Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pk0NrC78x0MzE8Bh8X_22s9ASU4.roa
File: pk0NrC78x0MzE8Bh8X_22s9ASU4.roa (raw, json)
Hash identifier: Tt7HXm5J0AXPVU+yZSoB5H1PoBfT/l8JtYwtNeV3Xss=
Subject key identifier: A6:4D:0D:AC:2E:FC:C7:43:33:13:C0:61:F1:7F:F6:DA:CF:40:49:4E
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236906732B07C5A9AC1607E4DBB93158
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pk0NrC78x0MzE8Bh8X_22s9ASU4.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57370
IP address blocks: 193.5.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:73:2b:07:c5:a9:ac:16:07:e4:db:b9:31:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a64d0dac2efcc7433313c061f17ff6dacf40494e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:2a:5a:17:91:38:86:68:51:12:08:70:50:
34:c2:31:11:b6:7f:7d:64:43:11:2e:7b:31:7e:31:
f3:d7:26:ba:5f:58:b4:b2:5a:20:4d:e1:4d:cb:98:
32:53:0d:6c:62:e2:53:dc:c6:72:1a:f7:cf:c6:94:
7f:3e:28:7b:18:3c:62:03:2b:46:3f:da:b9:24:ba:
9e:8c:04:1a:fd:bf:f2:7c:8b:31:26:15:74:50:6a:
07:a5:0b:d1:93:dc:da:f2:51:62:9a:5b:7a:43:ef:
f8:8a:f0:b6:a8:ce:eb:8f:9f:57:6b:29:c1:43:6b:
f7:20:fe:20:ac:06:b6:bf:b4:2c:c3:be:d7:98:16:
80:88:22:16:fa:08:8f:7e:50:e2:30:55:8e:f2:70:
23:45:00:e8:09:95:9a:fa:2d:d7:0d:24:c4:f7:ec:
5d:8d:f1:84:dc:7f:23:f7:1c:1e:89:fc:e9:85:8b:
60:ae:3b:a0:dc:ae:1c:df:ce:65:6f:05:0e:df:c9:
3b:f0:d5:8d:4b:a3:4a:7f:b6:ed:19:82:e7:83:6f:
69:9f:5b:00:0c:04:7e:c7:bc:6f:b9:62:7f:0c:a3:
17:23:c1:87:37:14:b2:59:b0:52:15:5c:90:0f:4d:
ba:5f:f1:4d:92:e5:ad:cf:a0:6f:77:67:02:f6:01:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:0D:AC:2E:FC:C7:43:33:13:C0:61:F1:7F:F6:DA:CF:40:49:4E
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pk0NrC78x0MzE8Bh8X_22s9ASU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:04:e2:f4:4b:15:0b:71:9e:ae:4f:0e:0d:90:38:97:dc:19:
a8:56:3a:84:5d:91:64:7f:ac:ec:1c:60:55:a7:47:e7:7e:39:
98:9e:4b:93:47:a2:2a:8b:de:54:48:94:f1:2d:29:58:78:cd:
b0:08:d8:ff:c9:35:26:1c:15:45:c8:89:a7:46:4b:57:c4:2d:
56:e6:e8:53:97:4f:d6:8d:ca:c6:6f:33:a9:e3:d0:34:9d:49:
a3:4f:24:cc:f5:f4:0f:2a:22:44:10:49:4a:fd:dd:13:bc:d2:
e9:b1:6e:15:91:61:fd:8a:32:8d:a6:10:dc:83:f0:55:d4:18:
75:d9:cb:f7:7d:3e:cc:f4:98:8b:0a:02:b7:09:c5:ab:7c:db:
14:5b:dc:ca:5a:ba:c1:af:ce:ca:bf:f2:6d:f1:77:3c:7e:19:
42:fd:35:30:f4:fb:d3:ba:4b:19:13:71:73:1e:f0:27:6c:84:
b8:9b:c8:a0:c9:80:65:38:86:2f:35:2d:11:17:98:ce:0a:7c:
9a:be:80:3a:04:29:9f:2c:1f:db:87:b9:68:b9:30:91:84:2b:
4e:d7:b8:b1:e4:ea:d1:fb:cd:11:af:ac:85:d1:26:68:2b:52:
06:fa:56:68:29:cd:32:78:c9:f7:76:4f:b9:a6:1c:83:1a:41:
8c:51:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:57 2026 by rpki-client