Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nq5vyvj9F-CZnILC5L-lDJwc0FI.roa
File: nq5vyvj9F-CZnILC5L-lDJwc0FI.roa (raw, json)
Hash identifier: J9/FpINGrBrgGOtJVWG8L/jaJGQCUYl4wOEspLXCj/M=
Subject key identifier: 9E:AE:6F:CA:F8:FD:17:E0:99:9C:82:C2:E4:BF:A5:0C:9C:1C:D0:52
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691D6BA05EF9106E9C6B8C57DD3181
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nq5vyvj9F-CZnILC5L-lDJwc0FI.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214756
IP address blocks: 194.209.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:6b:a0:5e:f9:10:6e:9c:6b:8c:57:dd:31:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eae6fcaf8fd17e0999c82c2e4bfa50c9c1cd052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:d6:48:d3:9d:2e:e6:67:1a:51:18:bc:1d:
d7:77:da:49:36:45:c8:e6:ce:4e:eb:df:c4:25:0d:
af:c5:e6:7f:6c:ff:eb:c9:33:cd:07:bb:ff:61:03:
d9:ef:7d:eb:ff:05:aa:b9:88:3d:86:a5:30:37:e4:
e8:b0:e6:9a:fd:36:bb:cb:b4:73:cd:c9:72:c1:9f:
a6:47:10:57:bb:2a:0a:8a:3a:5c:56:22:1b:d1:f1:
e3:93:78:af:65:7c:b9:8d:99:fb:25:44:cb:92:e1:
78:ae:00:69:56:d1:7a:84:55:ef:f9:65:a7:ab:91:
6d:b0:65:68:12:98:1f:72:2a:38:f3:93:58:3f:72:
c7:d5:a6:81:6e:14:69:e9:c4:f5:dd:31:e9:6b:18:
9b:ab:c1:a5:f0:12:8d:a2:d1:13:4d:f6:53:09:69:
54:aa:4a:3d:c2:8c:ef:64:7c:26:2b:58:82:0f:ff:
a3:1c:eb:91:35:03:3b:60:39:73:bf:24:1d:8f:91:
c0:37:42:51:e4:5f:52:26:0d:7a:6b:e9:9b:f0:7b:
0f:db:96:a9:3d:4e:11:a8:ee:3a:8f:6f:37:95:57:
81:eb:a8:e2:d6:96:92:06:5b:43:e5:0b:37:6d:f7:
54:89:55:04:f5:d7:f6:ef:6b:bd:4f:ab:a4:92:4f:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:6F:CA:F8:FD:17:E0:99:9C:82:C2:E4:BF:A5:0C:9C:1C:D0:52
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/nq5vyvj9F-CZnILC5L-lDJwc0FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ec:6d:56:e5:00:af:10:b3:9e:76:13:90:80:c7:c0:c7:7a:
d4:1c:1a:f5:65:84:71:88:ea:55:b8:e9:fe:1d:65:6a:8c:c0:
f1:c9:15:a3:cc:bf:20:35:d5:e1:13:c4:d5:fc:b0:07:f7:08:
73:e7:e4:51:00:a9:e1:92:62:33:ee:84:c6:b4:95:47:a6:70:
0d:cb:90:b8:ab:cb:26:ff:06:22:01:79:3f:46:eb:90:3d:61:
48:e3:a4:10:79:14:7b:91:9e:50:8c:16:21:27:32:6e:d6:0c:
72:75:cf:2f:04:12:e6:a7:95:df:04:ec:79:73:43:9d:34:81:
2c:1f:55:cf:97:51:9d:4c:7b:3a:ad:55:22:3c:2c:3c:43:6a:
a6:86:d7:2e:e3:82:f4:ac:3b:7a:f7:c6:49:db:27:12:9c:f2:
8e:f8:a9:93:ee:8a:5d:af:5c:34:85:0b:7c:a1:3f:20:3b:aa:
fe:70:de:af:da:35:57:f8:6f:44:5c:60:07:89:a7:45:e2:33:
d0:51:1b:60:dd:bd:3e:ca:61:f5:89:6e:d7:49:82:bc:87:d0:
e7:5f:ff:10:57:c9:9c:c0:92:14:a9:ce:47:fa:85:4a:67:0c:
a5:fe:db:dd:77:97:7b:c0:aa:03:17:87:d5:2b:49:c4:52:7c:
fb:2d:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:56 2026 by rpki-client