Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rimBW1dh1IxkxY3pJCrKW6XrsIk.roa
File: rimBW1dh1IxkxY3pJCrKW6XrsIk.roa (raw, json)
Hash identifier: nIcMyQZQZnAW46SEi4iuPIjnVnAnmUEI3iNK74FfkeA=
Subject key identifier: AE:29:81:5B:57:61:D4:8C:64:C5:8D:E9:24:2A:CA:5B:A5:EB:B0:89
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369075FB59AAB7A56C37DCB83137CA1
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rimBW1dh1IxkxY3pJCrKW6XrsIk.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60190
IP address blocks: 212.243.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:5f:b5:9a:ab:7a:56:c3:7d:cb:83:13:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae29815b5761d48c64c58de9242aca5ba5ebb089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:f5:c0:10:bc:bc:75:39:cd:cd:70:79:33:
08:cd:8d:d0:ea:b5:da:99:cf:a4:79:da:2c:77:f4:
1d:09:54:ae:f5:26:56:e3:12:b2:4b:20:c8:38:0c:
9f:4d:a3:33:e2:e5:de:cb:df:30:4d:44:1b:3a:c9:
1e:3c:3b:7f:5f:30:40:6d:c6:49:28:fc:b0:cc:fe:
83:51:22:67:30:0e:da:98:36:1d:62:4e:56:92:1f:
18:36:ad:68:19:1b:11:e7:25:64:a1:b7:86:88:c4:
ab:35:e4:bc:7d:bb:75:06:92:0a:b3:06:86:73:8e:
d6:6b:47:ae:19:c0:7f:a6:c5:a4:ba:8d:f4:4f:b1:
6c:dc:d2:73:2f:2b:a0:24:39:04:c3:74:02:e2:ca:
20:cf:92:10:3d:af:19:f4:ec:77:b1:48:d0:86:da:
00:ee:91:d6:96:4c:9b:9b:18:b2:a6:a7:69:86:e7:
82:42:8d:79:5b:96:9a:50:c4:85:ec:f8:5b:d3:24:
0e:80:99:d5:e2:65:36:42:3e:b8:47:c8:30:4d:96:
ed:ea:f3:2f:1f:e0:51:9d:7b:03:6d:17:59:2e:ef:
dd:fd:e0:b1:7a:9a:0a:97:3f:ca:2d:a0:5e:6b:0e:
65:94:fd:9a:2a:93:2e:4a:60:d8:88:56:a3:1f:6f:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:81:5B:57:61:D4:8C:64:C5:8D:E9:24:2A:CA:5B:A5:EB:B0:89
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rimBW1dh1IxkxY3pJCrKW6XrsIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0c:33:67:9d:8a:23:5f:6b:73:9f:25:5e:e6:cf:49:8d:2a:
65:33:b6:bd:ac:84:20:d1:37:e3:3b:0e:6a:f4:8b:09:4b:db:
5a:98:2b:2f:f4:cd:ef:54:0a:de:63:24:a5:c5:ee:78:16:8e:
17:ce:9a:af:84:af:d4:96:51:fd:39:78:1a:7d:ec:c2:12:b1:
22:ba:91:93:40:d6:75:6d:49:49:24:e1:df:67:19:18:40:9f:
c5:59:7e:60:b6:f2:ae:ce:fd:c6:ed:9e:95:e7:ce:f2:a2:7c:
6d:41:62:7d:f3:25:42:10:59:d3:d8:2e:58:71:51:be:16:99:
ff:4d:22:7b:29:0b:16:32:28:da:fa:d3:24:80:b2:7d:32:55:
5a:3e:ec:77:cc:9a:6f:cd:9e:85:a0:e1:f4:49:f7:2a:c3:56:
90:14:57:b2:67:2c:5c:41:ec:57:54:d1:9c:57:0f:6b:b1:6b:
19:b4:8b:05:87:89:a9:7c:14:97:9b:2e:fa:b5:af:8f:14:5c:
bf:b3:a2:02:4c:5a:a8:1b:84:da:65:b4:fc:e9:fe:5b:e2:4b:
70:5c:7b:90:a8:e8:94:89:e7:c7:de:07:32:20:33:25:5e:94:
16:2a:d0:f4:22:42:82:e4:98:e8:89:0f:29:33:df:c3:49:b6:
3d:79:e5:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQdftZqrelbDfcuDE3yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTI5ODE1YjU3NjFkNDhjNjRjNThkZTkyNDJhY2E1YmE1ZWJiMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ31wBC8vHU5zc1weTMIzY3Q6rXa
mc+kedosd/QdCVSu9SZW4xKySyDIOAyfTaMz4uXey98wTUQbOskePDt/XzBAbcZJ
KPywzP6DUSJnMA7amDYdYk5Wkh8YNq1oGRsR5yVkobeGiMSrNeS8fbt1BpIKswaG
c47Wa0euGcB/psWkuo30T7Fs3NJzLyugJDkEw3QC4sogz5IQPa8Z9Ox3sUjQhtoA
7pHWlkybmxiypqdphueCQo15W5aaUMSF7Phb0yQOgJnV4mU2Qj64R8gwTZbt6vMv
H+BRnXsDbRdZLu/d/eCxepoKlz/KLaBeaw5llP2aKpMuSmDYiFajH29iywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4pgVtXYdSMZMWN6SQqylul67CJMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvcmltQlcxZGgxSXhreFkzcEpDcktXNlhyc0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN4MA0G
CSqGSIb3DQEBCwUAA4IBAQAXDDNnnYojX2tznyVe5s9JjSplM7a9rIQg0TfjOw5q
9IsJS9tamCsv9M3vVAreYySlxe54Fo4XzpqvhK/UllH9OXgafezCErEiupGTQNZ1
bUlJJOHfZxkYQJ/FWX5gtvKuzv3G7Z6V587yonxtQWJ98yVCEFnT2C5YcVG+Fpn/
TSJ7KQsWMija+tMkgLJ9MlVaPux3zJpvzZ6FoOH0Sfcqw1aQFFeyZyxcQexXVNGc
Vw9rsWsZtIsFh4mpfBSXmy76ta+PFFy/s6ICTFqoG4TaZbT86f5b4ktwXHuQqOiU
iefH3gcyIDMlXpQWKtD0IkKC5JjoiQ8pM9/DSbY9eeWn
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:02 2026 by rpki-client