Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rkYUf3fXU3SwLqRvGZCntlKnX9U.roa
File: rkYUf3fXU3SwLqRvGZCntlKnX9U.roa (raw, json)
Hash identifier: zfsJgWMEL1QmvRpbiCtqI27o7s9FeJM8OtxITosdErU=
Subject key identifier: AE:46:14:7F:77:D7:53:74:B0:2E:A4:6F:19:90:A7:B6:52:A7:5F:D5
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F84E2BF2BFDEFBFA07665FA8A895
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rkYUf3fXU3SwLqRvGZCntlKnX9U.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21273
IP address blocks: 193.5.252.0/24 maxlen: 24
194.209.118.0/24 maxlen: 24
212.243.54.0/24 maxlen: 24
2001:918:ff22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:4e:2b:f2:bf:de:fb:fa:07:66:5f:a8:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae46147f77d75374b02ea46f1990a7b652a75fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:1e:23:5d:8e:41:28:4a:0a:dd:b8:7b:36:
58:7f:9f:f3:83:08:e2:f6:06:1f:eb:54:86:02:e6:
0e:1b:9d:1b:d6:69:0a:50:4a:a0:f9:d2:8c:85:20:
8f:20:5f:67:6e:6b:82:d5:df:78:fb:fa:db:0d:7e:
d1:61:3c:64:3a:18:68:ca:12:46:d3:ee:c7:61:2e:
b5:e5:f6:3e:e3:8d:ab:fc:02:1e:e9:a2:16:f1:fd:
27:cb:bd:43:60:8d:7b:34:18:c6:65:3d:34:aa:67:
54:a0:ed:17:00:08:ce:1f:60:07:f2:5d:01:4e:62:
79:8b:eb:8c:86:71:47:c3:ea:48:b3:14:fa:11:93:
83:c7:91:d0:40:dd:5a:14:b4:e2:e2:b9:be:fb:be:
ec:ec:a4:dd:85:33:02:1e:4e:c7:7c:9d:72:4e:d8:
41:09:c3:20:49:ec:06:7c:79:7a:58:11:c9:62:f5:
8d:eb:f0:8b:3f:d6:56:3a:1f:fc:b0:ba:bb:85:4d:
34:43:08:05:59:54:6c:4c:3d:7e:13:72:5e:5c:a1:
c5:b0:83:2c:f0:31:cf:f2:d6:dd:39:8a:e7:d5:84:
88:0c:12:0c:46:44:f9:85:1a:36:a3:0e:77:ca:d0:
be:85:a2:18:39:f6:49:1e:cf:43:68:e8:f1:7c:6a:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:14:7F:77:D7:53:74:B0:2E:A4:6F:19:90:A7:B6:52:A7:5F:D5
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rkYUf3fXU3SwLqRvGZCntlKnX9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.252.0/24
194.209.118.0/24
212.243.54.0/24
IPv6:
2001:918:ff22::/48
Signature Algorithm: sha256WithRSAEncryption
36:94:dd:03:6e:26:a3:23:62:17:2c:30:f4:2e:5c:cb:5d:81:
40:a6:77:ad:d6:a4:40:95:e9:32:28:59:80:d3:63:ba:89:ad:
de:00:12:f4:6b:b5:0c:49:36:31:83:62:da:a2:68:48:e1:a8:
82:8c:6a:59:25:06:1a:f9:dc:08:c3:3a:d6:96:a1:fb:11:83:
10:18:74:2a:06:83:1c:65:3b:62:0e:9c:37:52:55:0f:fc:e6:
6c:e3:79:4e:3d:7e:61:09:9d:d3:d3:d5:5a:90:3f:bb:96:59:
43:84:4c:f3:ed:a4:6b:0f:58:22:d9:31:70:83:b2:de:57:be:
7d:3b:ac:84:1b:2b:8f:52:03:a1:4a:cf:e7:cb:29:75:3f:11:
d8:80:c8:bc:91:4b:24:a7:94:86:d2:49:09:a2:e0:2e:43:dd:
c3:4c:0b:dd:fa:09:53:25:ff:13:04:58:35:52:21:11:17:c2:
a5:f1:8e:b0:71:78:fa:7f:a4:5f:6b:48:d1:a7:4e:40:45:4a:
08:15:a6:d7:68:f5:d7:b5:88:40:4a:11:01:9c:c5:26:22:c3:
8d:42:01:43:43:7b:e5:3a:ea:f8:66:e1:96:72:2b:c2:49:aa:
10:85:ad:68:39:18:f0:17:13:0f:3b:eb:45:5f:44:d8:b7:3a:
77:fe:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client