Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SlRSQYEi9U26aXKp9xLlOb--IhA.roa
File: SlRSQYEi9U26aXKp9xLlOb--IhA.roa (raw, json)
Hash identifier: HSUsirSTY7rs7NIswIrgtN+jA4w4IgNRzir/RRrtyk4=
Subject key identifier: 4A:54:52:41:81:22:F5:4D:BA:69:72:A9:F7:12:E5:39:BF:BE:22:10
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691545692C4B89AEE66B1D1F0ABF30
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SlRSQYEi9U26aXKp9xLlOb--IhA.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205815
IP address blocks: 194.209.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:45:69:2c:4b:89:ae:e6:6b:1d:1f:0a:bf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a5452418122f54dba6972a9f712e539bfbe2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:03:4b:2b:19:7f:03:e0:2d:dc:eb:e8:68:
03:04:7d:8b:43:5a:c2:34:bd:18:1f:1e:90:a3:a5:
76:ad:d5:12:85:69:36:dd:96:0a:e6:08:85:5d:67:
2d:26:0d:2a:55:d7:b1:53:36:6e:2d:f4:7a:b2:d8:
35:01:d6:b3:a1:f0:aa:77:41:8b:b3:18:a3:f6:8f:
ed:bd:a3:6a:69:38:85:97:1b:c0:74:7d:52:f3:95:
aa:08:f9:d9:d3:36:16:f8:e6:ea:96:22:01:62:b0:
4f:cf:65:a4:d7:5e:22:aa:e0:1b:6b:f1:a8:dd:40:
87:99:3d:47:8c:f2:ae:d6:4f:30:ba:d7:22:ee:57:
ab:6e:6e:7f:25:f5:ce:f4:d2:e8:e1:41:b3:ec:a6:
12:6b:4d:1f:80:f2:57:6c:a9:a3:58:53:95:35:3a:
ec:0a:1c:01:20:28:e5:b7:f4:6c:17:7c:49:96:f6:
60:36:0e:98:cf:77:28:68:e7:41:e7:fb:8d:53:9b:
8c:2e:63:c8:76:4a:7c:1b:23:f2:25:bb:7f:b4:fb:
f8:ba:79:a2:7a:8f:e5:b0:24:2d:24:f3:7c:da:91:
54:28:7e:c0:97:c8:e7:d9:4b:ab:2a:8f:8d:af:f6:
e1:8e:26:d1:dc:6f:49:6b:1c:f0:b8:47:c5:a6:ea:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:52:41:81:22:F5:4D:BA:69:72:A9:F7:12:E5:39:BF:BE:22:10
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SlRSQYEi9U26aXKp9xLlOb--IhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:86:8d:86:cb:b7:f5:68:f8:16:c8:ff:d8:2b:d0:77:98:be:
89:8a:a1:74:cb:44:65:5b:56:75:f4:2a:57:b0:f8:f1:da:14:
32:20:df:ae:e2:85:30:f8:ed:df:0a:ae:23:4b:f8:03:eb:a6:
1b:19:e2:33:71:e1:5f:dc:00:85:7f:8b:14:1c:ba:00:01:04:
68:80:2c:a5:2b:b8:ca:be:b6:d7:47:9b:2d:be:d5:7b:e9:89:
6c:21:34:06:a2:d5:f1:37:80:93:c9:18:3e:c3:b4:b1:66:bf:
dd:de:c7:75:e2:e1:db:71:f6:0a:ec:b1:f8:33:ef:ba:60:79:
6c:f5:f8:65:29:a7:df:2c:0b:b1:cb:df:22:81:8c:9e:de:52:
6b:49:a2:df:3a:e9:2a:10:be:7c:2c:3e:18:ac:24:80:95:c2:
17:ae:d1:5c:76:7d:f6:5e:4e:53:77:d1:12:8c:df:0f:cb:bf:
8f:4d:69:b0:ff:29:9d:64:84:be:0d:19:60:34:ef:de:82:75:
f9:26:23:d5:d4:c7:7a:b1:dc:55:90:fb:9e:df:c1:b2:42:37:
a5:09:45:7c:3e:c8:ae:9f:cc:80:5d:7a:6f:bc:bf:cc:20:cb:
c1:e5:5a:a9:55:34:a6:fd:0b:5e:9e:5d:87:4a:fa:bc:07:08:
71:03:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client