Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dyE2M2Eeb4MdodS7TcVYUPz4Kgs.roa
File: dyE2M2Eeb4MdodS7TcVYUPz4Kgs.roa (raw, json)
Hash identifier: 0lMIlUPTXy3IRaqsvif8wPEWe+Ep8oiP2JsgePwnBMc=
Subject key identifier: 77:21:36:33:61:1E:6F:83:1D:A1:D4:BB:4D:C5:58:50:FC:F8:2A:0B
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F5DFEFBE21A95B4C937B202183F5
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dyE2M2Eeb4MdodS7TcVYUPz4Kgs.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 138.188.174.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:df:ef:be:21:a9:5b:4c:93:7b:20:21:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77213633611e6f831da1d4bb4dc55850fcf82a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:5d:d8:c2:a4:6c:79:77:43:e6:ba:3c:f6:
14:44:13:e8:55:9b:9c:e8:9a:ce:d2:10:62:ff:4a:
eb:8e:57:8b:08:21:c9:04:b6:eb:02:7c:dd:ec:2d:
e5:53:7a:f0:39:c9:3a:82:4e:32:25:7d:b6:c9:6a:
b0:e0:ab:06:cf:59:9f:5b:12:10:09:f0:df:65:ba:
c4:1c:f2:36:68:05:43:6d:e5:42:03:3f:c7:13:e2:
01:8d:9f:fc:e7:05:9b:6f:fe:7d:9e:5a:2f:2e:71:
3d:e9:cb:07:22:c9:3f:f1:ba:52:ef:83:b3:54:b1:
e7:fe:ee:da:5d:75:92:43:e3:55:17:09:2c:f1:d1:
84:a3:ba:c0:7c:f4:c1:4b:98:1f:ca:9e:ad:ae:03:
39:8b:da:1b:1a:8c:3b:78:98:29:99:6c:f7:df:a2:
fd:2b:34:2c:9c:10:d8:ea:01:28:5f:b0:be:32:14:
8a:24:c9:95:20:ff:cb:bd:2a:8d:1c:38:c6:d5:36:
20:f2:f2:b8:20:27:69:96:7a:35:01:43:47:0e:3e:
27:e4:69:d4:09:4d:ab:1e:8c:aa:68:f9:29:b1:ec:
ed:20:da:1f:b7:17:a4:a3:e7:b1:58:6d:3e:c9:dc:
f4:ed:f9:5b:d8:32:ad:d3:3c:43:b3:3d:02:8d:ca:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:36:33:61:1E:6F:83:1D:A1:D4:BB:4D:C5:58:50:FC:F8:2A:0B
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dyE2M2Eeb4MdodS7TcVYUPz4Kgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.174.0/23
193.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:a2:ce:28:2b:e5:36:9e:ec:cf:75:2f:2a:bb:88:88:f3:
22:7a:06:aa:b6:ec:5a:05:c5:92:ec:37:02:3d:99:ea:18:82:
6f:36:e9:bf:99:5d:41:e7:34:3d:86:cb:54:37:85:1f:d0:30:
53:44:40:01:2c:47:2c:48:6a:39:12:12:e1:42:d6:6d:58:3c:
d3:6e:13:30:89:6e:08:6c:a4:45:de:41:0c:9f:f3:46:1f:f2:
ed:88:cb:4c:d6:b1:f6:2d:2d:b9:bc:13:54:1c:2a:4f:b1:06:
e8:3e:ce:19:a3:59:b7:28:d0:a1:04:9f:02:74:ff:3a:88:e9:
db:0c:ac:c9:6a:94:0c:68:7b:e4:6c:50:8b:6f:8c:c2:f4:9d:
e3:7f:4c:6c:e3:08:dc:21:04:57:79:fa:27:70:f4:78:10:ee:
34:d8:7e:3c:37:43:5f:f1:c2:1e:48:62:25:ab:5d:fa:49:05:
f3:4d:f3:39:8a:ce:77:a5:e3:c9:9f:c4:88:da:89:ac:1a:38:
35:62:e6:04:4f:fc:2f:40:02:92:7a:49:8a:fb:cf:d1:6f:bc:
ef:59:0c:84:eb:dd:8a:af:1c:1b:70:d8:e5:7d:a1:b6:05:d9:
11:e5:0a:8b:18:5a:ed:86:c7:ec:f3:94:65:1c:96:7c:8b:e7:
81:4f:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:30 2026 by rpki-client