Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kg7nr3OISBGbsgoK303fRcSeAn8.roa
File: kg7nr3OISBGbsgoK303fRcSeAn8.roa (raw, json)
Hash identifier: sbNbKPIea1oCRPgzRIB63lf6EpIiz7IegANfn9mdsds=
Subject key identifier: 92:0E:E7:AF:73:88:48:11:9B:B2:0A:0A:DF:4D:DF:45:C4:9E:02:7F
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F743D4003D1854032BCEB6E0CBEB
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kg7nr3OISBGbsgoK303fRcSeAn8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21190
IP address blocks: 194.209.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f7:43:d4:00:3d:18:54:03:2b:ce:b6:e0:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=920ee7af738848119bb20a0adf4ddf45c49e027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:8a:b4:0b:ae:71:b2:4a:8e:b0:3e:4d:5b:
8f:21:d1:0e:13:a1:6c:13:c1:fb:95:4b:d1:71:21:
a2:67:cf:92:86:fd:1d:49:f8:35:24:d5:84:d3:0d:
f8:d7:34:26:d0:0e:62:84:d9:20:b0:bf:61:14:13:
29:e4:7d:5e:7d:5f:ac:c3:8a:9e:f1:2f:e3:49:d0:
d4:a2:bb:e2:cf:2d:aa:ca:4a:f1:b4:bb:c4:bf:03:
8d:ee:f4:95:3f:fc:db:75:3f:e2:ad:4c:d2:72:69:
f1:35:46:8b:0c:11:f0:bf:fb:79:13:d8:41:f3:24:
bb:14:48:0d:ca:84:19:65:43:7d:6b:f6:a6:02:05:
90:53:c4:fa:2e:7d:98:2b:5d:05:e1:2a:ad:2f:bc:
7b:95:d3:d1:0c:7a:ee:d7:a8:54:5a:81:85:56:3f:
68:0e:7a:17:2a:7e:de:f8:d6:f2:73:a5:c0:38:7f:
b4:31:c0:7b:da:1d:8a:8a:ff:80:76:b8:25:5f:4c:
39:1e:b0:e4:00:6e:c3:ab:a5:1d:7b:a7:7b:0f:f6:
25:1d:9f:e7:e3:ce:13:e7:18:23:65:81:58:c0:69:
88:00:25:b0:a5:88:54:b6:dc:f4:f0:ab:f2:65:9e:
ca:4c:07:bb:bf:31:3a:25:d8:78:68:6e:11:3d:4e:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:E7:AF:73:88:48:11:9B:B2:0A:0A:DF:4D:DF:45:C4:9E:02:7F
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kg7nr3OISBGbsgoK303fRcSeAn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
53:03:56:ff:f2:1e:07:f4:ec:a0:2c:ce:4e:01:1c:21:4a:28:
6d:93:1d:34:51:be:00:08:a1:5f:f5:1f:3e:04:f1:ac:e0:e2:
77:eb:d9:41:09:b9:89:eb:41:94:a4:89:54:45:4b:29:2b:ea:
bd:71:5e:cf:6f:ea:b3:2a:48:bf:ce:7e:bc:8b:51:cc:4a:e7:
26:d0:87:55:db:a0:cc:33:03:8c:0d:45:e0:7d:b5:b5:8c:2f:
27:b2:e1:6f:a8:a3:00:88:a3:3c:76:5a:9d:83:3f:0f:30:d6:
32:41:5a:37:4a:0a:a9:3c:fe:3c:27:00:64:4e:38:b6:7a:f9:
92:b7:9a:e6:d6:9f:16:82:96:a8:c3:04:7a:dd:20:ce:40:69:
a0:47:c4:e0:bd:9c:c1:60:2f:49:5d:15:4f:15:fe:e3:bb:47:
55:5f:19:60:67:e2:50:19:04:1e:4e:ca:0b:67:24:16:b4:49:
aa:4e:e2:72:24:45:89:3d:cb:14:44:87:03:33:d3:7f:97:8f:
1a:c2:91:44:6b:a6:98:5c:f3:7f:a2:be:ad:4d:8a:8c:d0:81:
46:d7:3e:d2:a0:98:33:e7:90:0a:b9:5f:61:e4:63:69:d6:f5:
16:44:1a:32:38:b8:74:d4:7d:bd:99:83:a8:0a:66:16:e4:19:
09:54:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client