Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Qm24wEylToI16DMJrwHO7fj3sAY.roa
File: Qm24wEylToI16DMJrwHO7fj3sAY.roa (raw, json)
Hash identifier: gceOb+cPAKlj3uqPbmoy/TON6QaQxzLU0jq19SEU/NA=
Subject key identifier: 42:6D:B8:C0:4C:A5:4E:82:35:E8:33:09:AF:01:CE:ED:F8:F7:B0:06
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691A06E675990603FC6D7090729675
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Qm24wEylToI16DMJrwHO7fj3sAY.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209848
IP address blocks: 212.243.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:06:e6:75:99:06:03:fc:6d:70:90:72:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=426db8c04ca54e8235e83309af01ceedf8f7b006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:e5:18:2c:5f:6d:7b:aa:15:8c:f8:bb:ef:
72:2a:cb:5a:97:fe:d6:66:1e:f3:f8:b7:00:39:ce:
65:f1:63:0c:fa:bc:c9:74:ab:f0:6a:62:85:7e:e4:
c8:3a:df:9e:a2:df:6f:21:ec:5e:c0:79:62:ea:31:
8a:6a:0e:d7:d5:5b:c2:4c:be:74:b0:c2:c9:ea:f1:
84:e4:7e:a0:d9:75:ca:a5:2d:d1:2f:59:77:7c:8c:
e6:29:ba:bd:df:af:8d:73:11:25:e1:40:a1:c9:6e:
59:4f:97:c6:b9:2c:5f:29:d8:53:4d:7e:96:16:bc:
bf:06:6e:26:0b:6a:24:31:76:a2:9f:02:92:b6:a7:
cb:0c:7f:d5:a5:d6:31:0d:d1:be:22:9a:7f:62:ef:
73:d2:60:0c:b5:e5:f1:48:5e:7d:92:93:be:04:84:
40:e4:07:a8:11:7b:55:51:5f:c5:7a:9d:4b:11:8e:
f4:5d:42:bc:7f:0d:a1:dd:65:a0:a6:72:3d:3e:1b:
73:08:92:18:db:f2:9c:3e:30:45:1e:19:b2:66:80:
f8:12:a0:f5:a5:64:d3:3d:7d:74:b6:12:12:78:b5:
5d:d5:d4:bc:bf:50:f3:a0:8b:85:ca:d1:8d:e9:a6:
65:2f:c7:03:dd:f6:03:2a:ba:72:1e:2c:60:45:fd:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:B8:C0:4C:A5:4E:82:35:E8:33:09:AF:01:CE:ED:F8:F7:B0:06
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Qm24wEylToI16DMJrwHO7fj3sAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d5:b5:d7:6b:97:d8:6d:04:91:bf:37:95:e5:1e:7c:5e:a0:
1e:18:93:e0:fe:7f:7c:dc:d3:d0:d0:28:13:34:16:45:af:c5:
34:9a:15:31:95:7c:12:ff:91:6b:97:52:bd:03:f7:03:f2:a5:
5e:e4:f6:b2:72:95:67:e4:e6:54:21:fa:6e:51:05:22:84:e3:
02:36:10:5d:bb:3d:2f:01:0c:38:a1:54:94:7a:ab:26:94:18:
93:14:f9:95:63:80:f7:99:62:b0:0b:90:92:ed:5b:b1:e9:11:
a4:48:db:68:5f:d7:87:2d:3a:ca:9a:c2:d1:39:e6:b8:e2:6e:
0c:82:8a:cd:34:56:bd:93:97:17:3b:ee:3e:4f:d8:6f:cf:34:
6e:02:a0:36:4c:16:4c:90:c1:c5:60:57:6d:5f:16:8b:0c:37:
df:c5:f7:4e:55:ca:97:6e:85:3b:d9:c7:c3:04:e5:5e:06:67:
cf:08:cb:cf:b5:ad:d2:de:0e:af:17:f3:b9:ff:25:43:75:2d:
fd:ce:92:b0:02:51:21:ac:32:5e:00:5a:35:03:b5:98:65:1d:
4c:14:d2:a1:4c:1b:2f:c5:9e:a1:b5:af:fd:52:d4:93:19:55:
a9:49:25:4f:f1:f4:55:e8:09:9a:8d:fa:d2:0c:75:c4:bf:26:
43:40:6b:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRoG5nWZBgP8bXCQcpZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjZkYjhjMDRjYTU0ZTgyMzVlODMzMDlhZjAxY2VlZGY4ZjdiMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+XlGCxfbXuqFYz4u+9yKstal/7W
Zh7z+LcAOc5l8WMM+rzJdKvwamKFfuTIOt+eot9vIexewHli6jGKag7X1VvCTL50
sMLJ6vGE5H6g2XXKpS3RL1l3fIzmKbq936+NcxEl4UChyW5ZT5fGuSxfKdhTTX6W
Fry/Bm4mC2okMXainwKStqfLDH/VpdYxDdG+Ipp/Yu9z0mAMteXxSF59kpO+BIRA
5AeoEXtVUV/Fep1LEY70XUK8fw2h3WWgpnI9PhtzCJIY2/KcPjBFHhmyZoD4EqD1
pWTTPX10thISeLVd1dS8v1DzoIuFytGN6aZlL8cD3fYDKrpyHixgRf3M6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJtuMBMpU6CNegzCa8Bzu3497AGMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvUW0yNHdFeWxUb0kxNkRNSnJ3SE83Zmozc0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1POBMA0G
CSqGSIb3DQEBCwUAA4IBAQCS1bXXa5fYbQSRvzeV5R58XqAeGJPg/n983NPQ0CgT
NBZFr8U0mhUxlXwS/5Frl1K9A/cD8qVe5PaycpVn5OZUIfpuUQUihOMCNhBduz0v
AQw4oVSUeqsmlBiTFPmVY4D3mWKwC5CS7Vux6RGkSNtoX9eHLTrKmsLROea44m4M
gorNNFa9k5cXO+4+T9hvzzRuAqA2TBZMkMHFYFdtXxaLDDffxfdOVcqXboU72cfD
BOVeBmfPCMvPta3S3g6vF/O5/yVDdS39zpKwAlEhrDJeAFo1A7WYZR1MFNKhTBsv
xZ6hta/9UtSTGVWpSSVP8fRV6AmajfrSDHXEvyZDQGv+
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:53 2026 by rpki-client