Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qEg4bd7yzT38Df2b4V1BdUA8dNg.roa
File: qEg4bd7yzT38Df2b4V1BdUA8dNg.roa (raw, json)
Hash identifier: vtUqepJ51X7Bbcr4t+S8s0fYJvFrdtBgeWRp86m6c7Q=
Subject key identifier: A8:48:38:6D:DE:F2:CD:3D:FC:0D:FD:9B:E1:5D:41:75:40:3C:74:D8
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 01A01552E07870BEB4A22BC43426FE2B609D
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qEg4bd7yzT38Df2b4V1BdUA8dNg.roa
Signing time: Tue 18 Aug 2026 14:42:27 +0000
ROA not before: Tue 18 Aug 2026 14:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21273
IP address blocks: 193.5.252.0/24 maxlen: 24
194.209.118.0/24 maxlen: 24
212.243.54.0/24 maxlen: 24
2001:918:ff16::/48 maxlen: 48
2001:918:ff22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:52:e0:78:70:be:b4:a2:2b:c4:34:26:fe:2b:60:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Aug 18 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a848386ddef2cd3dfc0dfd9be15d4175403c74d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:7c:0b:9f:17:0b:f3:f3:b3:c5:e8:fd:fa:
fe:2a:f4:77:fe:8e:27:59:ed:44:4f:c1:96:b2:a6:
5c:f6:55:14:84:f8:82:ed:82:60:bf:50:c8:e2:f6:
aa:d1:02:6e:82:7f:e9:66:39:7e:6c:97:ad:22:e9:
3c:f2:d6:8a:cb:63:fe:d9:73:a9:7d:4a:a4:bc:a7:
f6:22:4a:23:e0:24:c7:09:6e:07:ec:97:7f:31:dd:
06:4b:30:14:49:a4:c4:09:da:03:94:bf:b4:f6:fe:
34:fa:92:8e:fd:db:07:8c:fd:7b:26:d6:42:3b:e7:
c2:09:d8:f4:09:c7:c4:f1:af:fd:dd:8e:df:65:de:
8a:2f:2f:4d:5d:78:60:8b:c5:0a:f1:ed:3f:69:d8:
1a:c0:88:dd:4d:41:8b:ca:f9:95:71:d7:15:12:61:
c2:24:3a:f5:b8:1a:06:bf:96:99:17:09:f3:7d:9a:
36:b9:04:59:6a:af:a0:de:30:a8:8a:7f:3f:50:c4:
47:ba:b3:8c:88:7d:93:f8:8e:b9:5f:f7:2e:f9:03:
92:98:e0:9f:c7:00:42:95:1d:6f:3f:bf:de:a1:f7:
82:c0:86:5c:17:93:e0:0e:08:6b:dc:ba:fa:a5:40:
87:f9:40:42:6a:23:d0:ed:d0:fc:43:27:c5:4e:64:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:38:6D:DE:F2:CD:3D:FC:0D:FD:9B:E1:5D:41:75:40:3C:74:D8
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qEg4bd7yzT38Df2b4V1BdUA8dNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.252.0/24
194.209.118.0/24
212.243.54.0/24
IPv6:
2001:918:ff16::/48
2001:918:ff22::/48
Signature Algorithm: sha256WithRSAEncryption
56:f4:ce:d5:19:b5:ac:f8:07:84:26:33:42:8c:ee:c8:e4:e0:
96:cf:7e:c2:d9:79:1e:fc:be:be:df:2d:c1:34:ad:0c:46:1b:
88:b2:5f:ca:dd:d7:7f:9d:34:bc:db:62:6f:05:3c:64:c8:ca:
e8:9b:ff:f8:02:11:42:36:85:91:74:28:21:46:cf:a7:a0:4b:
51:2a:8a:6b:ea:40:df:d0:70:06:0f:99:a1:9d:5e:a3:7c:a0:
29:bd:93:c3:9c:91:a7:a8:b8:72:f8:43:fe:93:10:75:0d:b5:
d0:64:b6:80:b2:60:de:75:d4:fb:1b:24:8c:60:61:69:50:98:
ed:34:4b:31:78:8d:f5:f2:28:0c:06:50:e5:5c:b9:10:8b:43:
08:36:53:d5:a5:03:10:bb:aa:53:82:9d:77:4a:01:66:96:17:
42:b1:b2:2c:34:23:95:25:1b:72:45:58:16:35:58:4b:e5:9e:
70:2d:76:29:5f:1f:92:27:d2:e0:ed:0d:59:9d:38:dd:b7:1c:
ac:01:1e:d8:c0:31:4d:41:8a:c9:f8:5e:f4:f3:2e:f5:ba:ba:
7a:bb:3d:11:01:8b:2f:e6:5a:14:a4:86:ed:b7:72:81:1f:1c:
a2:66:12:56:6a:b3:90:65:35:6b:55:ec:08:4f:38:8f:a3:96:
56:4e:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:07 2026 by rpki-client