Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aPHmoRtSvLcbhq5AoUrz-2hBl4I.roa
File: aPHmoRtSvLcbhq5AoUrz-2hBl4I.roa (raw, json)
Hash identifier: gf/zx3frj2wFiPd3+I9LaQyQEMHrO80gGUysIQlVNhM=
Subject key identifier: 68:F1:E6:A1:1B:52:BC:B7:1B:86:AE:40:A1:4A:F3:FB:68:41:97:82
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236907BDC30DB8A774929EEC94F1C358
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aPHmoRtSvLcbhq5AoUrz-2hBl4I.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60420
IP address blocks: 212.243.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:bd:c3:0d:b8:a7:74:92:9e:ec:94:f1:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f1e6a11b52bcb71b86ae40a14af3fb68419782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:16:0a:00:32:28:c4:f4:b3:ca:45:cd:7f:
1b:09:00:5a:db:e6:ad:26:8f:16:52:8e:e5:a2:1a:
68:a4:ff:fe:ac:e1:4d:fb:e4:75:96:d2:aa:c2:03:
b3:69:be:3a:30:e0:eb:8c:60:84:2d:08:cf:cf:af:
40:99:c1:8e:ad:c4:6d:00:a7:65:ad:9b:8d:a6:f2:
c0:43:f4:32:06:6e:1a:0f:e0:df:1a:c8:99:29:6a:
85:d0:52:23:3d:4c:ed:69:a7:d1:15:0c:17:13:73:
7a:c2:f2:59:ff:de:c7:46:6b:ba:6d:ea:7b:7d:72:
e5:b6:6d:17:66:79:1e:b0:fa:81:6b:d8:9a:a1:b2:
fa:0e:28:4a:90:25:19:54:45:1c:c6:43:33:c1:b6:
6a:33:e2:de:e9:01:20:ad:b3:f7:75:31:2e:98:79:
90:ba:a5:bc:4e:54:09:6c:b7:aa:1d:cd:23:d9:1d:
d4:c2:b1:ae:f3:11:ef:08:e2:56:c4:04:22:f9:d4:
c0:eb:8c:fa:26:b7:6e:23:12:ff:3b:c3:2d:fd:8e:
39:cf:57:53:04:7a:08:b6:d6:bc:89:d0:11:3a:75:
0e:8d:4c:fe:51:9c:00:cf:2f:76:f3:89:e8:6a:4e:
d3:01:d5:1f:12:bd:3b:86:8a:06:bf:24:71:21:a8:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:E6:A1:1B:52:BC:B7:1B:86:AE:40:A1:4A:F3:FB:68:41:97:82
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aPHmoRtSvLcbhq5AoUrz-2hBl4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f9:e1:b4:f4:89:0f:2b:8c:52:67:dc:a7:a8:92:d8:4c:4b:
7b:0f:8c:12:20:e0:eb:f9:64:f5:bb:c8:33:c1:6f:9c:9f:4a:
d8:5a:e4:62:c4:10:33:14:ba:6a:d0:27:69:fb:cf:9e:6e:49:
50:30:25:a7:0c:3c:b6:16:af:c7:f9:e6:e7:46:17:20:11:9f:
29:ef:e0:9b:ae:46:3f:4c:d9:c1:50:76:2c:87:bf:42:ef:b5:
af:d2:1c:37:d5:8f:e3:5c:56:2c:b2:ea:6b:3b:2d:09:a3:7f:
b0:e5:94:51:bc:73:62:04:17:d1:68:9c:c2:01:2a:a1:7a:9b:
46:dc:cd:a8:e3:e3:4b:0d:7e:e6:49:7e:9f:2b:36:4b:82:6b:
cc:42:39:15:f4:bd:5e:96:0c:30:7a:73:b4:9a:47:97:4d:be:
6b:a6:17:58:ab:7b:8d:c0:10:75:2b:45:3d:a1:3d:2b:76:e3:
64:17:0f:73:d7:e3:81:f3:d1:94:df:0d:81:7c:dc:ec:eb:78:
a7:3c:13:44:71:1a:2a:c2:df:14:b3:95:62:da:6d:de:84:fd:
c5:ea:ef:0c:b3:64:ac:72:a7:48:1d:82:c2:05:d4:59:93:00:
6f:b0:c5:46:b4:7d:46:9f:93:a2:d3:8f:ad:b2:a5:17:d8:fc:
f8:fc:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client