Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zx8m_qT6d3fW6N1YvBkNkY25Hrg.roa
File: Zx8m_qT6d3fW6N1YvBkNkY25Hrg.roa (raw, json)
Hash identifier: Sbl6X5I5vt7oP0KhJWXmuavw+UUhQVZKIxB3PkOepIA=
Subject key identifier: 67:1F:26:FE:A4:FA:77:77:D6:E8:DD:58:BC:19:0D:91:8D:B9:1E:B8
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F466B4D8F80869143EE682C56340
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zx8m_qT6d3fW6N1YvBkNkY25Hrg.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16079
IP address blocks: 194.209.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:66:b4:d8:f8:08:69:14:3e:e6:82:c5:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=671f26fea4fa7777d6e8dd58bc190d918db91eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:5b:ce:6e:62:62:09:fa:41:10:3b:71:ee:
1f:19:73:15:a0:b7:c5:39:85:1b:3b:da:6f:ac:d2:
b6:d8:3f:94:09:43:01:7e:f0:cb:3c:b3:46:8f:80:
d8:f8:21:d6:89:99:ff:48:20:03:5e:a2:57:69:1c:
09:93:c7:8a:88:5e:49:20:40:6b:53:28:44:9b:83:
e3:d1:34:ff:8b:4c:d6:b6:74:db:ef:35:ac:b8:5f:
90:0c:6a:f2:f0:0c:a0:00:d7:2f:0b:ce:7b:a6:42:
ad:c7:0c:58:52:44:aa:38:ac:cd:1d:79:1e:3a:c3:
33:25:73:5a:4f:4f:b9:67:12:5b:70:9e:ed:53:81:
72:cd:2d:11:a1:ec:db:01:b6:7a:eb:78:9b:71:76:
78:15:c3:e5:12:cb:76:c8:5a:b4:0b:3d:38:da:c5:
7a:bf:9c:38:fb:17:9d:be:2f:c9:c2:7a:4e:6d:c4:
32:cd:05:3c:9d:ff:5d:2d:21:a5:b4:9d:08:25:36:
18:f5:3d:2b:11:e8:35:c6:e5:46:35:2a:2b:c3:70:
49:7a:6f:cc:0d:9e:08:3f:af:69:d5:03:4f:bd:cd:
a2:fe:c8:a8:6a:bd:ab:ce:2b:c5:e0:86:85:4c:65:
b4:14:0e:f1:92:a2:71:ae:05:d4:ed:77:25:cb:ef:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:26:FE:A4:FA:77:77:D6:E8:DD:58:BC:19:0D:91:8D:B9:1E:B8
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zx8m_qT6d3fW6N1YvBkNkY25Hrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dd:56:43:47:d2:99:aa:3b:85:26:49:3f:21:ac:52:c1:1e:
49:ad:4a:fd:d5:c3:b5:1d:1d:74:c7:19:9f:59:31:16:ea:13:
b6:ca:dd:db:c9:20:23:dd:d1:97:c3:9b:c3:9b:c2:cd:c4:08:
71:bb:87:60:6f:9e:f9:a7:df:00:1e:e2:51:2d:f9:77:8d:3f:
78:ef:95:18:dd:c8:fb:68:0d:bf:b5:00:2d:f4:84:c6:a1:20:
85:80:a5:7c:e5:1d:59:62:da:58:2c:e4:19:f5:51:48:fe:a8:
6a:2f:ad:ed:fb:3c:82:f3:b9:4a:5b:f3:ae:d9:26:13:75:90:
a7:f4:25:86:91:23:8d:01:cb:1e:c4:35:07:fe:76:20:00:14:
11:3c:48:90:ad:e4:f7:43:8d:65:d0:16:88:98:ab:27:a5:ec:
32:19:98:fc:08:06:c0:d7:69:60:9b:73:2b:8a:b4:64:9b:b2:
1d:40:8a:e4:15:a5:94:8b:d7:bd:85:fb:45:27:44:66:4d:74:
c4:b9:42:59:0a:c3:cf:55:a4:5d:f6:76:44:72:e0:82:b0:5e:
35:c7:88:16:ed:77:49:a0:9f:91:ea:59:08:2c:d4:66:4d:4d:
26:43:c3:1d:2a:41:35:08:d6:05:97:ab:3b:5b:64:eb:97:21:
90:3d:d1:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPRmtNj4CGkUPuaCxWNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzFmMjZmZWE0ZmE3Nzc3ZDZlOGRkNThiYzE5MGQ5MThkYjkxZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiBbzm5iYgn6QRA7ce4fGXMVoLfF
OYUbO9pvrNK22D+UCUMBfvDLPLNGj4DY+CHWiZn/SCADXqJXaRwJk8eKiF5JIEBr
UyhEm4Pj0TT/i0zWtnTb7zWsuF+QDGry8AygANcvC857pkKtxwxYUkSqOKzNHXke
OsMzJXNaT0+5ZxJbcJ7tU4FyzS0RoezbAbZ663ibcXZ4FcPlEst2yFq0Cz042sV6
v5w4+xedvi/JwnpObcQyzQU8nf9dLSGltJ0IJTYY9T0rEeg1xuVGNSorw3BJem/M
DZ4IP69p1QNPvc2i/sioar2rzivF4IaFTGW0FA7xkqJxrgXU7Xcly+/TWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcfJv6k+nd31ujdWLwZDZGNuR64MB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvWng4bV9xVDZkM2ZXNk4xWXZCa05rWTI1SHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGfMA0G
CSqGSIb3DQEBCwUAA4IBAQCH3VZDR9KZqjuFJkk/IaxSwR5JrUr91cO1HR10xxmf
WTEW6hO2yt3bySAj3dGXw5vDm8LNxAhxu4dgb575p98AHuJRLfl3jT9475UY3cj7
aA2/tQAt9ITGoSCFgKV85R1ZYtpYLOQZ9VFI/qhqL63t+zyC87lKW/Ou2SYTdZCn
9CWGkSONAcsexDUH/nYgABQRPEiQreT3Q41l0BaImKsnpewyGZj8CAbA12lgm3Mr
irRkm7IdQIrkFaWUi9e9hftFJ0RmTXTEuUJZCsPPVaRd9nZEcuCCsF41x4gW7XdJ
oJ+R6lkILNRmTU0mQ8MdKkE1CNYFl6s7W2TrlyGQPdGG
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:28 2026 by rpki-client