Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cnc5pBCPuMQMZUL7ygF8NPFl2KM.roa
File: cnc5pBCPuMQMZUL7ygF8NPFl2KM.roa (raw, json)
Hash identifier: oiWzqrcGx56ml1I3IZ6D64UL6mVItqf67MtNnp7uCio=
Subject key identifier: 72:77:39:A4:10:8F:B8:C4:0C:65:42:FB:CA:01:7C:34:F1:65:D8:A3
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236910E6E72ECA1C0940F7D12DB8AA17
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cnc5pBCPuMQMZUL7ygF8NPFl2KM.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204783
IP address blocks: 212.243.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:e6:e7:2e:ca:1c:09:40:f7:d1:2d:b8:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727739a4108fb8c40c6542fbca017c34f165d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:a5:63:27:3d:f4:58:82:33:9d:44:be:1d:
f5:0e:fd:39:c7:de:ce:d9:61:11:43:d3:d0:d9:cf:
c1:96:a0:56:11:73:58:a5:07:02:3d:1c:f3:47:30:
6d:47:54:b1:4f:dd:da:54:ec:d9:eb:37:3f:53:73:
85:53:0a:05:b8:7f:ca:d7:a9:91:e6:b2:22:58:02:
56:26:30:85:c8:ac:c4:ea:fd:05:eb:b0:bf:a6:28:
e2:5d:0d:7a:a1:58:8c:28:f6:45:2c:65:37:77:cc:
2c:36:aa:5f:f7:75:57:01:6c:89:9a:2d:44:3c:88:
68:11:8c:85:51:be:59:ea:c0:53:65:d1:f1:36:57:
99:68:34:b6:f4:7a:2c:48:5e:20:b9:52:64:bc:08:
f6:86:13:0e:73:c3:c3:6f:9c:9f:e7:ca:92:ae:04:
2a:e4:11:54:ef:2f:b6:c7:e0:5f:8f:90:0e:91:c3:
2e:19:55:8b:52:76:a2:74:83:bb:44:b7:3e:17:da:
fd:4b:f9:3e:6b:f5:1d:9f:3e:b6:d1:17:54:9f:51:
4d:f5:2e:1f:60:e8:6d:c8:2c:12:b1:d1:59:f8:49:
89:67:1d:eb:23:0e:f1:f4:e2:0e:8d:58:16:cc:7e:
a4:1c:34:34:da:a1:83:d0:0c:aa:97:ec:d0:44:8f:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:39:A4:10:8F:B8:C4:0C:65:42:FB:CA:01:7C:34:F1:65:D8:A3
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cnc5pBCPuMQMZUL7ygF8NPFl2KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.115.0/24
Signature Algorithm: sha256WithRSAEncryption
18:60:97:16:ef:25:e1:58:53:3f:e2:dc:a5:42:25:ab:d2:43:
5d:c2:16:8f:c9:0e:7a:61:98:d8:63:a5:f9:0a:e6:69:24:f3:
96:85:f4:35:05:67:c0:00:67:f2:8c:2c:86:6f:db:da:76:aa:
80:70:d1:f5:59:c1:b3:1a:74:24:2b:a0:1c:7b:c8:fa:49:be:
33:b7:38:1b:ce:3b:76:4e:ec:a3:f1:a0:da:0a:dc:e4:4f:43:
08:7d:1f:a3:cf:47:23:f5:c9:9a:48:2b:6b:59:9d:5d:fb:e5:
e1:57:dc:03:38:14:b1:06:e6:ad:49:b1:91:c1:16:2c:bb:46:
ca:8f:85:fa:44:f1:33:db:69:81:c3:8b:95:a0:1e:45:df:74:
27:02:3e:37:4b:e7:1b:7a:1e:50:32:74:3b:e3:d2:c2:63:9e:
33:03:e7:8b:6d:2f:47:27:7d:fb:fa:53:4c:1c:70:50:5a:bf:
bf:74:aa:98:9b:a5:16:d6:c1:56:a9:ab:9e:c5:a1:3b:cd:db:
b4:62:27:a3:92:98:7e:13:7f:5c:7c:4f:ef:a7:9d:0a:d8:85:
c3:da:ad:e1:b3:1f:3f:42:76:31:8b:81:ec:71:92:98:57:ce:
f8:2b:a5:dc:6d:c5:dd:0f:1f:bb:c1:64:a8:ea:13:4f:23:be:
7d:5a:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client