Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u1DHHZIs222kbU7yrjl1O0vp1sI.roa
File: u1DHHZIs222kbU7yrjl1O0vp1sI.roa (raw, json)
Hash identifier: 7XgIk4BZs8c4LAp9vpSCj8lC6PMkmu+SmGKnR04VDkI=
Subject key identifier: BB:50:C7:1D:92:2C:DB:6D:A4:6D:4E:F2:AE:39:75:3B:4B:E9:D6:C2
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690A43B5F7C96FA2DBC09B6D8F1DEC
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u1DHHZIs222kbU7yrjl1O0vp1sI.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199802
IP address blocks: 194.209.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:43:b5:f7:c9:6f:a2:db:c0:9b:6d:8f:1d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb50c71d922cdb6da46d4ef2ae39753b4be9d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:1c:03:f7:88:7e:20:f0:87:b2:73:b5:5b:
8f:e5:07:98:49:de:bf:24:79:42:e9:12:07:18:84:
f5:f1:43:35:24:30:00:a1:26:d5:f9:14:36:73:c9:
56:d9:2a:17:dc:a2:de:c4:37:51:80:f7:2b:1b:2d:
5a:fb:45:d1:45:f8:95:77:cf:a8:87:ad:d3:45:d7:
28:d8:1a:c4:04:5f:f1:65:86:e0:15:7e:ba:60:f0:
8d:cf:06:10:14:63:7c:f7:dc:c7:2b:39:96:ba:9b:
93:f2:a0:39:ca:0b:c8:9f:a0:73:19:b7:9a:45:48:
08:3b:27:45:d6:3b:90:d1:2c:5d:fd:d5:56:f0:47:
d0:e6:53:af:29:f1:79:ba:33:80:47:12:e2:23:a0:
9b:69:33:fb:16:2a:02:f6:d8:e7:99:f9:05:c8:af:
9c:f2:02:ff:f8:db:a1:72:fc:29:bd:37:b9:8a:f0:
fa:62:76:a9:a1:b4:32:b0:13:85:5b:fe:a9:b6:cb:
7a:ad:a9:ec:ff:d4:6d:fe:fd:37:ca:01:88:7a:a0:
30:74:35:f9:a6:4f:ab:bd:d1:05:13:92:d9:f1:ee:
08:5c:1b:65:48:ea:91:7e:ad:8f:fe:db:98:5c:76:
53:f5:9d:d2:d8:11:80:f9:d3:77:a2:e4:28:cc:2c:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:C7:1D:92:2C:DB:6D:A4:6D:4E:F2:AE:39:75:3B:4B:E9:D6:C2
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u1DHHZIs222kbU7yrjl1O0vp1sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
04:45:ef:96:21:91:bf:64:2e:30:77:e4:90:49:e3:e1:c2:78:
52:41:b7:4b:a8:1e:02:02:90:0e:62:d0:0e:3b:d6:ae:dd:00:
fb:58:6b:d4:ae:df:1f:a4:ed:29:fc:da:67:3d:89:16:fd:43:
af:37:18:6d:c2:18:0d:87:38:50:ab:61:06:62:83:a3:40:30:
00:c3:21:4f:21:94:01:3b:81:38:78:94:f6:47:ed:ae:25:d1:
74:3b:24:7d:ec:93:e2:cb:98:c6:19:4b:91:2a:b3:ad:5c:b5:
95:74:d1:6e:c8:47:ed:99:35:cf:36:01:21:45:1c:53:4f:4b:
e1:66:26:1f:a3:ed:86:46:ec:c3:84:7a:9c:f2:f7:94:0a:a7:
03:60:7b:8e:7a:7c:e2:bd:2b:8c:db:ec:56:e3:bd:93:4f:29:
4d:b5:63:9a:eb:d1:b3:df:69:a2:28:20:3b:bd:5b:3b:cc:b6:
55:69:70:b1:ff:1e:e1:5c:c0:28:96:f9:bd:09:6e:7a:00:9b:
72:d0:5d:fc:4c:8a:0d:2c:c9:39:de:3f:f6:79:bb:06:3c:50:
20:c8:4b:65:ef:17:ef:46:a4:19:d2:2e:14:e6:68:46:92:f3:
fa:cf:e0:9f:02:c4:aa:17:ca:9d:72:80:6e:38:46:cf:69:49:
45:2d:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client