Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/29zIwu7xJ2AN1LKHJlKy6JtqfHY.roa
File: 29zIwu7xJ2AN1LKHJlKy6JtqfHY.roa (raw, json)
Hash identifier: /ME2avz/QykYcB5NqvwNoZfXWx25HLjzXiHM8jiVEG4=
Subject key identifier: DB:DC:C8:C2:EE:F1:27:60:0D:D4:B2:87:26:52:B2:E8:9B:6A:7C:76
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A16821E422E805BBCA85B288E85E440D5C
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/29zIwu7xJ2AN1LKHJlKy6JtqfHY.roa
Signing time: Fri 23 Oct 2026 09:40:13 +0000
ROA not before: Fri 23 Oct 2026 09:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.110.4.0/22 maxlen: 22
94.231.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:21:e4:22:e8:05:bb:ca:85:b2:88:e8:5e:44:0d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 23 09:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbdcc8c2eef127600dd4b2872652b2e89b6a7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:c6:34:05:86:3a:d7:16:11:73:30:30:88:
a3:4d:df:c1:b7:fc:52:b2:77:07:3d:0d:0f:73:2f:
4f:78:39:ff:c4:b5:37:bf:7b:e2:57:01:05:41:49:
0e:18:8a:14:4a:78:db:6f:de:21:d2:3b:f4:77:c0:
e3:9e:cf:c8:ab:fc:f5:00:eb:9b:37:79:0b:11:c5:
4b:c0:c9:01:6a:24:54:5a:62:d5:e2:35:d0:15:6f:
dc:fe:e7:48:fe:7e:88:0d:79:e8:57:06:35:35:91:
3d:d3:9d:6a:b6:af:f2:99:83:c3:0d:ce:8b:8c:62:
01:34:16:70:eb:26:46:d5:0c:b8:81:f4:9d:dc:cd:
7d:a3:dc:ca:0b:20:3d:a3:0f:a7:93:bc:b2:9b:ab:
7d:bb:fd:ca:18:62:2b:c9:b7:58:00:66:37:8a:61:
8d:bc:49:c2:fc:f0:43:31:1f:80:34:c4:a9:b1:0c:
4d:90:c2:ac:03:68:14:71:5e:c2:6d:e2:e7:db:b5:
ed:3c:65:9c:97:c0:ad:17:2a:1d:06:fc:3e:0a:1d:
3a:ea:87:eb:9f:d0:73:72:9c:17:47:9d:56:cd:c9:
f9:9c:0e:0d:ac:3d:43:1b:16:b8:09:42:7a:5e:27:
5e:ea:eb:13:f1:51:80:65:ce:61:29:41:ba:61:df:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:C8:C2:EE:F1:27:60:0D:D4:B2:87:26:52:B2:E8:9B:6A:7C:76
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/29zIwu7xJ2AN1LKHJlKy6JtqfHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.4.0/22
94.231.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:15:01:84:07:39:38:b7:86:7b:7b:05:20:0c:65:68:fa:01:
ec:0f:ba:78:7b:61:3b:09:66:c8:da:e4:69:a1:82:95:69:4c:
f0:68:0e:91:5e:b4:10:3b:a4:df:47:58:a6:3a:15:b0:50:4e:
43:14:33:0f:90:30:63:4d:7e:0a:c9:87:b2:5e:e2:ef:84:84:
18:40:eb:8b:b5:23:04:d9:f7:a1:0a:93:77:d8:e5:50:75:79:
3c:1e:13:e6:52:6e:ba:c0:7c:e8:ef:e0:d5:88:c8:38:4f:9c:
ab:35:90:e9:fa:3b:18:39:6f:2b:56:16:91:d5:5d:e2:ce:a0:
a5:d8:76:84:2c:fc:13:fa:23:78:17:d7:af:3f:e2:91:dc:bc:
32:11:b5:11:28:1a:8c:c4:b4:16:95:1e:d4:56:90:86:09:1c:
5b:79:53:a4:62:0f:2a:76:0a:7a:13:0f:79:93:a8:38:58:d1:
74:c5:b7:21:d7:32:2d:03:dc:49:7b:1f:3c:d5:9d:2d:ca:52:
dd:2e:cb:05:96:2b:20:a4:6a:50:ae:ac:86:b0:41:d6:54:93:
f6:6d:db:a9:3f:51:81:18:8a:38:9f:a4:6a:8b:d5:35:a9:a2:
00:5f:bb:43:e9:bb:9d:82:b0:c5:f7:8a:c0:2b:3b:4d:5d:bf:
9b:b6:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:47:54 2026 by rpki-client