Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/h3GQsAbVK_rLmQXHmxPuwtVJRq0.roa
File: h3GQsAbVK_rLmQXHmxPuwtVJRq0.roa (raw, json)
Hash identifier: 16M3X8yN5G59TcgU+dObBb/yIzO4LGRQJmZT9df8p4c=
Subject key identifier: 87:71:90:B0:06:D5:2B:FA:CB:99:05:C7:9B:13:EE:C2:D5:49:46:AD
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019FD8B8C0EE38917C0C7D745CF0510B1523
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/h3GQsAbVK_rLmQXHmxPuwtVJRq0.roa
Signing time: Thu 06 Aug 2026 20:16:54 +0000
ROA not before: Thu 06 Aug 2026 20:16:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199304
IP address blocks: 194.156.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:b8:c0:ee:38:91:7c:0c:7d:74:5c:f0:51:0b:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 6 20:16:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877190b006d52bfacb9905c79b13eec2d54946ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d4:45:89:28:85:83:83:b0:b3:84:a1:4e:
b7:31:10:e7:c6:78:2a:9a:6b:0d:a1:4f:25:57:9c:
2e:36:2f:9e:04:59:4f:69:f5:94:73:48:09:d8:92:
4f:d6:19:18:72:8c:80:b7:c7:05:b4:b7:f5:2a:52:
94:6e:00:01:6d:62:25:91:f7:20:97:93:b9:5d:e5:
5e:78:98:fc:8f:26:de:81:7f:a7:4f:cc:63:53:d8:
d6:33:30:91:93:44:c4:1b:2c:3f:a3:f7:ce:3b:3d:
2f:ed:48:57:70:77:9a:62:79:3f:a8:74:6f:12:fc:
bb:64:dd:27:01:ba:b0:17:99:95:d9:97:57:39:58:
73:40:8e:e1:44:c3:dc:6d:4a:e3:ea:a3:8a:18:82:
11:fe:08:9a:00:9c:5c:bc:9b:86:7a:61:ec:57:c6:
41:80:e9:c7:a8:b3:2f:62:b4:99:9c:58:80:7f:b3:
4f:b7:73:5c:07:3d:25:01:0e:c8:2a:44:57:21:ec:
1c:d1:80:03:5f:ea:3d:b2:b4:3b:ce:98:79:45:c1:
92:7d:89:91:8d:a3:4e:88:4d:ed:bb:e3:65:26:ec:
ad:a7:69:2c:4e:54:06:d5:b1:39:f4:1a:74:02:49:
9e:a7:bb:42:91:3a:ca:7b:6d:df:3e:f4:d9:4b:d5:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:90:B0:06:D5:2B:FA:CB:99:05:C7:9B:13:EE:C2:D5:49:46:AD
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/h3GQsAbVK_rLmQXHmxPuwtVJRq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.99.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c6:60:44:e6:bb:38:a8:0c:f1:59:d1:4b:f9:00:bc:28:5d:
bf:73:d1:4f:95:bb:2f:fd:21:16:24:50:32:f1:85:6d:58:b6:
2c:d3:4b:8c:e9:c0:68:47:67:55:11:c1:ef:37:80:fc:79:1e:
63:7b:e2:5a:46:a1:56:f2:af:a4:a6:78:cb:ec:a7:a3:2e:74:
c8:36:7a:2a:4e:93:8a:ea:2a:58:db:27:1a:65:96:70:6a:db:
1f:14:11:e4:aa:6e:50:89:bb:5a:e0:d2:45:04:4a:77:fb:6b:
8a:67:5a:80:cd:33:a5:77:fb:c3:9a:4d:0b:9d:a9:bd:ef:6e:
d8:f2:52:87:87:be:5d:61:9e:81:38:e9:15:ad:75:fc:67:b9:
34:31:64:c8:10:ad:c8:15:77:b8:e1:60:94:6d:ca:df:17:ba:
8e:91:cc:62:83:8a:ef:0e:b0:3f:37:ca:f3:72:39:c4:ef:26:
06:36:c5:df:08:c6:1b:85:38:83:77:ee:ce:f4:98:83:d1:0d:
c8:81:1c:8d:27:28:f5:3d:5c:d4:08:bc:a6:77:fb:ea:6b:6a:
b6:54:ee:e4:79:6e:31:a5:59:52:30:c3:ce:99:a2:1d:c8:b8:
fe:62:78:19:da:30:e5:15:6f:92:64:1d:3b:55:29:5b:45:cd:
a5:43:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:00 2026 by rpki-client