Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0hwzQoXcIkJyzadKqSXbTaahXsI.roa
File: 0hwzQoXcIkJyzadKqSXbTaahXsI.roa (raw, json)
Hash identifier: YIUJniR2GUAvwHJH/Yo2UTz4TpoZUsalEhB0ITwO6ic=
Subject key identifier: D2:1C:33:42:85:DC:22:42:72:CD:A7:4A:A9:25:DB:4D:A6:A1:5E:C2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0E6C17AE25E3DF3388ADF911DC6595495
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0hwzQoXcIkJyzadKqSXbTaahXsI.roa
Signing time: Mon 28 Sep 2026 06:43:54 +0000
ROA not before: Mon 28 Sep 2026 06:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:c1:7a:e2:5e:3d:f3:38:8a:df:91:1d:c6:59:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 28 06:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d21c334285dc224272cda74aa925db4da6a15ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:e6:4b:38:07:ba:17:76:c0:96:33:30:b6:
07:53:a7:4a:22:17:1b:74:62:e4:dc:47:91:d5:a2:
ec:92:db:4b:1c:9b:d5:4e:7d:5f:ba:2b:4f:18:dd:
8e:74:6e:a0:39:a8:51:0b:80:d9:d4:55:ba:bd:30:
d7:88:9b:84:f0:9e:05:f4:e2:09:9c:e7:2a:24:a9:
03:27:7a:2f:e1:e8:9f:91:13:a1:84:72:93:c4:b6:
8d:52:3b:1d:59:8a:0d:5a:c5:db:9e:25:92:83:79:
9e:a5:2a:03:9d:cc:c5:82:71:92:4f:83:a5:73:80:
9f:b4:aa:60:db:8e:1b:e4:2e:2c:2f:46:20:5a:47:
02:2f:5a:01:33:0f:41:71:83:75:b0:46:19:69:61:
ce:98:6a:90:b4:f8:15:42:46:b5:7d:01:36:04:13:
de:40:20:5e:8d:2b:57:e7:cf:9c:a2:64:b5:77:bc:
c4:97:ab:df:e6:ed:9a:31:43:ea:77:74:5c:b9:7a:
0e:91:fc:23:cb:f6:ee:b6:9a:14:eb:f0:c7:03:0b:
94:20:dc:87:1a:30:96:b3:20:b6:e0:e5:6d:eb:a8:
b2:42:1f:a8:7e:af:5e:84:c4:f0:c8:68:2f:9d:62:
39:ce:ed:79:fa:0f:11:7b:88:c4:9e:68:96:ff:62:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1C:33:42:85:DC:22:42:72:CD:A7:4A:A9:25:DB:4D:A6:A1:5E:C2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0hwzQoXcIkJyzadKqSXbTaahXsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:04:d7:6b:80:a1:8e:60:f7:63:5e:4f:eb:6b:d7:0c:bd:d1:
d2:0d:96:05:bf:69:ad:70:04:ff:d4:72:2b:2b:47:68:eb:f8:
90:fb:01:6d:1f:42:6e:92:7a:3e:ca:96:6b:f8:96:c9:24:77:
93:8c:fc:f0:8c:97:a5:11:4c:d4:ef:42:23:cb:20:39:99:2e:
62:c0:8f:95:aa:63:2b:3e:b9:fd:fb:46:eb:eb:25:cd:9f:c2:
3b:20:d7:ad:38:77:97:4b:da:78:3e:d0:7d:b9:05:2c:ee:76:
2a:7f:56:bf:80:4e:ad:ab:12:62:be:f5:f1:30:75:6c:b0:0d:
73:77:52:b0:a4:9e:ec:d1:d2:bf:0a:7f:d4:1d:6c:73:b3:ad:
1a:01:e6:b6:0b:e8:04:97:2e:ad:12:3a:1c:c2:f8:08:12:7b:
78:1b:70:0a:97:d3:3a:26:1a:6f:2e:ff:98:b8:b5:e7:2d:23:
73:c9:13:1b:ba:41:da:31:e5:88:1d:76:09:48:54:50:ef:0b:
c7:2b:68:e8:1b:e4:96:0a:fe:94:74:09:c5:4a:cf:f9:8b:f1:
96:b5:91:53:4f:28:45:ff:fe:f5:67:18:87:32:c5:93:96:e2:
70:ce:24:f1:2d:18:65:05:e0:1d:2a:62:18:3c:bc:18:4c:78:
5b:4e:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:55 2026 by rpki-client