Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_JxJi40GcPSYgsD0wSYd6IIhU6o.roa
File: _JxJi40GcPSYgsD0wSYd6IIhU6o.roa (raw, json)
Hash identifier: uvfeuW7m2gA5JTKEDHWqoYko59KnlQ0A38ah6sfRQz4=
Subject key identifier: FC:9C:49:8B:8D:06:70:F4:98:82:C0:F4:C1:26:1D:E8:82:21:53:AA
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691605F4262E1251862A642E3325C3
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_JxJi40GcPSYgsD0wSYd6IIhU6o.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206466
IP address blocks: 194.6.170.0/24 maxlen: 24
194.6.173.0/24 maxlen: 24
194.209.31.0/24 maxlen: 24
194.209.199.0/24 maxlen: 24
195.65.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:05:f4:26:2e:12:51:86:2a:64:2e:33:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc9c498b8d0670f49882c0f4c1261de8822153aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:ce:f3:fa:ef:37:52:72:9c:22:f2:67:3b:
2a:e6:69:f4:fc:fd:22:f4:49:f6:03:7b:ef:2e:58:
8a:73:ab:be:85:b8:ed:d3:33:87:a4:62:e7:98:43:
cf:2d:da:13:04:d1:1e:2d:6e:b0:da:f4:ca:0b:07:
3e:d0:bd:23:b2:c7:a7:a1:20:39:8a:24:e9:44:5e:
fb:fc:75:b4:ae:1c:9d:a9:ce:98:d1:6a:68:e7:c1:
51:fa:37:a8:9a:c5:f5:a5:79:69:4a:5a:82:59:b4:
7b:a4:42:89:9d:d1:ef:4b:f6:88:50:92:43:00:93:
18:ef:c0:c2:9a:9e:93:80:77:d9:23:c3:b7:8d:d9:
3d:1f:ba:d4:17:7d:41:f6:c5:6e:a5:49:49:c1:e6:
67:50:8a:4e:65:b9:1d:07:3b:cc:cb:dc:85:a7:6f:
d6:a9:32:d0:c3:c3:18:39:e5:b4:ec:1a:13:cb:3e:
db:57:d1:d9:a4:29:52:29:be:75:81:c6:79:e8:c6:
ab:e9:11:35:87:72:34:98:92:e9:eb:a4:5c:9c:79:
09:99:8c:fe:65:07:31:ee:8e:a4:4b:0a:c1:37:e9:
70:91:93:59:2e:d1:0e:3e:d2:6f:80:41:96:00:f9:
d0:7c:8f:cb:93:c2:fa:18:6d:53:c9:08:73:d5:93:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:49:8B:8D:06:70:F4:98:82:C0:F4:C1:26:1D:E8:82:21:53:AA
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_JxJi40GcPSYgsD0wSYd6IIhU6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.170.0/24
194.6.173.0/24
194.209.31.0/24
194.209.199.0/24
195.65.142.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c2:40:7a:14:af:ca:25:f8:1d:27:cc:f6:05:2c:a2:90:f0:
09:98:88:22:f0:38:7a:ec:c1:1d:97:fd:92:81:5e:51:c9:25:
eb:58:32:ba:3b:22:64:7c:d0:e2:49:b3:38:06:51:a3:3c:4a:
09:85:87:06:9d:bf:93:e6:a3:79:e2:76:21:c8:c3:64:cb:6b:
e2:99:64:83:94:fd:f6:70:cb:f6:0a:87:db:85:6a:f4:ae:f3:
8a:14:14:83:b8:86:5e:19:09:69:ff:45:eb:28:d2:3e:6b:34:
e6:6f:77:df:d5:4d:34:50:8f:35:e4:ec:f2:4b:d1:26:b6:fa:
7f:43:a8:cf:ab:6e:ce:6e:8e:d7:f9:3d:4f:8e:a4:2f:4a:24:
17:fb:61:62:51:6e:c4:f7:70:2a:58:0d:ff:70:91:93:79:4a:
f5:9c:dd:69:a8:00:9c:f5:0e:ab:96:50:cf:80:95:e5:b9:cc:
cb:5d:ea:3a:8d:7b:f3:9b:2f:70:80:a3:46:6d:39:ac:36:1b:
9e:8a:a3:1a:67:85:bd:16:a7:08:50:5f:b3:c3:cd:12:9f:8b:
69:a0:d2:d2:b7:23:de:3e:98:b9:17:90:22:cd:b3:f3:04:e1:
62:37:01:b7:36:da:d3:4f:f8:d4:49:e4:7f:fd:aa:f9:f2:39:
aa:f0:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:48 2026 by rpki-client