Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r1cby8N1jeNWH7dSBAmvINyhuAM.roa
File: r1cby8N1jeNWH7dSBAmvINyhuAM.roa (raw, json)
Hash identifier: UdyMP0y8nkkc5By8J+6S/9dijy7945opZHhua7z5Ghg=
Subject key identifier: AF:57:1B:CB:C3:75:8D:E3:56:1F:B7:52:04:09:AF:20:DC:A1:B8:03
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FF887372805E51F1720D4D9083FB
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r1cby8N1jeNWH7dSBAmvINyhuAM.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41521
IP address blocks: 194.209.55.0/24 maxlen: 24
194.209.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:88:73:72:80:5e:51:f1:72:0d:4d:90:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af571bcbc3758de3561fb7520409af20dca1b803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:20:bd:e5:7a:ef:4c:0b:e9:ae:bd:0f:e4:
34:ca:fa:9a:69:ae:20:f8:65:ae:91:a9:5d:d7:d9:
95:72:2b:52:36:29:0d:51:5a:fe:bc:de:83:b8:50:
2d:34:f4:dc:c0:8d:aa:21:29:cd:71:16:07:00:7f:
ad:f6:8d:56:c4:13:aa:13:49:c8:de:2b:03:8e:3b:
5f:27:82:09:fe:ec:eb:e8:72:de:90:a8:06:71:ed:
53:7d:b4:3c:2d:91:3e:0f:ca:6e:91:47:3d:09:f4:
a5:7d:ab:cf:cc:e9:81:34:ff:2c:30:73:55:32:5b:
77:b1:45:5b:79:4f:94:4a:e2:c9:b8:c4:83:0e:c9:
c5:23:b5:a9:f4:c5:18:19:59:59:6c:1a:aa:1f:84:
87:1b:ef:a6:4a:84:54:19:2c:72:8e:0b:e2:66:1b:
92:9b:19:7b:c7:21:52:b7:19:a8:3d:02:5b:e6:a0:
f8:e8:19:8a:2c:53:14:d2:ce:72:27:42:87:61:4c:
f6:ac:52:e6:7e:d5:73:cc:e2:95:c6:e5:eb:74:62:
a6:91:58:3f:a0:92:1c:a3:67:a3:d7:2b:5a:8f:e3:
09:87:10:18:71:4c:85:4f:bc:28:03:d2:4c:ae:76:
5b:2b:70:14:d0:2a:00:04:8f:59:73:fe:f6:10:86:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:1B:CB:C3:75:8D:E3:56:1F:B7:52:04:09:AF:20:DC:A1:B8:03
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r1cby8N1jeNWH7dSBAmvINyhuAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.55.0/24
194.209.69.0/24
Signature Algorithm: sha256WithRSAEncryption
30:24:fe:a7:82:6c:f1:c2:12:70:e3:10:7c:6c:48:a3:3f:fa:
e1:48:f2:1c:ba:61:49:60:e9:df:1c:99:95:0f:ed:5d:b4:02:
41:4f:59:79:58:69:db:bf:b4:96:fb:69:d6:f2:34:07:96:a3:
8b:cf:d5:c7:61:4f:80:fb:21:a6:c3:a8:19:50:08:2e:5a:47:
78:65:04:e8:a2:4c:c1:a3:d2:0f:29:6a:db:ff:e9:de:78:e7:
12:1a:6c:70:02:48:98:ab:84:8f:fc:d0:0d:d3:a2:97:be:4b:
af:43:a0:47:56:ba:a2:d7:a9:9a:db:0b:8e:52:9d:5b:6e:67:
ec:5e:f8:9e:47:cd:e9:86:11:f5:d6:06:12:37:e5:d8:bc:4a:
f0:36:59:10:21:c1:30:c8:59:5c:56:dc:65:59:1d:19:01:0b:
24:f7:21:ab:6f:d5:d9:5d:3a:1f:a7:eb:fc:2a:7f:ef:0f:ab:
0a:5a:e5:6d:06:1e:4c:4f:f2:cb:b4:78:a8:08:2e:5b:ee:28:
92:6b:fb:52:2e:10:1f:7e:be:59:73:29:d1:3d:d5:0e:43:67:
ba:dc:46:7f:02:53:a9:fc:fc:df:cf:40:4d:3c:6c:7f:35:6f:
a5:a0:2a:be:63:bc:32:45:7a:42:58:06:38:de:58:fd:80:92:
60:0d:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:38 2026 by rpki-client