Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r2cOOwVRwWFymzPqvzZ8NFTwjhE.roa
File: r2cOOwVRwWFymzPqvzZ8NFTwjhE.roa (raw, json)
Hash identifier: q9A9BrSKFZU8XTIyTvvvRXHXkc3EXZT5jTbZEhH6Cx0=
Subject key identifier: AF:67:0E:3B:05:51:C1:61:72:9B:33:EA:BF:36:7C:34:54:F0:8E:11
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F1A76E51C1B87B029B9E160794B7
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r2cOOwVRwWFymzPqvzZ8NFTwjhE.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13277
IP address blocks: 194.209.13.0/24 maxlen: 24
194.209.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:a7:6e:51:c1:b8:7b:02:9b:9e:16:07:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af670e3b0551c161729b33eabf367c3454f08e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:b7:27:4e:00:e1:69:d5:31:7c:3b:21:89:
bb:15:8d:96:4c:a6:1a:52:70:45:c3:23:fb:58:9d:
3f:97:db:55:20:eb:b9:3a:b9:2f:05:85:cc:a7:f9:
0c:01:2b:5c:43:61:f8:22:57:68:91:16:96:88:fd:
d6:f8:9e:b4:91:32:15:d8:83:87:5a:1c:e4:0a:94:
fe:4a:f1:97:60:20:66:9d:1d:46:a4:2f:b2:bf:fb:
b1:c2:22:b7:9d:e1:f3:57:75:a3:29:ba:cd:55:63:
ff:7f:76:43:9a:da:0b:7e:69:89:6a:be:f8:7f:1a:
80:54:14:6b:3c:a7:68:13:04:f3:7e:99:14:1c:73:
0f:f7:04:2a:61:14:5e:c6:aa:3e:77:8a:f7:86:d8:
a0:4b:6b:17:cd:20:83:50:3f:28:74:79:89:53:b6:
d7:9a:9b:78:da:14:f0:14:86:53:ad:e8:e0:22:e7:
f8:67:e8:f1:48:da:a8:6d:f0:27:e4:bf:5c:57:fd:
96:3e:56:d9:24:27:40:2e:16:17:9b:94:0e:21:fb:
7e:45:ee:9e:3a:2d:52:8f:ef:5c:10:6c:f2:58:6e:
82:53:fc:88:df:d2:73:12:88:ca:f5:e2:40:04:7a:
e8:ef:61:d0:12:eb:1b:a4:b0:b6:55:25:c5:4e:33:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:0E:3B:05:51:C1:61:72:9B:33:EA:BF:36:7C:34:54:F0:8E:11
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/r2cOOwVRwWFymzPqvzZ8NFTwjhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.13.0/24
194.209.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1e:a9:ac:a9:fd:eb:4f:9e:36:37:69:68:4a:1c:12:3a:47:
c3:d9:3f:c0:0c:5e:f0:a6:cc:8b:a8:28:55:e2:4d:30:10:68:
3d:ba:bb:79:93:78:6f:bd:dd:ec:18:4d:46:2c:4a:0d:d0:b3:
bc:04:c3:bd:40:05:7b:fb:01:fc:17:97:89:6a:3b:c4:21:24:
e2:38:92:5b:7a:5d:59:aa:e1:65:d6:be:89:97:46:4e:35:2c:
a3:ee:e3:37:7b:3c:26:3a:22:7c:5f:ae:bd:f9:20:9d:5d:59:
fe:0a:b6:9f:db:28:aa:a2:7d:c9:7b:ae:2c:da:d8:f6:78:9f:
8c:6b:ad:b9:59:06:f6:37:a8:05:73:4c:19:0f:db:d3:4a:e8:
cd:44:d1:8b:5e:08:27:dc:05:26:ef:ea:04:95:c4:f8:13:21:
5e:33:10:46:4e:5d:dc:30:b8:6e:5a:35:15:a6:0c:85:5a:ce:
af:72:1f:64:44:23:43:00:7d:6e:b8:19:7d:4b:45:bd:81:1a:
c9:ac:0a:9c:3e:ea:4b:8b:72:c4:7c:70:60:2f:50:17:3a:0d:
ae:9d:2b:0b:57:eb:c2:06:13:11:ef:00:76:e1:b2:0e:cc:6f:
30:db:9e:66:79:b2:a2:73:f0:53:07:6d:30:cc:c3:7a:47:ec:
f3:e6:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client