Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa
File: D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa (raw, json)
Hash identifier: HUWd5q+dWVXaDmL/ynWKy6UbQqXoypWgmhL40Z/VQnI=
Subject key identifier: 0F:88:D0:EB:80:8F:7F:70:A1:42:AA:C6:0B:90:A3:B8:A2:40:B4:A9
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019F0FEB73518127FF5C13CB1D3E2F00A7C6
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa
Signing time: Sun 28 Jun 2026 20:28:36 +0000
ROA not before: Sun 28 Jun 2026 20:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 37.34.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:eb:73:51:81:27:ff:5c:13:cb:1d:3e:2f:00:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jun 28 20:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f88d0eb808f7f70a142aac60b90a3b8a240b4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:22:e2:94:34:7d:58:eb:61:d1:bb:2f:ef:
0e:24:e5:6d:41:4c:20:10:32:58:f9:c8:07:aa:32:
d3:91:e9:bb:41:1a:e8:83:ee:ea:08:1c:ce:6e:3e:
a2:0c:b3:9f:c3:a1:87:02:f2:02:3b:a8:f4:84:f7:
8d:a4:89:0b:66:ed:31:d4:1a:0a:6e:7b:8f:6d:05:
9c:a2:a4:1f:4e:84:32:21:5a:e5:b3:bc:61:10:6a:
36:50:3c:2a:60:a1:1c:31:a9:87:45:56:0f:b2:53:
46:b0:10:fd:1c:96:51:5e:37:ad:54:4c:91:da:75:
a0:ac:92:15:90:9d:a1:2c:97:07:3e:4a:62:20:88:
f8:95:01:32:e0:f4:f1:af:d8:f3:de:d2:65:16:9d:
66:8d:ae:96:c5:64:d0:54:a8:dd:6a:4f:4d:3e:eb:
f9:c4:a6:55:ad:a4:51:ba:91:dd:72:88:b5:70:f8:
74:36:44:b7:b5:f4:81:bc:1e:f4:bf:cf:38:b0:69:
99:bb:b4:a7:73:86:18:ed:c2:59:c5:04:98:a4:eb:
b4:b4:8a:e6:97:95:31:12:42:fc:31:0b:c8:5e:d4:
3c:99:c6:34:9b:c1:05:14:b6:20:ff:5c:49:d5:95:
fe:1c:f8:a9:34:12:b1:ef:74:84:4a:b5:35:d5:5b:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:D0:EB:80:8F:7F:70:A1:42:AA:C6:0B:90:A3:B8:A2:40:B4:A9
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:66:cc:e0:4d:2b:24:c8:32:c8:5b:ca:fe:47:36:44:55:c5:
3a:fc:8e:1b:f1:2b:11:c9:dd:04:b2:e9:ca:d9:d5:94:0d:6f:
5f:d6:3a:0a:8d:1a:33:69:e8:8e:cb:5b:47:95:0a:0a:9c:02:
1c:1f:8c:47:19:77:ac:9d:a9:8d:f5:a9:a5:ac:5e:5b:43:49:
d5:5c:7e:c6:14:49:78:51:c7:c4:5f:ac:c7:95:ca:7e:a3:42:
4b:95:63:6f:05:32:2e:ec:6f:c6:a5:00:bc:eb:90:c9:ba:ea:
f0:04:d8:1a:fc:48:02:79:75:d8:d5:65:e6:00:46:5c:29:a0:
bf:68:4a:4d:a9:e2:07:96:dd:39:46:c1:21:ce:54:65:d4:4c:
45:60:54:4a:04:43:c6:33:6e:a2:cf:64:57:7c:fc:ba:9c:55:
74:7a:ab:2e:d4:23:32:c9:46:cf:a0:44:e3:07:f4:c4:6c:6c:
80:dd:62:22:ab:f0:f0:7f:ec:d9:dd:c6:b9:86:24:a8:1f:a3:
66:07:cf:c0:b6:31:c2:d6:79:69:49:d1:7b:52:0b:3c:b8:ed:
bb:1e:8b:51:0b:ef:c1:04:ce:20:a4:e2:8b:96:73:87:a0:d3:
f4:ed:c7:38:26:c2:dc:ec:23:b2:3b:e6:97:fa:d6:0c:ec:cf:
4e:b4:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:58:44 2026 by rpki-client