Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0sGv10ejlWO9dgsVx2pg9_UXsP0.roa
File: 0sGv10ejlWO9dgsVx2pg9_UXsP0.roa (raw, json)
Hash identifier: HjwgwpdVpoVONf9W/H1euUDvWHrCJ+io9pGFgz8ZJh4=
Subject key identifier: D2:C1:AF:D7:47:A3:95:63:BD:76:0B:15:C7:6A:60:F7:F5:17:B0:FD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FEFEAD07F0A681738BC73E55B5C83CDA4
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0sGv10ejlWO9dgsVx2pg9_UXsP0.roa
Signing time: Tue 11 Aug 2026 08:22:51 +0000
ROA not before: Tue 11 Aug 2026 08:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:ea:d0:7f:0a:68:17:38:bc:73:e5:5b:5c:83:cd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 11 08:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c1afd747a39563bd760b15c76a60f7f517b0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:ca:f0:26:54:63:7b:f7:73:a8:6b:5e:9c:
cc:8e:d9:06:23:b3:e9:54:7f:6f:b8:d4:cc:05:ae:
6c:59:86:1c:f3:67:31:c7:69:de:28:5b:80:1b:ed:
45:3b:46:82:25:48:65:0d:c4:f4:63:02:61:c4:e4:
fc:b6:c3:61:33:34:fb:6d:21:b1:58:17:ae:d8:71:
13:c0:dc:da:3a:23:ba:16:98:57:ee:e4:6f:6d:b7:
d1:9f:ad:6e:2f:74:e6:e5:9a:97:d0:af:45:de:89:
a6:5d:c0:d7:7b:d0:88:db:2b:25:7e:20:f5:56:2c:
fa:fb:c7:5d:0a:fb:21:b9:08:ad:51:bb:c8:1c:2d:
70:bb:89:d8:98:39:98:b4:99:27:6e:03:44:79:c4:
45:62:e4:27:fd:2c:fe:91:a7:cd:7d:cb:47:2a:19:
ba:c9:dc:b4:4d:30:a8:c6:61:43:31:3e:de:e9:48:
7f:0d:26:51:da:20:05:18:a1:8a:8b:7c:a0:32:7b:
01:b6:fe:37:0e:9e:62:d2:05:a2:b1:69:17:ca:8c:
c6:67:49:50:e7:46:56:c8:c9:60:97:d1:73:b1:77:
a3:45:d6:ea:5f:3c:ad:47:e8:3b:20:ef:a6:7d:bb:
01:bc:56:89:1d:ef:95:83:80:10:a5:31:6f:b9:da:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:AF:D7:47:A3:95:63:BD:76:0B:15:C7:6A:60:F7:F5:17:B0:FD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0sGv10ejlWO9dgsVx2pg9_UXsP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:75:74:75:5a:8f:9e:2b:dd:0a:20:0f:7d:67:c1:29:07:32:
d7:b0:ec:be:de:67:f1:36:34:45:3a:4e:ff:ec:48:b0:54:d3:
a4:2f:f4:cb:58:b2:cd:8e:82:bf:3c:42:0d:e5:96:9d:fe:3a:
42:d0:6e:6a:e9:b7:a0:e9:b9:d8:17:95:2f:e5:ed:64:9c:85:
e1:6c:16:1d:54:ad:2f:00:c4:55:0c:6e:66:73:ed:ef:fb:75:
a8:a7:23:f1:ee:bd:cb:76:b0:ca:fe:ca:49:98:25:50:1e:78:
11:66:f6:b2:0d:17:be:68:44:08:45:53:c1:2f:2b:4d:8e:95:
3c:e6:11:18:27:de:81:d5:fa:b9:f0:2f:d1:bc:d7:eb:24:4b:
61:56:30:60:9b:44:41:b9:b9:f3:fb:e2:ae:30:e0:07:7a:01:
0d:bc:d9:7c:48:fa:f1:0a:7f:e3:df:71:23:fc:ea:13:30:4e:
b6:d7:cf:5f:2b:78:bb:c8:01:61:d9:54:4c:fc:50:a9:c6:4e:
38:2f:10:2d:5a:f7:e3:e6:ca:a0:44:6f:71:06:ff:b0:c8:07:
a5:5c:16:cf:ca:22:c5:d2:59:5d:b4:de:e5:1d:a3:8c:3c:75:
60:76:79:79:7c:fb:32:f6:b9:5f:f2:d2:e5:13:85:11:d7:19:
29:20:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:00 2026 by rpki-client