Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kA_ydAoq3TC8zH4AYO-6-XPpK1I.roa
File: kA_ydAoq3TC8zH4AYO-6-XPpK1I.roa (raw, json)
Hash identifier: P+B5dpya9vKypqdE2O4pASf8WNUlil262P91F60W1q8=
Subject key identifier: 90:0F:F2:74:0A:2A:DD:30:BC:CC:7E:00:60:EF:BA:F9:73:E9:2B:52
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F510CE1F99602E56F34E9ED8A3AE
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kA_ydAoq3TC8zH4AYO-6-XPpK1I.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16114
IP address blocks: 194.209.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:10:ce:1f:99:60:2e:56:f3:4e:9e:d8:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=900ff2740a2add30bccc7e0060efbaf973e92b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:f2:c4:89:0c:e8:0a:c9:cd:81:ab:9d:40:
db:09:d8:93:0c:9b:b5:36:d1:69:53:89:2e:e7:94:
e3:9b:42:45:6f:2b:eb:02:25:e5:2a:93:f8:4c:8e:
1c:5c:4e:77:ea:bf:84:0b:90:be:23:6c:f6:bc:7b:
05:78:5c:83:d5:b4:fc:79:7e:c9:45:71:77:14:22:
96:5b:68:78:d0:23:fa:06:64:96:23:ea:db:b6:c3:
ed:01:5f:0a:8e:2a:cf:8d:d0:8d:17:4f:15:30:c8:
9f:17:eb:b7:46:ac:b0:c5:38:7d:99:76:b7:da:61:
82:35:ef:85:ef:c2:7e:d3:45:19:a7:ec:cb:61:40:
f1:1c:9b:bf:5f:4a:f3:c5:d6:b5:9e:87:02:67:0e:
a7:c1:ff:ba:ce:7c:eb:5b:21:4a:b0:12:09:84:79:
32:33:ce:f0:b0:7a:50:69:78:1c:bb:a3:f2:b1:90:
24:4b:1c:08:53:ef:1f:b6:b8:88:12:1f:17:d2:14:
ae:96:58:71:70:ef:67:91:ac:c1:fc:df:46:bb:5e:
a2:7b:a6:2e:9d:7d:e7:37:6d:4b:fd:cc:3d:ef:4b:
b9:27:ae:7a:df:3e:d6:1f:5a:ac:82:3c:4e:7c:55:
f1:d6:2f:62:db:ed:e3:9d:9e:3f:dc:30:4f:5e:e5:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:F2:74:0A:2A:DD:30:BC:CC:7E:00:60:EF:BA:F9:73:E9:2B:52
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kA_ydAoq3TC8zH4AYO-6-XPpK1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:63:6e:eb:34:c2:1a:45:bf:af:df:81:dc:34:e5:ac:7c:88:
a1:56:a3:d5:f3:cf:6a:92:ef:b1:e9:19:a8:ac:da:f3:44:8d:
22:31:6d:af:d7:60:a7:b8:60:96:39:96:51:5f:22:e4:7d:05:
da:a3:a3:cf:17:75:04:ff:fb:17:23:cd:68:72:8d:28:78:7f:
97:43:06:92:5c:22:79:7d:71:03:17:e8:cd:15:ae:61:69:fa:
74:33:4e:35:52:4d:7e:15:c9:9c:5c:d6:32:86:b3:d8:64:b0:
6f:5d:4f:09:5b:c4:0f:9b:e9:bd:6b:98:cd:e3:94:a7:bc:6c:
2f:a6:3a:63:6a:62:30:a4:ad:70:58:e9:c8:10:fd:f5:eb:48:
fc:35:f9:89:90:68:30:9d:92:14:e1:8c:0c:20:58:c4:d9:8e:
9c:e9:4d:49:3d:1f:ec:fe:04:58:5b:c2:46:b1:24:9b:c2:fa:
e2:b8:77:ba:95:39:c6:9e:c4:0f:7a:48:67:b6:a5:58:29:f9:
38:69:ab:0a:27:77:e9:99:e7:7c:e5:81:1a:67:13:b1:31:66:
30:a2:35:7e:1c:0a:2b:50:75:73:15:6b:72:46:8a:44:8d:33:
9c:51:f5:24:30:dc:16:f3:a6:bc:b5:33:f5:34:b9:99:3b:2e:
aa:e7:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client