Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pus9KilQWkzdMcbB_xR2YWDdwiI.roa
File: pus9KilQWkzdMcbB_xR2YWDdwiI.roa (raw, json)
Hash identifier: Ro13djXdPJyZ4OgP3EnjEqcZ48sybnTu6hbhf2MDqDc=
Subject key identifier: A6:EB:3D:2A:29:50:5A:4C:DD:31:C6:C1:FF:14:76:61:60:DD:C2:22
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690D3B9EC6F5A744A029A0175B43D7
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pus9KilQWkzdMcbB_xR2YWDdwiI.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202360
IP address blocks: 194.6.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:3b:9e:c6:f5:a7:44:a0:29:a0:17:5b:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6eb3d2a29505a4cdd31c6c1ff14766160ddc222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:11:ec:98:e5:ee:c9:c9:96:de:9f:88:46:
bf:ae:25:4c:b6:aa:85:a5:8d:d1:b4:30:35:ab:86:
9f:95:05:5e:35:98:6e:74:72:35:d5:4c:49:2b:cc:
8c:41:3a:c4:01:b7:c0:cc:ad:7e:af:39:68:da:d5:
35:00:f6:2f:eb:e6:02:e8:32:b3:3d:d3:5d:78:f0:
82:b5:19:e6:c9:82:3e:b8:7c:55:c2:e6:00:f2:b9:
73:8d:80:1b:ea:01:55:83:de:1d:df:91:6d:bd:96:
19:5f:8d:ac:89:98:fa:28:95:a7:62:82:d1:97:a8:
62:59:5f:e3:de:95:8c:72:59:3d:87:13:9e:5c:70:
1e:ce:31:af:d9:10:7d:ea:a4:78:22:aa:39:59:af:
41:6e:11:b0:08:9c:9f:39:c9:30:3d:3e:cb:ac:2e:
e5:83:3a:99:8a:93:ad:c4:1d:a3:ca:11:8a:2f:b3:
33:0c:b1:5b:9a:6d:b6:fb:cc:ef:9b:46:c4:e1:c5:
3b:63:99:a9:c5:92:cc:fa:54:ee:30:ea:99:36:63:
69:82:99:7c:53:16:d4:3e:4a:04:58:d4:08:44:c5:
1b:53:df:9e:80:a1:3e:77:34:03:17:8a:33:48:91:
ec:7b:10:f0:f5:b0:c3:e1:3d:79:b1:92:79:a4:b5:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:3D:2A:29:50:5A:4C:DD:31:C6:C1:FF:14:76:61:60:DD:C2:22
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pus9KilQWkzdMcbB_xR2YWDdwiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.186.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6c:cf:99:65:43:94:f7:12:30:f8:ee:cc:48:44:96:9f:c2:
ca:30:3b:bf:66:5c:2c:b6:34:5b:57:fc:e6:c7:4f:3b:d4:a4:
44:48:6b:0f:4d:d2:e4:11:ab:61:10:4f:f5:5a:66:bf:a4:6d:
4a:ea:8d:ec:d6:dd:fa:54:0f:53:ee:0c:bc:a0:f2:5a:63:14:
06:51:01:5a:42:e6:94:a4:29:da:54:17:dc:aa:65:61:55:e2:
0f:58:26:94:a6:76:99:27:16:c2:e4:54:2b:fb:32:6e:32:68:
5f:f6:2b:7c:ad:0d:6d:c4:2c:88:ab:d9:84:b4:1a:a1:f6:26:
19:ad:aa:65:46:0f:c3:9c:e8:a9:10:36:21:3d:8e:e3:b4:3d:
a3:95:27:0c:b1:71:32:ed:c8:c5:14:46:76:36:2d:f8:46:4d:
78:35:85:e0:8f:dc:cc:6e:ae:20:3c:eb:0c:54:80:56:37:51:
98:61:25:72:8f:f6:2d:4d:ef:48:1f:f0:e5:e6:11:0f:cb:ac:
b5:c0:e4:45:09:6a:a8:10:41:51:0c:d0:47:1a:80:45:d7:84:
80:de:12:7a:d5:2c:e6:01:84:4a:88:24:11:d9:59:61:e0:70:
09:a2:2e:04:68:b2:15:08:c9:e3:b7:80:35:56:13:4f:9e:7e:
0c:82:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client