Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/4IagHBs2e8CK0JB5pbRafzWXwSo.roa
File: 4IagHBs2e8CK0JB5pbRafzWXwSo.roa (raw, json)
Hash identifier: SPbjJd3BfaI3OgpcNASrcnxfbQ8tgVZkH1G6kphJ6Lo=
Subject key identifier: E0:86:A0:1C:1B:36:7B:C0:8A:D0:90:79:A5:B4:5A:7F:35:97:C1:2A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FF9DFF2514628F79E606CD967D820BF3F
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/4IagHBs2e8CK0JB5pbRafzWXwSo.roa
Signing time: Thu 13 Aug 2026 06:47:10 +0000
ROA not before: Thu 13 Aug 2026 06:47:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.239.112.0/24 maxlen: 24
178.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:df:f2:51:46:28:f7:9e:60:6c:d9:67:d8:20:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 13 06:47:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e086a01c1b367bc08ad09079a5b45a7f3597c12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:ef:b2:aa:d4:fe:c8:45:48:2d:91:b5:3e:
e0:b5:97:6b:6a:82:09:ae:d5:91:bf:8e:fa:f9:cc:
e5:95:57:df:33:9b:1e:32:8d:db:d1:0c:f0:00:ef:
66:71:b8:4b:a4:ca:5d:7c:a2:df:ae:37:9e:0a:31:
41:b4:2b:37:61:2e:a5:35:28:75:51:38:23:2b:8b:
e1:e6:7b:c7:34:c7:99:4b:ca:12:36:89:81:e7:15:
a1:d7:e0:5c:36:40:1d:ec:00:7f:95:b9:dc:d8:95:
84:55:03:5a:9a:6e:3f:f2:bd:89:30:4d:d5:94:28:
95:c5:1f:0c:8e:a2:b2:9d:f8:b2:66:ee:b7:1e:dd:
bb:09:66:a2:28:dc:96:f7:50:eb:e6:e6:88:8c:6f:
e2:16:3f:da:b9:cc:24:c6:93:b2:0b:6b:82:1a:af:
fd:20:6a:28:9c:4d:88:ed:b3:6e:e6:8d:c9:ac:45:
6d:06:6b:02:fc:74:77:df:55:0a:89:77:8d:26:cd:
cb:47:fc:81:05:a1:45:ed:91:dc:2f:f8:c7:79:39:
28:1b:43:b5:ec:7a:dc:37:70:21:1a:c5:b1:fc:44:
39:44:97:31:59:40:c2:74:1c:29:8c:90:a7:c7:fc:
88:40:66:27:41:38:d4:2b:b7:31:e3:d6:03:4b:0f:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:A0:1C:1B:36:7B:C0:8A:D0:90:79:A5:B4:5A:7F:35:97:C1:2A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/4IagHBs2e8CK0JB5pbRafzWXwSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
178.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ed:63:89:cf:fd:63:3d:b5:16:d5:0b:39:e5:92:da:13:43:
1e:e5:ba:27:71:7c:bf:75:5f:f9:f6:ff:84:0d:fd:a3:a3:f7:
fe:64:60:1a:d4:fb:30:3a:72:f5:3b:f8:2e:1f:01:e0:7e:f4:
2b:b8:7b:c8:50:2b:89:e5:71:da:65:fe:1a:58:59:7a:30:9b:
12:89:75:12:c1:f0:0f:df:fb:fb:9f:65:84:bf:1d:95:fe:16:
17:a1:df:cf:d5:a8:22:97:af:e6:81:b0:e3:60:f0:bc:c0:5b:
65:7e:d1:fd:42:6e:cc:ef:58:25:dc:03:89:89:8f:10:95:0d:
4e:f5:5d:88:a2:c1:82:30:2e:9f:cc:01:4b:40:4f:17:ae:c5:
38:cc:c1:78:b2:df:c7:c1:89:a9:b6:2f:48:d7:8d:3b:e6:73:
be:ab:57:44:a5:63:9c:c3:49:05:74:64:c7:1b:0b:20:42:7a:
99:49:4b:73:9c:8c:8d:4d:70:cc:ab:36:3a:ae:56:cc:45:9f:
c1:ba:e0:fe:b8:42:ed:34:36:5d:27:ad:5e:d6:5d:fd:6f:fe:
43:f9:8a:f8:59:9d:b6:db:ae:bc:be:a2:56:e2:73:b7:8d:36:
f5:cd:99:01:6f:01:e7:23:92:bf:09:15:98:62:13:36:cb:57:
ec:ec:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:57 2026 by rpki-client