Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vi813sNk7OwLmXGI9vxpYFagX00.roa
File: vi813sNk7OwLmXGI9vxpYFagX00.roa (raw, json)
Hash identifier: s32AXfG3o2dmYqu+BUunD0sQLxM8xwbcHP+laz0DQ0Q=
Subject key identifier: BE:2F:35:DE:C3:64:EC:EC:0B:99:71:88:F6:FC:69:60:56:A0:5F:4D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23692070F692BDA1E264D1D09DE61F4D
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vi813sNk7OwLmXGI9vxpYFagX00.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219295
IP address blocks: 193.5.32.0/22 maxlen: 22
193.5.112.0/22 maxlen: 22
2001:91a:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:70:f6:92:bd:a1:e2:64:d1:d0:9d:e6:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be2f35dec364ecec0b997188f6fc696056a05f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:10:d2:55:6e:fb:0d:b0:6f:2c:74:d5:da:
8e:30:77:81:93:7b:57:49:bc:ab:4d:37:75:3f:c9:
05:21:8c:3c:da:c1:77:75:0c:5b:42:c2:d1:d2:de:
48:d6:fd:c8:2b:a4:02:85:e5:35:f6:d1:41:26:06:
4e:9e:a3:3f:b5:b7:34:45:f0:36:ed:e4:06:fd:2e:
b8:38:74:0d:1a:3d:d4:ef:70:a6:96:6d:a3:f5:07:
75:3d:ed:8b:cb:c7:4b:a0:24:19:88:07:97:73:fc:
30:b4:04:8f:84:e5:37:87:b7:4c:10:ca:5e:e5:61:
7b:bd:6f:c2:fc:12:fd:43:fd:bc:9d:5f:23:e3:68:
7b:97:8e:7f:97:dd:b5:07:e3:26:b2:57:1c:da:24:
2a:32:ea:49:fc:30:e9:1a:33:ae:2c:8f:3f:03:bf:
d4:5d:05:63:8c:0a:d1:02:79:6c:57:dc:fa:38:0b:
50:e2:a3:9f:bf:c2:72:fc:8e:3e:7b:2b:9d:52:22:
b0:5c:b8:c8:69:8d:5e:56:18:c8:31:72:9c:c6:5e:
cb:54:e6:f0:db:5a:cf:36:08:5b:06:d3:a0:0e:b6:
a1:17:bf:d1:b8:70:c8:1c:65:bc:07:d2:8b:bf:6c:
97:5e:fc:f1:ff:e1:a3:24:d7:2e:4e:2a:3a:0c:d3:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:35:DE:C3:64:EC:EC:0B:99:71:88:F6:FC:69:60:56:A0:5F:4D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vi813sNk7OwLmXGI9vxpYFagX00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.32.0/22
193.5.112.0/22
IPv6:
2001:91a:2::/48
Signature Algorithm: sha256WithRSAEncryption
4f:88:fc:6a:73:95:89:9c:bb:45:cc:d0:ae:a3:18:17:da:90:
e8:5f:c2:9c:18:a9:a3:15:5b:27:88:6b:75:e7:08:38:25:dd:
86:6a:62:5d:98:79:ce:8a:04:bc:a7:fb:64:bc:65:8e:f8:8c:
af:1d:15:67:80:09:38:6a:ca:b7:af:be:83:4d:d4:6b:a5:4d:
6c:1f:fa:50:8d:41:e9:97:40:9b:69:1f:f5:17:38:1e:59:9d:
3c:86:26:ba:b3:90:94:aa:24:ac:b5:0b:ce:ab:13:0e:a4:8c:
c4:64:16:47:59:2f:87:94:91:33:60:ca:39:94:16:aa:bc:85:
a0:bc:a6:04:6f:8f:68:4f:d5:ce:8a:d8:d7:e6:c6:0f:cf:50:
3a:1d:d4:bb:70:d6:ba:1e:f0:32:71:1d:cd:8c:ad:4b:58:7a:
f7:0d:fd:d3:1e:2a:6b:92:c3:17:e6:bd:f1:10:a7:d1:15:7e:
59:d1:7f:56:ea:d1:38:9b:f8:02:2c:5e:62:5d:3a:64:0c:55:
01:a2:4e:78:35:de:2f:08:c4:64:0f:dd:67:af:93:f7:05:cb:
0e:f9:2b:1c:80:30:7f:7f:57:2a:6f:d3:71:c4:a9:e5:a8:c7:
eb:f6:1d:6b:83:a3:3e:73:7f:ff:3c:b1:9c:6a:68:a7:c6:ae:
e3:25:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client