Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5N2VvwkTcgsGAOGKbOL_VV-8kR4.roa
File: 5N2VvwkTcgsGAOGKbOL_VV-8kR4.roa (raw, json)
Hash identifier: ZF4zTTG6l9ahkoRBvENIyOBgudpdQH+vtTf8PoooEZ4=
Subject key identifier: E4:DD:95:BF:09:13:72:0B:06:00:E1:8A:6C:E2:FF:55:5F:BC:91:1E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F74679BE208C83D498801E3915FC69377
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5N2VvwkTcgsGAOGKbOL_VV-8kR4.roa
Signing time: Sat 18 Jul 2026 08:46:14 +0000
ROA not before: Sat 18 Jul 2026 08:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 178.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:67:9b:e2:08:c8:3d:49:88:01:e3:91:5f:c6:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 18 08:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4dd95bf0913720b0600e18a6ce2ff555fbc911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:0d:77:5d:37:55:d5:bd:0d:cf:93:9b:72:
da:67:4b:bd:6e:3a:e0:52:b8:9b:51:da:04:db:4b:
e4:8b:3f:05:75:65:aa:59:49:eb:3d:29:6c:b0:33:
f6:a7:b3:52:a7:07:1e:bd:ae:30:9b:b3:03:23:5b:
0b:1d:74:74:c7:db:21:cf:79:52:85:96:10:b9:db:
1f:7b:51:87:86:8e:c3:73:cb:62:66:7d:f7:d1:1f:
dc:e8:d4:56:4e:49:b5:b1:d9:03:f7:ea:3c:a7:10:
67:35:a0:4e:46:5d:48:e3:9f:12:98:a1:41:47:4e:
c3:32:d7:45:71:fe:ce:56:2c:10:73:01:51:57:f7:
78:95:9d:bf:dd:8d:9d:93:83:b6:60:64:cc:17:84:
41:56:83:1a:c2:74:ef:e1:f0:e4:34:4f:bd:df:4b:
0d:57:d9:aa:dc:06:e2:99:0c:9c:ba:42:b8:bb:5c:
4f:0a:f5:2c:1c:b8:86:a9:02:5b:8e:6a:0c:06:b6:
c4:17:ad:36:c7:49:79:27:33:77:30:5e:2a:0f:a1:
63:1b:56:7f:db:5a:d5:2a:d6:99:12:71:b5:9c:c7:
70:42:9f:bc:13:39:51:25:69:70:b0:5a:e5:43:83:
89:89:ab:96:32:4e:8b:c1:f2:35:72:b3:45:68:de:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:95:BF:09:13:72:0B:06:00:E1:8A:6C:E2:FF:55:5F:BC:91:1E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5N2VvwkTcgsGAOGKbOL_VV-8kR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
12:04:ff:19:b9:4d:78:d8:14:3d:d4:92:41:71:3d:7a:f3:01:
19:cb:94:f9:71:64:57:8f:22:5f:89:fe:3d:aa:f5:f4:2a:94:
65:40:ab:5a:3e:25:92:3c:cb:96:68:aa:a1:12:9f:ae:58:68:
87:8b:fb:f0:77:da:56:e5:82:ab:04:ad:1a:3b:b6:9f:bb:ef:
87:34:d1:97:07:70:74:cc:a1:a5:c1:24:66:c2:aa:cc:9f:d1:
62:cc:58:62:d8:2d:f8:c2:1f:88:ed:c9:a9:ef:b0:c3:b3:bf:
70:bb:bc:ab:9a:fb:81:b7:b2:60:c9:38:ff:e6:f1:65:6c:ba:
bd:a0:2d:20:e6:3b:dd:97:7e:dc:a0:44:0f:9e:44:a4:4e:d9:
d1:7c:fe:33:b2:9b:0f:40:15:34:0a:80:f6:ce:05:6e:5a:c9:
3f:8e:f3:b8:ea:09:e8:b1:54:95:5f:b9:76:ff:66:00:1f:9f:
0c:f6:9d:cf:9d:4f:1e:40:9a:fa:ab:29:25:dd:33:20:ce:e6:
de:cc:94:46:a7:25:54:ca:6f:28:fa:3f:09:59:fb:0e:78:12:
75:25:6e:77:83:9e:c4:e0:a7:c9:36:21:89:1c:c6:b2:c0:5f:
82:a3:5a:13:2c:69:7c:e1:86:63:17:e6:5e:80:fc:fd:82:18:
8c:55:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:20:57 2026 by rpki-client