Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/eGYQY9wT-ORDrbyyST3jZpQEcQc.roa
File: eGYQY9wT-ORDrbyyST3jZpQEcQc.roa (raw, json)
Hash identifier: ksbsHiNeMMiMiFqACOpJUobU5Xh4pkYKPX0oPkmV5zo=
Subject key identifier: 78:66:10:63:DC:13:F8:E4:43:AD:BC:B2:49:3D:E3:66:94:04:71:07
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F03228782A19BBBB499B73C008BE
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/eGYQY9wT-ORDrbyyST3jZpQEcQc.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12368
IP address blocks: 194.209.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:32:28:78:2a:19:bb:bb:49:9b:73:c0:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78661063dc13f8e443adbcb2493de36694047107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:c2:4d:69:d7:c0:0b:8d:9b:de:12:78:f3:
6f:90:39:5e:c0:96:d8:3d:26:35:fa:1a:ec:e8:f9:
7a:d7:65:aa:17:b2:b1:ea:1c:4e:88:37:be:5b:02:
f6:55:90:45:2d:6a:01:fe:ba:4a:2a:bb:b6:b2:23:
a5:63:ab:fb:88:47:4b:dc:bb:d4:2a:bf:19:0a:e3:
2b:8d:ce:41:5e:ac:d2:dc:29:bf:a9:ac:e2:e8:3b:
56:30:34:d3:8f:a8:7a:2c:b5:96:e8:29:8d:99:a4:
f0:e1:75:f7:0f:04:45:ef:3e:c0:41:4d:ae:66:a6:
dc:a0:3f:9b:6a:7b:e8:e5:84:45:3d:e5:18:dc:f8:
af:58:72:4a:be:41:74:aa:b0:e5:bc:60:8e:61:08:
2a:2e:06:e2:0d:50:e5:62:be:35:69:32:fb:0d:11:
15:fb:e6:43:b2:ee:e7:da:09:18:08:e8:17:ed:21:
c1:d2:7f:ca:80:05:9e:c5:4c:b0:80:1d:a8:64:8a:
20:e5:ad:ad:f9:6d:e9:95:88:55:9d:14:17:91:00:
7b:2e:ab:26:96:d2:c0:32:73:f9:a5:ca:0e:f8:bf:
50:a3:49:31:77:58:0f:39:b9:90:b8:14:70:4a:9e:
ae:bb:94:5c:71:ec:d8:91:45:8e:11:e7:4e:d9:71:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:10:63:DC:13:F8:E4:43:AD:BC:B2:49:3D:E3:66:94:04:71:07
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/eGYQY9wT-ORDrbyyST3jZpQEcQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.83.0/24
Signature Algorithm: sha256WithRSAEncryption
50:53:de:11:ea:39:2c:46:fb:4e:e2:b3:64:23:05:9e:1a:58:
35:14:a2:f4:b4:dd:92:2e:61:4a:39:f4:bb:de:a1:66:63:34:
ed:e1:69:56:db:51:3d:ea:72:c2:7a:b0:31:12:c9:f8:fd:68:
40:cf:d0:be:69:49:d7:8a:0d:05:91:35:1e:99:19:bf:d0:bb:
57:70:52:6f:07:45:c6:8b:03:f9:68:68:d2:eb:92:8e:fb:b7:
81:5f:7d:48:49:c4:0b:a8:1a:88:fd:c5:c5:ef:0c:28:23:68:
eb:70:b7:7e:b0:9d:31:ad:25:07:69:c0:bf:c1:90:7e:aa:25:
46:25:f2:1d:b5:ee:9a:30:6c:e9:30:b2:07:38:6f:0d:7e:c4:
ee:43:7b:56:9c:ab:6b:b3:4d:d6:44:93:30:b8:b1:f7:bb:f3:
16:a9:1a:e9:81:37:a6:da:b2:f9:52:c5:da:90:3f:de:81:1d:
75:b9:25:0b:9c:b4:bb:9b:00:13:d6:e7:b0:66:1a:75:9f:b7:
19:48:f6:60:4d:c3:56:bf:18:b4:eb:21:95:19:54:1b:13:ed:
56:21:bf:7c:13:8e:d5:26:15:a5:a8:e8:d9:54:c1:c9:26:96:
d4:f7:63:4b:6e:ba:1f:d6:89:74:d6:d9:00:27:fe:65:dc:81:
54:40:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:48 2026 by rpki-client