Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u39vweoW2ysYWIL81H8m7crOpVE.roa
File: u39vweoW2ysYWIL81H8m7crOpVE.roa (raw, json)
Hash identifier: zkTuuO077Pqu3ij6yQJuGyB4cBQt2OjOumO+lMqmmL8=
Subject key identifier: BB:7F:6F:C1:EA:16:DB:2B:18:58:82:FC:D4:7F:26:ED:CA:CE:A5:51
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690DD04291831EB9499C07864AA133
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u39vweoW2ysYWIL81H8m7crOpVE.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202855
IP address blocks: 212.243.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:d0:42:91:83:1e:b9:49:9c:07:86:4a:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb7f6fc1ea16db2b185882fcd47f26edcacea551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f5:b5:db:26:a2:57:ad:04:ad:bd:f1:c1:9d:
83:35:a1:2e:95:df:d6:bd:88:a7:62:d8:6e:f9:bf:
20:70:d1:ff:46:fd:57:4c:22:96:ee:12:7b:ce:55:
96:43:dc:dd:c5:7f:5b:d0:cc:98:9b:48:fe:cd:c7:
db:5d:33:2b:d8:9c:a6:bd:33:bf:7d:c6:51:99:dc:
58:37:f0:a6:c7:9e:f8:70:2e:fe:80:1f:71:ca:ae:
ee:a4:85:98:78:bb:88:d3:a1:cf:c8:e3:0d:b8:3e:
7a:cb:63:30:d4:97:33:60:29:df:6a:a7:a8:3a:d4:
aa:fb:1c:b4:c4:00:57:4d:50:c7:76:0c:f0:a3:3d:
2e:85:46:9d:85:f4:ed:1f:29:fe:97:2b:bc:a2:d9:
a3:65:6b:95:fd:10:33:39:5e:7f:c7:f2:30:01:84:
22:ca:27:d7:c9:9f:dd:ee:15:12:47:27:0c:34:28:
16:05:ec:b6:e7:dc:a8:10:e3:73:c6:36:46:b3:cc:
03:74:dd:22:35:ea:38:aa:4c:96:67:f6:78:90:09:
53:32:90:ac:f3:9c:3e:48:d7:1f:77:a1:73:a1:a2:
92:42:d5:93:a4:58:05:51:d6:52:8b:4e:bc:f9:3f:
c2:0e:ae:5c:27:81:71:66:c4:18:0f:b1:9c:31:a2:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:6F:C1:EA:16:DB:2B:18:58:82:FC:D4:7F:26:ED:CA:CE:A5:51
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/u39vweoW2ysYWIL81H8m7crOpVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a8:44:d8:9c:37:7a:b3:e8:27:8e:48:99:8f:f7:89:3d:34:
eb:ad:d6:f3:09:a2:f9:9a:38:dc:84:62:23:04:6d:97:9c:6a:
f0:ad:4a:50:43:d2:c1:86:c5:fb:bb:3f:e5:69:4e:94:63:d1:
b0:6c:d8:d4:ac:a0:22:b2:57:2e:a1:1b:c3:0f:5f:80:57:95:
1f:07:f7:77:1d:49:f9:4f:45:eb:51:bb:6b:13:3b:dc:70:bc:
68:4e:f1:5b:23:1b:3d:a5:fa:a1:cf:4f:04:c9:6c:97:88:d9:
91:f6:9a:b0:38:c2:fe:53:cb:49:4b:9c:77:9c:80:6c:4f:03:
3b:e5:44:51:d2:d1:44:03:bf:cc:14:1a:6d:19:93:e6:37:cd:
b8:ad:7f:92:55:15:cd:ac:db:fa:c8:0e:8e:2b:d5:21:e4:37:
1a:ff:92:eb:e3:4c:d6:b8:a1:9a:8f:4d:6d:c8:d8:f8:4a:12:
66:0a:a5:24:63:d2:f4:78:41:0f:9d:88:10:99:c2:bf:76:3e:
69:db:45:81:96:8a:67:a7:d8:e8:b9:3c:df:ba:a8:9a:32:d2:
3a:d4:2c:d9:0c:99:77:67:83:d8:57:57:e8:bb:5b:b3:5f:76:
64:6d:61:6d:e6:ad:08:64:7f:ef:de:1d:a7:29:cb:f6:0a:8b:
b2:7b:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client