Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Y0KZKUwOOSTsn5MmU2cHdYuZ5z8.roa
File: Y0KZKUwOOSTsn5MmU2cHdYuZ5z8.roa (raw, json)
Hash identifier: HQb0Ph0xJ0UL/TjZ7PG8utYJmCUwfvMlwuZmjrIqr8g=
Subject key identifier: 63:42:99:29:4C:0E:39:24:EC:9F:93:26:53:67:07:75:8B:99:E7:3F
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236918A83BCD52D320963013EA6CB620
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Y0KZKUwOOSTsn5MmU2cHdYuZ5z8.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208980
IP address blocks: 212.243.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:a8:3b:cd:52:d3:20:96:30:13:ea:6c:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=634299294c0e3924ec9f9326536707758b99e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:58:b7:1b:7f:cb:3a:27:5d:5b:44:74:04:
67:eb:0a:bd:2e:e9:20:98:b1:02:d1:88:52:10:75:
c5:d2:46:4b:96:ce:99:98:19:e2:41:5e:1d:9b:2b:
8d:13:e9:ec:4e:c1:d0:bf:df:48:e5:00:38:42:38:
35:46:82:e9:95:15:f2:5b:9d:9c:50:97:45:36:c5:
b6:af:7d:37:7f:f5:82:7b:8a:ea:d5:15:77:1a:51:
97:f7:fe:08:e4:2b:46:3b:19:36:ea:97:43:5a:fe:
9c:a1:31:40:ed:39:dc:25:5a:f4:b1:c0:79:4d:a7:
d3:92:ab:47:b5:0a:5f:61:7a:da:8b:19:30:7b:9d:
75:e0:88:e2:e5:3a:1a:31:10:7f:5e:05:09:fa:a3:
21:54:12:01:f0:a9:2b:4e:4c:7c:c7:99:cb:a1:d6:
6d:ae:ff:3b:ed:57:28:1b:55:b7:87:3d:61:2e:85:
e9:7b:a8:b3:f9:17:88:53:fd:e3:35:e5:9b:9f:05:
cf:50:9e:58:78:45:4d:22:75:e4:b4:17:fb:85:ab:
b6:b4:c1:02:38:e7:f6:23:0d:7d:71:83:82:e7:bf:
9b:d6:68:be:9b:9c:78:64:52:d9:83:19:b7:08:4d:
f8:db:04:76:92:4d:82:af:56:62:bb:81:39:02:cc:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:99:29:4C:0E:39:24:EC:9F:93:26:53:67:07:75:8B:99:E7:3F
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Y0KZKUwOOSTsn5MmU2cHdYuZ5z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f5:43:a8:58:dd:fe:67:f1:a8:d2:0c:a9:38:61:5b:33:de:
0e:cb:ab:c6:bb:58:ba:bd:8c:65:54:0c:e4:d0:04:5e:c8:d7:
21:5b:9a:2a:66:85:44:b2:da:4c:68:97:ac:e3:06:a3:d8:fe:
c6:c2:c1:b4:32:73:3e:65:93:05:b6:22:0d:35:d3:1e:4c:e9:
98:d9:8d:f3:9a:c8:87:70:e5:85:ae:cc:7e:68:2a:28:37:3d:
57:5b:7f:a8:ac:ab:3d:97:48:07:57:d6:ce:41:4a:b8:b7:25:
92:33:49:63:b7:c2:c1:2d:95:13:a8:df:02:5a:ec:9e:a4:ed:
bd:a6:a1:88:57:b9:cb:f0:92:b6:72:a1:71:52:58:5a:0f:40:
9a:c9:0c:90:e2:84:e6:95:56:d2:33:25:7b:5c:88:a8:08:23:
44:83:8b:61:91:61:ef:26:36:6b:9b:01:7d:48:6f:ff:fb:48:
8d:af:90:c2:5f:f4:bd:c3:c9:c5:ea:96:eb:05:c6:a2:cf:51:
93:47:a9:46:5e:db:ce:c7:a5:d9:ff:68:5e:12:61:eb:16:59:
37:4e:4b:80:1a:2d:32:48:38:75:15:27:f8:e7:b2:0a:f4:32:
f4:6f:63:42:95:bb:8a:9f:ec:9a:bd:50:b3:77:d9:75:70:98:
25:65:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client