Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PmzyZK8hi7ue5Az6V_4nZf_OhtQ.roa
File: PmzyZK8hi7ue5Az6V_4nZf_OhtQ.roa (raw, json)
Hash identifier: 3lqRIWqMp4yklhYwtYl2PJP7KsXGxnfsqUqAqgUmXbU=
Subject key identifier: 3E:6C:F2:64:AF:21:8B:BB:9E:E4:0C:FA:57:FE:27:65:FF:CE:86:D4
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369103EA49AF022A91E4EE6383286E4
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PmzyZK8hi7ue5Az6V_4nZf_OhtQ.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204510
IP address blocks: 194.209.4.0/24 maxlen: 24
194.209.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:3e:a4:9a:f0:22:a9:1e:4e:e6:38:32:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6cf264af218bbb9ee40cfa57fe2765ffce86d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:41:fd:1f:7b:9f:ff:30:20:d9:8f:b6:7a:
4e:2f:18:1c:fd:b2:23:77:fb:aa:cf:53:fd:32:4c:
da:92:34:b1:96:7a:90:e2:23:11:64:e9:85:23:27:
a7:94:d7:33:21:60:ec:df:4f:79:bd:07:eb:20:3a:
1c:09:6e:60:72:b9:76:86:a8:56:56:58:d4:5f:e0:
3f:75:7c:ee:e2:f9:9a:bc:9e:67:de:e5:fd:da:e4:
b7:7f:5d:98:5a:6c:cf:7f:4f:60:f0:2f:6b:ca:63:
ff:f4:a8:d7:ae:c7:d6:f5:1e:28:be:5a:a2:02:92:
04:da:b4:c5:71:17:10:c4:a5:cf:b4:66:dd:f5:fe:
ce:02:9d:8f:21:76:57:6b:62:d3:02:df:cb:ef:f7:
b3:79:1b:06:ea:1f:09:ad:ed:3b:43:cc:6a:89:b1:
a1:b9:49:56:88:8d:8a:b3:30:2b:89:13:9d:c2:46:
81:d9:31:c9:0b:53:f5:f8:0d:f5:47:08:ce:35:a5:
22:5e:dd:3f:e0:3e:f4:67:b7:ff:99:c1:c6:cd:3c:
19:bb:fe:c1:35:c1:96:20:0c:f6:13:b2:4b:ff:e1:
01:a2:37:31:16:ff:36:13:32:35:e8:0b:d2:91:b9:
d1:6d:63:60:c5:c3:c6:6c:c4:6b:42:2f:ee:94:c8:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:F2:64:AF:21:8B:BB:9E:E4:0C:FA:57:FE:27:65:FF:CE:86:D4
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PmzyZK8hi7ue5Az6V_4nZf_OhtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.4.0/24
194.209.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ab:06:58:e0:e1:97:4b:e1:4b:f4:17:de:af:b6:aa:73:42:
4a:32:7f:dc:2a:42:cf:bf:35:ab:f4:38:3e:44:5e:63:ae:20:
19:a0:d9:f3:b0:0d:26:47:0c:73:84:28:df:62:84:e6:06:d1:
b1:e5:83:b2:f4:fe:0d:2e:19:ca:03:74:c1:3c:ac:bb:9a:ef:
78:06:25:93:11:8f:33:06:91:05:2c:c8:68:62:7c:a3:0a:e0:
32:6d:5c:bf:da:85:44:ed:bd:bf:c2:82:98:19:fb:48:05:fd:
4b:a8:ed:d1:d3:b1:bb:3d:f4:b2:7e:19:12:32:ea:c9:75:29:
54:7a:aa:ac:d0:e6:93:90:5f:0e:d5:8a:ef:f7:51:39:8d:34:
b3:05:07:0a:2e:00:6e:24:d1:3e:63:5e:12:4a:4c:5d:db:c5:
f5:36:2f:45:82:7e:23:6d:a4:6e:be:c2:ba:f2:ca:d1:79:9b:
25:6b:64:38:ba:93:84:dd:6f:be:d3:06:27:1f:6f:60:e5:76:
ab:c4:af:27:29:ff:4d:0a:9b:c9:e8:97:6f:3f:77:a1:9c:c9:
ac:d8:11:8a:7f:7b:9d:fe:c9:3b:f2:71:19:f1:1c:ff:ca:91:
55:06:c6:e7:b5:04:38:14:ee:9e:19:4f:fc:57:67:73:c0:4f:
ad:fb:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client