Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yL-Z3GTrA1pfHp7LUm6KRDED4A0.roa
File: yL-Z3GTrA1pfHp7LUm6KRDED4A0.roa (raw, json)
Hash identifier: hoxcBuW1llj/kmN082U1xb2nkFSuHaTnJVvTVEmCiCY=
Subject key identifier: C8:BF:99:DC:64:EB:03:5A:5F:1E:9E:CB:52:6E:8A:44:31:03:E0:0D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236912BF679C4B7F700A3C8153D1CC15
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yL-Z3GTrA1pfHp7LUm6KRDED4A0.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205218
IP address blocks: 193.246.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:bf:67:9c:4b:7f:70:0a:3c:81:53:d1:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8bf99dc64eb035a5f1e9ecb526e8a443103e00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:16:31:aa:ee:14:27:0b:19:ef:ed:81:a9:
c3:01:14:0f:e5:89:86:88:97:16:9b:49:5f:42:5c:
88:a5:ab:32:28:52:31:dc:3d:27:21:fa:fd:b0:d0:
f4:79:96:91:c1:5e:2f:95:36:97:5f:4f:df:fe:00:
af:d5:5b:6f:5e:84:c7:2d:cb:b2:04:95:2e:17:ac:
85:cd:f3:72:15:6b:57:da:04:c2:66:61:82:0b:db:
b4:81:bd:91:0b:5a:c6:d4:5e:59:34:58:05:de:28:
c8:db:93:9b:0c:f5:2f:32:4e:68:77:22:ed:1f:2d:
ee:22:21:2f:89:0f:6c:f9:ee:f9:c9:a9:ef:f9:c6:
a4:b0:c6:eb:9e:74:d3:35:c0:39:7b:a7:80:f0:2a:
68:70:c4:4c:b3:55:d0:a2:cd:79:56:76:e1:e2:c1:
95:29:72:94:25:58:ff:c7:13:15:8e:e4:00:cc:8f:
67:e1:f7:4e:1e:6c:fd:4c:8e:62:c8:16:a7:a5:66:
0d:2b:f0:0b:71:a8:3d:c9:5a:8a:47:67:53:b9:6c:
10:cd:8a:ab:85:f5:b0:28:6a:38:7d:00:57:cf:dd:
be:8b:d3:7b:62:1c:90:56:f3:69:22:18:52:2a:80:
3f:b1:5f:54:c0:7e:f5:c8:14:96:fa:6c:42:5e:49:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:99:DC:64:EB:03:5A:5F:1E:9E:CB:52:6E:8A:44:31:03:E0:0D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/yL-Z3GTrA1pfHp7LUm6KRDED4A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:01:87:06:86:40:66:81:72:08:a0:2b:ed:27:e1:e3:56:
a7:08:75:47:21:80:55:12:fd:6f:4b:f3:8d:55:3e:6e:40:1b:
5d:a7:65:5e:cd:3a:48:17:c0:d2:d5:dd:8f:5a:27:bc:19:b8:
ab:00:d5:a3:f4:09:d7:77:53:af:e6:ea:f3:b0:d9:ab:3c:95:
00:76:48:f3:1e:63:e6:e3:08:f0:f9:20:a2:4d:b0:04:00:1e:
91:1d:3a:20:8c:d3:e0:c8:05:54:29:b8:9a:62:11:c6:10:fb:
ca:88:d4:77:08:73:34:54:a7:f9:fd:3e:c3:0b:e2:c9:81:59:
c1:e2:76:2a:78:b6:62:f9:46:a4:52:60:ce:51:6d:13:dc:5c:
27:6f:dd:c4:b4:6a:a7:79:4c:f4:61:ae:6b:4c:eb:7c:42:4d:
f2:11:c8:84:7c:e7:61:5f:d5:22:90:bc:a1:93:6c:84:95:7e:
dd:ee:5e:f9:48:16:94:80:e3:33:f0:df:a0:57:69:a9:36:15:
fd:a8:29:31:db:73:72:f7:68:9f:f3:be:63:8a:31:14:13:ca:
5f:b3:6b:3c:b5:f9:45:ef:5d:2e:57:4b:06:14:27:2d:be:c1:
b6:2b:03:88:0a:e3:75:ab:c2:02:36:44:f3:52:27:b6:0a:73:
2b:f3:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:16 2026 by rpki-client