Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ha7tU6trqViOi4HFbBR1Ig0Q5XI.roa
File: ha7tU6trqViOi4HFbBR1Ig0Q5XI.roa (raw, json)
Hash identifier: Pm8JbMGlBx0msjiCheNRwe+etsfQIQiih+1ZeDqkIfE=
Subject key identifier: 85:AE:ED:53:AB:6B:A9:58:8E:8B:81:C5:6C:14:75:22:0D:10:E5:72
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369021A2F30C14D019466EC9E702C54
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ha7tU6trqViOi4HFbBR1Ig0Q5XI.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48038
IP address blocks: 212.243.39.0/24 maxlen: 24
2001:918:ff3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:1a:2f:30:c1:4d:01:94:66:ec:9e:70:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85aeed53ab6ba9588e8b81c56c1475220d10e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:44:38:ef:52:4c:7c:44:47:ea:ad:c6:0f:
38:98:be:99:8c:3d:cb:53:64:b0:21:df:5e:d9:c5:
b8:cb:4c:4b:9b:fe:4b:33:02:96:7c:34:25:33:15:
d0:0d:61:30:36:0b:bc:37:8f:cc:a0:75:6a:39:d1:
1b:a9:3e:ae:0f:0d:53:f5:0c:40:34:68:77:a8:98:
c6:19:df:7f:47:fe:a4:ed:a6:db:04:0b:96:0f:1c:
23:e3:2c:20:90:37:8b:0d:af:83:41:9b:f6:db:8a:
e8:a5:e8:46:89:8e:84:7e:37:9f:60:19:af:d8:f1:
28:42:88:ea:86:44:a4:88:03:09:73:66:09:95:87:
1a:e2:ca:30:07:a5:20:c1:c0:ee:fe:54:06:74:2a:
4f:bc:e8:48:88:22:19:75:3b:90:aa:b5:a5:df:ed:
ad:01:e6:88:b3:85:ad:df:81:7a:c8:08:ea:24:88:
28:26:3f:ef:fe:81:e5:eb:e9:43:3d:60:3c:a2:6f:
bc:0a:b2:49:e5:a7:50:57:7b:28:75:61:61:81:dd:
1d:c3:3c:6b:ce:48:fb:ff:c7:dc:7e:29:b8:2a:ff:
e3:25:d6:25:b4:4a:7c:72:18:59:43:e3:3c:e2:98:
fb:b6:35:9e:23:4f:8b:79:a6:b6:9f:25:ee:6d:c7:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:ED:53:AB:6B:A9:58:8E:8B:81:C5:6C:14:75:22:0D:10:E5:72
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ha7tU6trqViOi4HFbBR1Ig0Q5XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.39.0/24
IPv6:
2001:918:ff3e::/48
Signature Algorithm: sha256WithRSAEncryption
46:4a:b7:6c:a6:58:7f:20:c1:ac:a4:eb:58:92:36:2f:f8:e2:
42:cf:ae:63:e9:9c:e1:11:9d:aa:28:e4:a1:af:1c:48:f3:1e:
35:8c:b9:c9:f3:57:48:74:73:39:cf:e1:99:0d:6a:aa:95:2d:
b7:52:80:72:a2:c3:3f:b5:e0:73:fa:2c:e2:18:e6:64:50:af:
bc:d8:ef:51:16:54:81:48:e5:a9:bb:ab:24:0c:d3:05:b5:ac:
6c:6a:f2:5a:83:04:f8:50:1f:a6:ac:8a:14:80:6c:30:f5:12:
ad:74:3e:15:92:e3:64:a4:88:a6:40:f0:60:00:5f:78:a0:8c:
09:a6:ff:8a:24:6e:69:56:ca:08:0c:7e:91:bb:3f:a8:33:d1:
06:80:d2:a9:6c:a2:ce:32:54:4c:31:b5:b6:6d:61:f4:c0:32:
92:7c:5c:67:c7:54:23:8b:a6:b5:3f:9a:7c:3e:c8:70:b6:ea:
77:ea:b6:85:58:51:96:54:2e:f2:6b:ee:e2:1d:15:f7:dc:06:
c9:b5:1c:56:66:c1:4c:c0:dc:d2:06:0c:e4:05:07:f3:90:e1:
be:a3:30:1a:9c:1a:13:bd:60:19:ac:85:72:cc:1a:12:f7:52:
4f:81:f1:53:fa:ff:e5:f4:6a:7e:a9:c2:96:43:f9:dd:7e:dc:
3e:17:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:57 2026 by rpki-client