Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/j9er4KjtsgcbSiSfFhtbQ5lGwN4.roa
File: j9er4KjtsgcbSiSfFhtbQ5lGwN4.roa (raw, json)
Hash identifier: 5uuzbKHa7h+W/DUSFGu+7ekcNwnqynt71vp1QHlYc64=
Subject key identifier: 8F:D7:AB:E0:A8:ED:B2:07:1B:4A:24:9F:16:1B:5B:43:99:46:C0:DE
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691381537AF302EBC3A39CC8E0F38C
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/j9er4KjtsgcbSiSfFhtbQ5lGwN4.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205492
IP address blocks: 194.209.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:81:53:7a:f3:02:eb:c3:a3:9c:c8:e0:f3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd7abe0a8edb2071b4a249f161b5b439946c0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:bc:38:f8:fb:70:10:33:2c:a8:cb:34:a8:
1d:df:ce:88:01:8a:51:9a:d5:20:70:0f:d4:df:e0:
5b:6e:ba:59:7f:d5:41:02:66:d3:8a:e1:60:70:5c:
16:df:4e:7a:a6:31:91:d3:b9:cf:77:76:9b:a7:3d:
44:45:30:31:6a:5b:a4:87:64:38:7a:c8:62:35:52:
df:be:23:4b:17:5d:8c:cf:cb:a5:0d:a8:26:25:ce:
10:e3:aa:76:50:17:6d:00:74:94:67:0d:1e:64:ec:
7f:b3:9b:d4:76:6a:f6:c9:14:a4:b4:17:85:3b:5b:
b9:e8:ea:a5:d1:39:97:d2:96:09:c6:fa:78:8a:b7:
4c:53:41:04:11:c6:b3:8a:c2:16:e3:f4:4a:21:f5:
e9:ec:14:90:45:24:5e:c9:cf:23:e3:2c:39:fc:ad:
c8:7b:9b:3e:65:d9:c9:6e:7d:5c:27:e5:67:33:c3:
e5:ab:09:5e:df:11:d1:78:c0:6a:62:e9:2c:71:0f:
db:cc:f4:26:67:f0:66:c5:2f:bb:e1:90:98:6e:46:
4a:15:b7:39:dd:57:64:d7:1a:e2:f7:38:51:95:0d:
a1:74:39:e8:50:87:a4:30:79:07:f9:d7:3d:7f:b0:
e0:b0:8b:a7:27:d3:c1:18:ab:9d:57:c3:b8:1d:47:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:AB:E0:A8:ED:B2:07:1B:4A:24:9F:16:1B:5B:43:99:46:C0:DE
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/j9er4KjtsgcbSiSfFhtbQ5lGwN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.80.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bb:01:31:5d:7b:24:bc:13:57:61:18:d5:b9:7b:6f:c6:a1:
b9:43:9d:c5:e5:97:58:98:0c:61:67:9b:01:c6:d9:3f:aa:11:
b4:35:09:0b:fb:e7:52:19:28:4f:a6:a1:90:79:5f:51:3a:df:
3a:05:c8:0a:5b:97:22:e0:6b:5a:b1:73:43:35:d7:f8:69:32:
ae:f6:1d:bf:b7:b0:a8:5d:0c:76:0d:63:33:74:ef:2c:11:29:
dd:08:0c:20:e0:64:ff:fa:79:82:b7:e5:64:13:0d:4f:58:5c:
28:f0:90:f5:8f:d9:c1:97:5e:0e:e9:0a:1c:07:6c:25:93:39:
58:d7:c8:93:02:31:fb:3f:e6:3b:2d:b9:19:4c:91:01:cc:ae:
92:5a:53:f1:22:93:89:34:78:60:31:a1:4b:79:97:19:96:3c:
49:b2:a9:31:cb:ef:89:b4:bb:9e:5e:e6:e3:be:a4:78:2a:5c:
86:5e:04:49:a0:95:b8:48:bc:73:c3:d7:db:64:84:4b:ac:7e:
6d:a3:e6:db:61:ca:32:1e:b8:8f:e9:f8:ea:1f:ec:be:51:72:
b7:da:7f:05:62:95:97:78:94:51:5d:c2:b9:64:72:5c:8f:3d:
d1:52:ab:f9:b5:8a:10:9e:75:0a:8c:30:64:f4:a6:43:f1:c3:
8c:6e:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:58 2026 by rpki-client