Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-BOwDtsnL6KXPlffx5Go18djDE.roa
File: m-BOwDtsnL6KXPlffx5Go18djDE.roa (raw, json)
Hash identifier: eKHwGjnyNWnkJNmA6T2o7AZnMCYLNh4QKYD9PqLpQW4=
Subject key identifier: 9B:E0:4E:C0:3B:6C:9C:BE:8A:5C:F9:5F:7F:1E:46:A3:5F:1D:8C:31
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368EFCC064F6A277EEABBC4253AB9EA
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-BOwDtsnL6KXPlffx5Go18djDE.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8300
IP address blocks: 193.5.20.0/23 maxlen: 23
193.5.30.0/24 maxlen: 24
193.5.158.0/23 maxlen: 24
193.134.248.0/23 maxlen: 23
194.209.74.0/24 maxlen: 24
194.209.218.0/24 maxlen: 24
212.243.101.0/24 maxlen: 24
2001:918:1ab::/48 maxlen: 48
2001:918:f00::/40 maxlen: 40
2001:918:ff70::/44 maxlen: 48
2001:918:ffb7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:cc:06:4f:6a:27:7e:ea:bb:c4:25:3a:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be04ec03b6c9cbe8a5cf95f7f1e46a35f1d8c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:7a:08:1c:b2:80:06:6b:d3:02:ba:d5:5d:
8f:c5:95:04:e5:aa:8e:3d:67:16:e3:31:7f:09:fd:
46:99:c2:37:d2:73:8e:e0:f9:cc:0d:71:5a:ea:c4:
aa:d9:4d:36:50:c4:de:b1:f3:20:85:75:47:c4:ce:
1d:7c:af:c5:af:a2:2b:3b:3c:af:26:1b:eb:fb:4f:
03:df:3b:43:8b:90:66:07:8b:4f:a4:65:e6:38:54:
06:d8:24:11:2d:1d:e7:7c:b3:f6:27:e3:4b:97:d8:
32:da:8a:20:37:91:3b:19:8f:43:ae:2e:28:d8:25:
a0:f4:48:0d:ff:52:c8:25:0c:5e:03:5d:ab:58:f3:
c7:26:6d:ad:f4:5a:84:77:5e:df:a6:b2:47:ec:19:
ff:e1:b3:50:44:88:8b:f4:76:2c:66:98:6f:94:00:
92:c2:d0:51:ab:15:54:58:bb:72:c0:a8:85:f0:d5:
37:8a:22:82:90:e4:bc:b4:91:55:52:1c:a0:7a:80:
07:d2:5e:41:2a:a4:07:d7:4d:6d:99:32:7e:ed:71:
37:d6:76:5e:87:68:a8:99:48:b9:7a:00:7b:14:f8:
3e:40:84:36:a4:74:e3:6c:7f:d2:62:b2:bc:37:91:
e0:40:c9:c0:65:b1:b7:07:94:d7:86:c3:45:13:7b:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:4E:C0:3B:6C:9C:BE:8A:5C:F9:5F:7F:1E:46:A3:5F:1D:8C:31
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-BOwDtsnL6KXPlffx5Go18djDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.20.0/23
193.5.30.0/24
193.5.158.0/23
193.134.248.0/23
194.209.74.0/24
194.209.218.0/24
212.243.101.0/24
IPv6:
2001:918:1ab::/48
2001:918:f00::/40
2001:918:ff70::/44
2001:918:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
36:ff:d4:86:ca:ae:8a:37:f8:99:60:1d:3a:1c:02:65:e7:ce:
4e:5b:50:cc:77:e0:09:b4:77:ef:58:b3:0b:36:a2:29:11:24:
2b:28:0b:b7:23:c5:6e:42:65:1f:ed:9f:d0:41:c1:22:9c:bd:
3c:e7:6c:68:4a:51:0a:48:54:39:12:cb:36:d5:03:35:92:b0:
27:16:7a:8c:15:5d:98:04:96:ef:32:3d:3f:84:4c:0d:8e:82:
78:d8:0e:c9:8e:fb:0d:cf:b3:54:6c:43:41:6e:76:4c:a9:af:
4b:69:97:91:fe:06:95:42:a1:9a:79:c2:aa:d7:98:c0:95:4d:
c6:8d:61:20:53:89:75:2e:31:cf:c5:d0:d9:85:c3:73:10:8c:
f2:af:0f:25:21:5b:67:f2:6d:a1:be:ad:89:a2:47:70:4a:5b:
c7:56:64:42:0c:36:5b:10:5c:9a:4f:d5:1d:39:45:c7:37:60:
8e:d3:1b:88:41:c9:d2:db:e5:9c:b0:ef:26:3a:e4:4b:0b:c3:
66:69:0f:d5:b0:98:46:40:0c:f5:d1:f6:79:fe:55:1f:44:eb:
4a:34:94:1c:fb:03:3d:4a:32:fc:61:03:0a:49:e1:33:14:38:
c3:b0:64:e3:ad:78:87:ee:9f:28:89:4e:09:ac:02:94:06:12:
44:46:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client