Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/VoS667b1lJrRd9ZWi_wje90ImLs.roa
File: VoS667b1lJrRd9ZWi_wje90ImLs.roa (raw, json)
Hash identifier: A2Wz3SfUfT8TUvBDoZDSV1/EvVwSnQSG1957I+27Sj0=
Subject key identifier: 56:84:BA:EB:B6:F5:94:9A:D1:77:D6:56:8B:FC:23:7B:DD:08:98:BB
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F6CD180E29C76DA27ABF34EE3AB8
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/VoS667b1lJrRd9ZWi_wje90ImLs.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 194.6.190.0/24 maxlen: 24
194.209.178.0/24 maxlen: 24
195.65.17.0/24 maxlen: 24
195.65.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:cd:18:0e:29:c7:6d:a2:7a:bf:34:ee:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5684baebb6f5949ad177d6568bfc237bdd0898bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:f6:c8:15:d7:d5:50:c1:0c:b1:92:b0:01:
82:1e:22:a7:52:0c:95:dd:8b:97:52:a6:d3:e4:88:
2b:a2:51:0e:4a:ca:18:aa:40:36:f1:b8:91:ab:6a:
62:88:36:8d:64:16:f9:2a:19:d8:6d:9e:36:c8:02:
be:77:3f:71:17:57:1a:27:5e:37:81:e9:e0:0f:a5:
8f:b5:bb:9e:35:47:70:b9:1c:c6:71:76:7d:92:6b:
10:4c:9e:eb:a9:dd:f4:77:3e:9d:ed:b1:f7:98:37:
07:f4:32:dd:13:2a:3b:57:75:e0:55:8c:f1:05:da:
d4:32:b9:c6:7d:79:b2:3d:2b:66:e8:80:55:05:84:
d9:0f:1a:73:0e:f1:62:a5:1d:c2:e4:d2:0b:af:d7:
e5:f4:77:dc:f8:1f:98:9b:6a:02:4a:91:33:aa:ec:
a6:b8:3e:45:cb:4e:5d:9d:02:31:bd:c9:e0:9f:9a:
60:d6:08:63:c6:10:fa:a1:9c:d3:fb:a8:29:da:c3:
17:36:16:b2:2f:4f:12:b0:dc:44:54:ec:f7:86:87:
39:61:f7:b8:e7:51:9e:3f:f2:c2:03:8d:93:9a:1e:
a7:58:fd:6e:3a:a4:a9:74:6d:86:e5:a7:8b:8e:17:
b6:c3:4b:f2:b9:9e:b2:9e:7f:04:be:83:9e:f3:a7:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:BA:EB:B6:F5:94:9A:D1:77:D6:56:8B:FC:23:7B:DD:08:98:BB
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/VoS667b1lJrRd9ZWi_wje90ImLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.190.0/24
194.209.178.0/24
195.65.17.0/24
195.65.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3f:37:2c:d7:08:f3:a5:8b:81:a3:8b:8e:cc:8d:e3:35:3e:
37:a3:56:e4:73:86:b4:ca:d2:d9:8c:b0:b1:06:d8:d5:f0:39:
ec:82:ca:5f:93:bc:90:cd:99:a7:95:aa:96:24:2e:17:10:8b:
8e:78:03:f3:09:aa:23:ca:2e:d0:a6:53:9e:1c:cf:b4:1a:d8:
33:4a:be:3c:89:99:f1:8d:51:f5:49:f4:75:39:61:18:d1:68:
85:3b:47:9a:17:75:29:7d:5c:5c:98:11:b3:c1:10:98:4c:b3:
e8:bd:f0:b0:b8:62:42:2d:ec:ac:1c:c0:22:97:2f:7f:39:b3:
06:04:72:ad:33:35:56:bd:fe:4e:8f:03:07:93:87:23:50:47:
86:65:1d:bf:67:43:51:b9:50:19:ea:f0:a2:be:d8:9f:bf:85:
d5:a6:0a:7a:76:df:65:f7:d1:7c:6b:c1:a5:ad:c7:29:92:29:
50:5c:71:f7:d1:86:a0:8f:0b:93:b0:1d:96:aa:98:e9:0c:fa:
46:a1:62:90:50:a1:8d:1b:1a:9b:0b:3e:95:5f:39:27:bb:68:
33:56:99:d2:56:ac:26:7c:c9:66:b2:50:12:dd:38:2f:bd:f8:
41:ac:6a:df:84:3b:83:a2:76:9b:a4:9c:5a:ce:42:e4:c6:12:
3e:47:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:12 2026 by rpki-client