Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l2WZQ5uofsNMiQhVO2xaqFsnIoU.roa
File: l2WZQ5uofsNMiQhVO2xaqFsnIoU.roa (raw, json)
Hash identifier: Mw36Tzxc+l2COvRaeP4laYzrXFRO2WUhskWtufmGoOI=
Subject key identifier: 97:65:99:43:9B:A8:7E:C3:4C:89:08:55:3B:6C:5A:A8:5B:27:22:85
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691E8CCFACC49FC3C474675492482D
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l2WZQ5uofsNMiQhVO2xaqFsnIoU.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215891
IP address blocks: 194.6.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:8c:cf:ac:c4:9f:c3:c4:74:67:54:92:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976599439ba87ec34c8908553b6c5aa85b272285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:43:16:4f:8a:e7:a9:25:ad:67:69:08:2f:
84:a1:1e:e1:a3:8b:8d:19:d7:c3:11:71:2e:10:40:
3a:6a:04:7a:1a:9b:13:17:be:90:b4:aa:19:76:8b:
b7:2b:ed:98:bd:09:3e:cb:79:c2:e8:c5:90:00:98:
c8:b3:8f:e2:fb:b6:f3:e4:37:a7:8e:41:29:db:13:
d5:e8:c3:86:50:53:b2:32:42:30:35:5d:d5:20:5b:
01:a8:c0:df:1d:8d:b5:89:ca:86:96:d1:b1:b2:20:
f9:44:87:3a:d1:96:db:d0:24:08:ba:c4:18:96:c9:
55:b9:05:3c:1f:f5:73:4a:2b:07:95:86:74:fe:13:
6f:3b:67:41:e3:b6:10:56:22:bc:45:f9:0a:a3:79:
f0:49:49:e5:55:26:d0:45:e0:8d:d1:31:1d:9b:16:
f9:b5:4d:2c:81:c5:b4:3c:15:a9:9c:cf:43:5f:d2:
aa:4b:9a:be:cb:bd:a8:b4:80:ff:a1:ef:ef:36:ce:
67:37:02:e9:d4:d5:8e:60:6a:52:a1:97:ca:c5:74:
25:cc:eb:b5:1c:34:c8:2d:18:ee:dd:25:e6:2f:a1:
d7:cd:4a:e0:db:38:6e:83:50:0d:ea:ff:6f:c0:e2:
43:0e:d5:79:ec:8a:e3:3f:61:05:83:2d:6e:cf:50:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:99:43:9B:A8:7E:C3:4C:89:08:55:3B:6C:5A:A8:5B:27:22:85
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l2WZQ5uofsNMiQhVO2xaqFsnIoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.174.0/24
Signature Algorithm: sha256WithRSAEncryption
53:01:84:d0:e9:ab:17:a6:fd:8c:17:d0:54:b6:6e:69:d5:d4:
8f:58:b0:38:7c:9f:53:de:0d:53:a4:fa:e6:b9:d9:aa:49:e5:
45:03:8b:2c:05:c8:33:87:7a:9f:d2:9f:36:54:d6:e7:b5:f5:
e8:7e:2c:7d:eb:08:2b:ae:24:0c:c0:f1:f9:46:53:a0:1d:35:
aa:2a:bc:ab:fc:e7:57:f0:fc:25:c1:56:f3:96:47:0f:64:3b:
aa:8f:db:68:2c:18:56:fa:3c:03:ec:ac:c2:38:70:ad:69:e1:
85:e1:0b:da:a4:8e:1e:fa:43:b3:16:ad:1e:ea:d6:1f:e9:aa:
b4:c9:aa:a7:3d:7c:e7:b5:c3:76:da:c6:48:f1:19:5f:6f:fd:
76:b7:f7:a6:a7:6b:99:5b:07:2e:da:da:5b:be:b4:ec:f9:0b:
85:33:d5:a3:34:c8:c8:c4:9d:fd:e0:54:55:9c:68:39:8c:ae:
cf:5b:ef:05:51:ab:3e:24:c4:a1:af:81:18:f7:94:c0:17:4a:
a9:64:b5:e0:09:d9:83:fd:6b:df:23:d6:ce:ba:ee:32:e2:45:
58:16:c4:e6:f5:17:1b:eb:3e:5b:27:6c:6a:bc:16:5b:2f:76:
ac:13:d4:f5:e0:9a:79:ab:44:62:10:b9:a9:32:0e:03:a0:91:
53:44:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client