/P1mh2yCNhFV_jBIx5sIW8EqYdA4.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47803
IP address blocks: 217.192.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:16:ab:21:ef:81:5a:84:2f:c0:ba:81:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f59a1db208d84557f8c1231e6c216f04a98740e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:09:3f:60:65:4f:19:36:00:d1:54:ae:5f:
41:82:94:54:36:ae:87:59:07:b8:57:bb:91:2a:89:
98:c4:0d:b5:01:fe:89:82:66:8e:83:4b:8d:6c:be:
3c:b0:de:4b:df:ed:01:17:4b:50:e2:9b:78:28:35:
0c:b0:44:0d:9a:38:13:ae:70:9d:8f:56:93:63:23:
23:ca:58:c8:6a:3e:5a:a4:64:9e:d9:d9:f7:3e:e3:
34:f1:3c:3b:cf:ae:6a:0a:c7:56:be:70:4c:09:bc:
76:32:22:41:7b:ee:99:11:29:c5:8c:1d:4b:e6:de:
61:2e:a3:c5:b3:16:3d:f1:41:d7:8f:f9:40:1d:58:
4a:b7:4a:bb:59:b8:2f:4a:02:86:bb:b5:f8:02:c2:
89:02:81:d8:cb:51:15:15:86:48:0b:a6:5b:e8:a9:
23:2f:18:a0:55:81:1b:6d:13:3b:f4:13:0a:c2:1d:
1f:c5:65:dd:7f:38:dd:f6:ae:df:0f:33:f0:7c:59:
62:7f:2f:be:37:32:4a:26:ac:76:f6:25:dc:13:98:
f9:e1:74:b0:e6:a9:9b:89:7b:06:18:8b:a5:e6:79:
f1:24:f0:4b:66:08:97:cf:28:82:4b:84:22:ec:eb:
b9:fb:9c:cf:3d:27:53:38:11:9a:ad:e3:92:80:aa:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:A1:DB:20:8D:84:55:7F:8C:12:31:E6:C2:16:F0:4A:98:74:0E
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/P1mh2yCNhFV_jBIx5sIW8EqYdA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.92.0/24
Signature Algorithm: sha256WithRSAEncryption
39:68:ef:be:b3:61:2b:74:ab:dc:74:77:86:f6:c3:74:bf:95:
ec:d7:1b:aa:d1:03:87:db:a2:d7:dc:c5:15:19:30:1f:2b:a5:
ae:f7:7f:49:02:38:d2:2c:7f:13:e9:e2:83:eb:6f:67:e6:ae:
50:3d:e3:f6:c0:ca:6c:8a:9c:d0:a0:a1:4a:9c:76:fe:2d:ae:
67:da:20:f2:78:c9:ad:95:0a:39:d0:3b:25:e8:85:b1:87:ff:
51:9e:1f:20:95:27:ca:a6:18:49:d8:24:79:3e:54:c4:e7:74:
1d:3c:d1:c9:6f:4a:5e:86:6b:1e:9a:85:bc:8d:6f:e4:a8:0e:
de:b2:8d:f7:56:01:4b:e2:84:47:0e:d3:9e:04:1a:28:b5:7c:
99:4e:30:43:f5:93:cf:35:66:fc:8c:4a:47:ca:55:7f:7f:da:
1f:d9:96:4d:5c:12:ab:5b:07:97:74:7c:af:e2:a5:48:7d:ac:
58:2c:58:4e:51:88:7f:2c:c0:7d:c8:c3:d7:63:8d:75:76:8d:
5f:03:21:8b:d9:52:93:cd:e9:84:c6:4c:9b:30:30:45:4c:98:
88:56:0d:4a:5d:01:f7:c9:11:3e:a8:34:83:bc:df:21:f7:99:
65:72:d4:3b:b3:d5:0b:7e:1e:40:23:3f:85:dc:de:6d:4b:08:
63:00:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client