Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bKl5i5kkrEsDK91O9EGeFW-qXDk.roa
File: bKl5i5kkrEsDK91O9EGeFW-qXDk.roa (raw, json)
Hash identifier: RO84TY0p81pGE9W4+dysUEFbTk6jzJjz5um2tujtWMw=
Subject key identifier: 6C:A9:79:8B:99:24:AC:4B:03:2B:DD:4E:F4:41:9E:15:6F:AA:5C:39
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690C82EDBE982E6154C344808C21C3
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bKl5i5kkrEsDK91O9EGeFW-qXDk.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201870
IP address blocks: 195.65.24.0/24 maxlen: 24
195.65.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:82:ed:be:98:2e:61:54:c3:44:80:8c:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ca9798b9924ac4b032bdd4ef4419e156faa5c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:6c:19:5d:3f:5c:41:87:cb:25:49:82:a2:
16:e1:13:e9:ad:29:53:71:e1:94:86:20:fe:81:f4:
2c:e5:cd:3c:21:1f:91:97:f8:05:cc:e8:46:1e:93:
9a:df:3d:85:e1:a9:b1:63:e0:37:40:07:bd:88:fa:
ed:3f:67:fa:9e:4c:1d:b7:b7:67:76:7e:b0:dc:0e:
68:27:0c:0f:04:f6:77:d7:29:5b:cd:86:6f:a9:9b:
df:f3:1f:18:27:ec:dc:81:e3:ef:e8:14:24:4f:3d:
c0:84:4e:11:c7:ae:03:e5:b7:51:10:d0:e4:ec:60:
d5:a5:b4:9b:13:bc:83:4d:dc:bb:4c:50:7f:10:6e:
81:57:c1:2d:f2:99:d1:c7:fc:9b:72:f2:ae:46:eb:
98:ba:7e:71:d3:36:2a:68:fc:63:57:ee:ea:03:e2:
81:5c:27:c6:15:bb:f7:50:db:26:9d:10:31:d7:a0:
e3:14:7e:cf:d7:cd:56:9c:04:bf:a6:f5:86:5e:50:
df:e2:04:64:e4:f5:06:56:2d:61:d1:91:21:b4:c7:
04:43:64:49:03:4f:2a:dc:94:6d:8f:56:08:63:c2:
7d:e6:39:84:17:c0:3c:06:95:57:3d:70:da:93:04:
68:4b:b9:e9:60:67:32:c6:f9:a9:2d:11:2f:5b:f5:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:79:8B:99:24:AC:4B:03:2B:DD:4E:F4:41:9E:15:6F:AA:5C:39
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bKl5i5kkrEsDK91O9EGeFW-qXDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.24.0/24
195.65.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:41:54:c9:6d:fa:9f:f1:09:c3:92:62:33:46:5c:89:07:58:
cb:86:b1:9f:f6:99:bb:2e:6d:c4:af:6c:d5:90:5c:ea:cc:27:
a7:3e:1f:db:a3:57:a8:4c:86:0f:26:f5:9b:c9:cf:06:0f:79:
6e:f7:88:32:2f:c2:85:18:09:2d:d2:0c:cc:f9:eb:57:0b:82:
b6:46:35:4c:d9:e0:03:f5:7a:69:14:82:d6:9a:25:9c:6e:d8:
d5:8c:ed:18:2e:ef:cc:19:d9:1c:88:a3:e8:32:1d:c3:1a:76:
1c:76:e7:1d:c0:e2:6f:0b:1f:b0:ca:17:c0:2d:80:b7:5b:6c:
55:3e:60:80:bb:4f:90:7d:a7:f0:16:05:dc:b4:c3:3e:44:d7:
54:47:1c:e9:d9:0b:35:22:01:0d:7a:c9:fc:8a:67:02:1b:a3:
d9:f8:81:ef:5e:da:1d:2c:e0:02:4e:de:00:99:b9:c9:32:02:
d2:40:d9:cb:28:17:22:e3:2b:40:9e:a3:ec:6f:c3:1c:b3:46:
de:da:2c:ee:3d:fe:11:fd:f4:67:f1:aa:bb:a2:2a:de:ad:e3:
2e:60:a4:2b:77:03:11:5d:d8:ac:14:07:1e:87:31:f3:04:39:
f6:3e:53:55:24:a2:94:90:22:a6:df:af:54:95:c5:ff:ac:a2:
3a:3d:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client