Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tYK3wRvre8ChWo5Z1LPyEdqwZOM.roa
File: tYK3wRvre8ChWo5Z1LPyEdqwZOM.roa (raw, json)
Hash identifier: Kt5AA/JMqL+9jI3orve7Vmi0xPzglOf/M19qV9iNMiM=
Subject key identifier: B5:82:B7:C1:1B:EB:7B:C0:A1:5A:8E:59:D4:B3:F2:11:DA:B0:64:E3
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236917C96560E09D630944C22F5877F5
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tYK3wRvre8ChWo5Z1LPyEdqwZOM.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208813
IP address blocks: 194.209.6.0/24 maxlen: 24
2001:918:fff2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:17:c9:65:60:e0:9d:63:09:44:c2:2f:58:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b582b7c11beb7bc0a15a8e59d4b3f211dab064e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:e1:c9:09:14:05:99:64:61:1c:21:a4:0a:
ec:ea:6c:87:d3:a9:e9:09:38:7b:57:fe:28:6b:9b:
16:16:24:18:cf:1f:e9:e6:7e:26:a4:49:6b:7b:b2:
02:f3:3b:70:8a:8f:d3:26:da:16:7f:7c:ca:a5:71:
b2:2a:9a:84:d1:53:7e:02:54:ec:cb:2c:91:59:c9:
49:8c:e5:12:c5:8b:3f:d4:03:ad:5f:34:34:d7:9d:
a1:57:ca:f1:4f:39:9a:b2:db:24:61:ce:17:00:11:
f7:c1:73:b0:36:29:21:98:25:7e:b1:04:da:d2:a3:
1a:47:08:5d:2f:03:b2:ce:f8:8e:7a:d8:18:2a:dc:
61:05:8f:1f:b0:f2:45:4a:c1:40:b7:fe:e4:54:92:
48:d5:48:f4:48:ce:aa:ea:f5:65:fe:ba:2a:07:1d:
34:3e:8a:cc:b9:63:7c:d1:8d:f1:68:1a:f6:f3:5a:
0d:e5:2b:c2:65:64:21:6c:71:1d:49:bc:8f:65:c2:
2c:ed:33:08:3d:a8:60:01:de:ba:8c:b1:bf:74:31:
77:2f:db:4a:95:50:a8:13:17:67:ae:cf:78:71:02:
aa:d5:2d:8a:5a:2f:a3:5a:a4:ba:d7:30:13:9a:67:
85:bd:5a:b2:79:12:b1:e4:c7:4d:28:8e:b3:05:9a:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:B7:C1:1B:EB:7B:C0:A1:5A:8E:59:D4:B3:F2:11:DA:B0:64:E3
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tYK3wRvre8ChWo5Z1LPyEdqwZOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.6.0/24
IPv6:
2001:918:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
32:87:bc:8b:c7:a3:53:a7:a9:69:02:ea:8c:1a:05:fb:37:c6:
19:c3:35:3d:98:09:c3:aa:d1:a9:a3:76:85:7c:a5:00:bf:55:
e6:0a:6d:84:f2:a5:dd:e8:04:12:c6:b2:8d:13:9e:ea:41:02:
c2:85:2b:10:8a:3c:23:da:79:46:14:be:1b:02:8f:27:26:43:
23:cd:a3:ae:4c:6d:af:e9:d7:40:1d:9c:f5:04:b8:ba:02:37:
56:12:00:0b:7e:8e:87:c9:c4:e5:d1:1b:d5:de:65:55:43:31:
ae:4d:14:d8:06:19:55:9f:a4:c2:5c:06:c2:6f:8d:03:d4:cd:
61:70:a8:5d:d3:ea:e8:7c:85:63:57:7b:a3:1d:b1:46:14:79:
63:b1:90:f2:d6:2e:07:b2:f2:e0:53:ea:a9:59:c4:6d:e4:80:
22:db:ef:b0:cc:51:e5:35:81:90:c5:14:aa:46:4b:68:ca:b8:
3d:af:eb:b3:05:c2:be:42:f8:46:3c:8d:ee:36:da:b0:af:3a:
35:73:95:44:fb:aa:ed:90:79:32:1e:23:95:20:8e:97:51:cc:
ea:fa:b2:51:1f:02:f9:0f:a8:1a:15:13:9f:d5:24:ec:7b:2d:
b7:30:80:c5:f7:cc:c9:43:0d:68:3d:a2:5c:91:aa:21:ac:9b:
32:4e:0a:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaRfJZWDgnWMJRMIvWHf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTgyYjdjMTFiZWI3YmMwYTE1YThlNTlkNGIzZjIxMWRhYjA2NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzhyQkUBZlkYRwhpArs6myH06np
CTh7V/4oa5sWFiQYzx/p5n4mpElre7IC8ztwio/TJtoWf3zKpXGyKpqE0VN+AlTs
yyyRWclJjOUSxYs/1AOtXzQ0152hV8rxTzmastskYc4XABH3wXOwNikhmCV+sQTa
0qMaRwhdLwOyzviOetgYKtxhBY8fsPJFSsFAt/7kVJJI1Uj0SM6q6vVl/roqBx00
PorMuWN80Y3xaBr281oN5SvCZWQhbHEdSbyPZcIs7TMIPahgAd66jLG/dDF3L9tK
lVCoExdnrs94cQKq1S2KWi+jWqS61zATmmeFvVqyeRKx5MdNKI6zBZp6xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLWCt8Eb63vAoVqOWdSz8hHasGTjMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvdFlLM3dSdnJlOENoV281WjFMUHlFZHF3Wk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwtEGMA8E
AgACMAkDBwAgAQkY//IwDQYJKoZIhvcNAQELBQADggEBADKHvIvHo1OnqWkC6owa
Bfs3xhnDNT2YCcOq0amjdoV8pQC/VeYKbYTypd3oBBLGso0TnupBAsKFKxCKPCPa
eUYUvhsCjycmQyPNo65Mba/p10AdnPUEuLoCN1YSAAt+jofJxOXRG9XeZVVDMa5N
FNgGGVWfpMJcBsJvjQPUzWFwqF3T6uh8hWNXe6MdsUYUeWOxkPLWLgey8uBT6qlZ
xG3kgCLb77DMUeU1gZDFFKpGS2jKuD2v67MFwr5C+EY8je422rCvOjVzlUT7qu2Q
eTIeI5UgjpdRzOr6slEfAvkPqBoVE5/VJOx7LbcwgMX3zMlDDWg9olyRqiGsmzJO
Cjc=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:18 2026 by rpki-client