Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/q_Up2Syp87xpxF2JDfDRc07Ltm4.roa
File: q_Up2Syp87xpxF2JDfDRc07Ltm4.roa (raw, json)
Hash identifier: QDbXrEWwL+WKuOoZn7T6xMqkpyhZqZFKAZMeB6dA6hU=
Subject key identifier: AB:F5:29:D9:2C:A9:F3:BC:69:C4:5D:89:0D:F0:D1:73:4E:CB:B6:6E
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236912013D247BDD53A3CE14AFAD5A9F
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/q_Up2Syp87xpxF2JDfDRc07Ltm4.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204970
IP address blocks: 194.209.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:01:3d:24:7b:dd:53:a3:ce:14:af:ad:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abf529d92ca9f3bc69c45d890df0d1734ecbb66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:01:8b:19:eb:78:14:dd:b8:7c:b1:c1:e9:
f0:4a:09:88:16:f7:7c:27:f3:dd:46:49:8a:74:d0:
93:73:ce:15:b2:97:4b:f0:f4:68:51:49:c6:72:30:
43:30:f8:85:4e:dc:72:ba:82:ea:3d:20:d3:43:35:
96:7c:09:19:db:90:ff:02:9b:3e:8f:aa:51:2d:e1:
45:52:42:9d:e4:c5:16:0c:ed:d9:38:50:70:13:1c:
02:6f:79:f4:eb:af:0d:a8:b4:f8:69:23:a6:e8:c7:
ae:03:84:8f:c9:30:d5:7d:1e:a9:98:ed:ba:51:2e:
4e:3b:db:14:3e:ff:cd:29:7a:0d:8f:ec:88:f9:7f:
72:0e:52:36:eb:50:15:72:91:f8:b9:50:ab:a6:c4:
91:d8:05:17:0a:46:cc:00:28:e0:11:47:d5:65:f2:
5b:ad:f4:ff:a9:f9:5b:57:d1:aa:78:b7:31:d9:71:
1a:a5:05:9a:e3:77:55:7d:23:e1:48:2a:51:c6:e0:
d6:bf:a3:4e:8d:03:a3:b6:5c:37:38:5b:f9:f6:81:
28:48:93:df:21:99:d2:e7:96:f8:38:9c:39:f7:84:
24:fd:75:bb:58:54:a1:09:25:09:e8:44:ed:af:09:
5a:1f:21:9e:5e:17:9d:13:ef:13:fb:63:c5:a3:40:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:29:D9:2C:A9:F3:BC:69:C4:5D:89:0D:F0:D1:73:4E:CB:B6:6E
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/q_Up2Syp87xpxF2JDfDRc07Ltm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b3:6a:6e:e9:69:8b:b0:1b:2e:52:51:ff:9c:88:3e:45:4c:
88:0b:a3:21:bb:3c:88:20:aa:9c:21:1d:0c:6e:2b:58:b6:cf:
ee:40:55:15:f9:62:42:5e:97:9a:be:91:00:d8:cb:20:10:d7:
56:c6:a6:0a:ee:83:2e:c4:4c:d1:5f:0c:5e:e1:34:cb:96:75:
0b:ed:68:26:f3:2a:6b:60:27:05:ef:11:97:3c:a7:c2:80:17:
bd:dd:b9:25:f3:eb:fe:b6:73:e0:6a:f1:14:00:a9:23:c3:ae:
eb:36:d9:c1:28:c9:eb:9b:cd:6d:b7:04:38:04:1f:58:0c:4b:
00:67:ac:fc:b8:cd:64:bf:b0:da:df:c4:4a:76:e1:6c:c2:45:
ce:4a:1a:42:2b:ac:d2:ce:85:b4:98:c3:d4:a8:8e:77:a6:45:
be:a1:1b:4b:2f:4d:97:07:1f:0e:a3:1d:b4:52:84:b1:f3:d6:
6f:98:59:86:76:5a:7c:a3:32:db:b3:6a:72:81:7e:dd:54:a4:
01:30:08:00:1b:86:4c:59:9c:55:9b:64:ae:f3:f5:b4:fb:e7:
c8:3d:40:04:41:8a:62:6d:16:e0:d1:fa:92:55:4c:6c:e3:ad:
57:82:82:0b:81:d2:42:fb:1f:c7:1f:10:89:43:3a:cd:4f:a5:
70:d0:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client