Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-kNDgvzkeFav7F6SF72i739fV0.roa
File: m-kNDgvzkeFav7F6SF72i739fV0.roa (raw, json)
Hash identifier: sjW+OzJj+WiGfh9500PeLBc5JvYA4SAf06zIxouw6Mk=
Subject key identifier: 9B:E9:0D:0E:0B:F3:91:E1:5A:BF:B1:7A:48:5E:F6:8B:BD:FD:7D:5D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236909D9AEF26C21D64EFE57F87372E7
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-kNDgvzkeFav7F6SF72i739fV0.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199642
IP address blocks: 195.65.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:d9:ae:f2:6c:21:d6:4e:fe:57:f8:73:72:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be90d0e0bf391e15abfb17a485ef68bbdfd7d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:3c:1b:be:09:6b:d6:ec:13:4c:b9:64:03:
ee:c5:d7:d5:fe:3e:4a:05:5b:54:7d:d4:cf:cc:06:
86:0b:a7:c6:f2:fb:26:7d:c1:4b:eb:a5:92:11:7a:
e9:6e:b2:c5:0a:43:0b:3f:19:29:13:10:52:1f:d3:
54:6e:61:c7:70:90:b1:79:6f:ef:0a:a7:14:72:06:
20:a4:e7:ae:0d:82:2c:a2:c0:c6:b8:21:56:0d:21:
a6:b2:f2:99:5f:d2:a4:3f:87:4c:0c:32:d7:81:76:
1e:95:dd:7b:28:7d:57:c5:39:f3:6c:2f:ea:5a:d9:
2e:0c:32:1e:b3:26:c3:79:97:2b:d5:98:0b:fb:76:
ac:a1:71:d5:ac:21:01:a0:61:8b:a5:c9:7b:ec:12:
71:31:fb:2f:0e:34:c9:a6:ea:5b:67:40:21:31:b0:
e1:17:e6:6a:e7:fd:10:6f:c7:96:27:1b:10:d3:41:
4e:07:32:35:31:91:09:1e:08:7a:45:5f:34:7b:25:
12:27:83:ff:97:e4:16:5b:44:b7:f9:21:1a:cb:11:
77:fd:95:dd:10:58:a1:17:c2:c7:42:89:46:00:c7:
6f:37:5a:a1:0d:0f:c7:ed:06:f4:dc:6a:cd:54:68:
e0:15:1b:27:b4:a1:98:d2:5d:2d:c9:84:ef:4e:d8:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:0D:0E:0B:F3:91:E1:5A:BF:B1:7A:48:5E:F6:8B:BD:FD:7D:5D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/m-kNDgvzkeFav7F6SF72i739fV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:97:96:8f:6d:5e:50:25:da:bc:8e:2f:10:13:a6:36:2d:36:
f6:92:39:7d:f9:28:cf:96:63:cc:2a:a6:c8:74:fe:6e:ce:39:
ee:63:c5:7b:e1:27:7f:e4:2f:65:5a:d9:7e:32:9b:fd:ba:bd:
93:92:08:89:5a:a9:ba:db:85:cf:3d:20:c1:e0:00:a0:c4:4f:
72:9d:46:0c:b7:eb:2e:66:78:72:b6:aa:fb:a2:d8:f4:36:2b:
87:9e:08:36:c7:af:f1:5a:e2:ab:44:48:bf:2d:b3:77:a3:f9:
07:82:52:f5:c1:fa:e3:81:d1:1e:dc:68:55:09:92:0b:95:30:
14:d0:15:64:52:ac:dd:93:7d:a2:c9:bf:79:a1:64:10:cc:24:
04:37:19:d4:6c:f1:b7:c4:35:49:d9:93:a4:d4:f2:04:94:b4:
e9:92:d7:c9:61:25:29:75:c7:d3:d0:2a:43:3e:f7:1d:57:af:
d2:ce:9a:06:ab:10:bf:9d:4d:12:df:ef:2e:ba:c8:91:10:12:
ff:f9:3d:2a:14:d0:5a:13:50:d5:c2:0e:8c:f0:07:da:ac:04:
c9:f9:af:9b:0b:c6:dc:76:e6:97:ad:b9:e5:b5:17:65:c3:a9:
b5:95:33:e2:d2:28:45:d0:9f:e2:4d:61:df:59:0d:56:8c:75:
39:a4:e2:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQnZrvJsIdZO/lf4c3LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU5MGQwZTBiZjM5MWUxNWFiZmIxN2E0ODVlZjY4YmJkZmQ3ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypY8G74Ja9bsE0y5ZAPuxdfV/j5K
BVtUfdTPzAaGC6fG8vsmfcFL66WSEXrpbrLFCkMLPxkpExBSH9NUbmHHcJCxeW/v
CqcUcgYgpOeuDYIsosDGuCFWDSGmsvKZX9KkP4dMDDLXgXYeld17KH1XxTnzbC/q
WtkuDDIesybDeZcr1ZgL+3asoXHVrCEBoGGLpcl77BJxMfsvDjTJpupbZ0AhMbDh
F+Zq5/0Qb8eWJxsQ00FOBzI1MZEJHgh6RV80eyUSJ4P/l+QWW0S3+SEayxF3/ZXd
EFihF8LHQolGAMdvN1qhDQ/H7Qb03GrNVGjgFRsntKGY0l0tyYTvTtgj7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJvpDQ4L85HhWr+xekhe9ou9/X1dMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvbS1rTkRndnprZUZhdjdGNlNGNzJpNzM5ZlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0EAMA0G
CSqGSIb3DQEBCwUAA4IBAQAql5aPbV5QJdq8ji8QE6Y2LTb2kjl9+SjPlmPMKqbI
dP5uzjnuY8V74Sd/5C9lWtl+Mpv9ur2TkgiJWqm624XPPSDB4ACgxE9ynUYMt+su
Znhytqr7otj0NiuHngg2x6/xWuKrREi/LbN3o/kHglL1wfrjgdEe3GhVCZILlTAU
0BVkUqzdk32iyb95oWQQzCQENxnUbPG3xDVJ2ZOk1PIElLTpktfJYSUpdcfT0CpD
PvcdV6/SzpoGqxC/nU0S3+8uusiREBL/+T0qFNBaE1DVwg6M8AfarATJ+a+bC8bc
duaXrbnltRdlw6m1lTPi0ihF0J/iTWHfWQ1WjHU5pOKq
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client