Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x3xBQy7nZo16mkyEBwvR09kdoBM.roa
File: x3xBQy7nZo16mkyEBwvR09kdoBM.roa (raw, json)
Hash identifier: 5D/K5Jx5fhpf2ttyHJUgZmi0T+yLDYA7jMC7Kv5PU2M=
Subject key identifier: C7:7C:41:43:2E:E7:66:8D:7A:9A:4C:84:07:0B:D1:D3:D9:1D:A0:13
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690FF63F58D0B9A985ED0679583BCE
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x3xBQy7nZo16mkyEBwvR09kdoBM.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204483
IP address blocks: 212.243.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:f6:3f:58:d0:b9:a9:85:ed:06:79:58:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c77c41432ee7668d7a9a4c84070bd1d3d91da013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:a6:ae:c4:88:81:eb:ba:c9:62:56:e6:bf:
26:26:dd:e9:3b:f6:09:4e:a9:ea:b1:7a:57:05:f9:
51:32:6b:22:6c:fd:e1:29:c8:be:9d:3c:de:4f:84:
09:74:4a:bf:7e:1e:b6:15:ae:f0:70:16:43:38:ae:
b6:bd:e5:6e:8f:7b:fc:24:91:20:8a:25:a0:3e:f6:
ab:ec:da:90:9b:cb:11:a3:f4:d8:a0:5a:52:5d:af:
55:92:ba:96:37:7f:bf:a7:a3:24:62:e4:79:cd:21:
2d:75:04:d2:9b:6f:60:ef:66:07:57:c8:5d:e0:86:
dd:69:16:fe:c0:69:66:b2:c6:ae:3e:5b:cc:b5:f4:
f3:ba:af:60:63:ab:e1:1e:47:d2:43:8f:1d:e6:c9:
1a:d9:d4:d4:54:ed:e9:8b:32:0d:f6:4e:15:e8:a2:
7c:90:9b:41:55:77:d7:86:f5:ea:4d:74:c9:cb:09:
b0:02:58:1d:78:fc:81:fe:53:be:be:a4:d1:56:ee:
f3:5a:0b:49:ea:df:47:5b:84:6d:cb:5e:05:a8:a4:
c0:c8:3a:b7:42:cf:29:11:93:ce:bb:0d:cf:20:1e:
dc:d0:c2:85:95:01:bc:a4:fb:8e:8b:6f:89:a9:5b:
36:03:25:a9:6e:91:76:82:8d:9e:a3:73:dd:d1:b0:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:41:43:2E:E7:66:8D:7A:9A:4C:84:07:0B:D1:D3:D9:1D:A0:13
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x3xBQy7nZo16mkyEBwvR09kdoBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6f:ef:41:b8:07:06:2d:84:bc:67:3c:48:69:95:2d:d1:a2:
bc:2b:a3:c4:68:89:0f:69:a4:cf:0e:2f:01:7e:fc:b8:25:a7:
41:5c:90:ff:1c:d9:9a:99:e2:a6:59:c7:68:60:2a:ae:7e:8c:
71:e3:5f:83:a0:4a:bd:5a:cc:b7:3a:ec:c4:c9:85:36:e1:95:
28:a3:fb:89:bd:7b:44:bd:99:d6:78:33:f7:78:d7:cc:03:86:
31:8d:02:38:16:6e:57:8a:83:6b:c5:21:d2:dd:c3:94:4e:ef:
ad:fd:fe:de:3b:17:e3:9b:a5:c6:42:54:29:8e:66:09:09:91:
42:df:7e:2d:96:f8:d3:cf:ae:c0:29:4b:c6:6e:2b:cc:74:b5:
87:b9:ef:f4:c2:b7:c6:62:90:20:19:52:40:91:69:92:92:8c:
3a:79:ea:71:43:34:9b:0d:f3:44:26:33:1f:78:06:52:67:c9:
aa:90:2c:04:ec:09:b2:cc:96:66:ae:8a:08:bf:eb:02:1d:c7:
6c:ce:39:05:36:2e:56:0b:df:ac:73:99:d0:ad:c9:b2:b8:7f:
3a:5a:8d:dd:09:31:f6:f0:a8:56:1c:1b:fb:ea:8f:5b:10:e7:
c2:2b:01:9d:de:02:9e:89:54:bb:9f:d0:a0:20:7d:ff:9c:c3:
16:89:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:44 2026 by rpki-client