Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9fdLWh5GaIubAP2FkDaF3lTj62g.roa
File: 9fdLWh5GaIubAP2FkDaF3lTj62g.roa (raw, json)
Hash identifier: W55eojA91P8bnPhE/h112QyKROVtQqB6iJ3OB09W9uw=
Subject key identifier: F5:F7:4B:5A:1E:46:68:8B:9B:00:FD:85:90:36:85:DE:54:E3:EB:68
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A1393B3F95770AE944F58CA92DE46BF079
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9fdLWh5GaIubAP2FkDaF3lTj62g.roa
Signing time: Wed 14 Oct 2026 07:05:46 +0000
ROA not before: Wed 14 Oct 2026 07:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403089
IP address blocks: 178.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:3b:3f:95:77:0a:e9:44:f5:8c:a9:2d:e4:6b:f0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 14 07:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5f74b5a1e46688b9b00fd85903685de54e3eb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:10:bd:3b:9a:71:92:e2:cc:1e:4a:64:6d:
f8:b3:d3:ae:49:1b:d2:c0:f7:ec:56:88:67:20:a9:
a8:30:21:34:53:49:d3:d1:83:13:4a:a1:9a:a1:28:
3f:ea:55:d1:68:5b:d3:b9:b4:ff:c2:53:89:01:f8:
4d:85:73:2a:11:25:ad:6a:d5:af:39:d4:7e:67:3b:
a4:bb:a6:5a:1b:f4:b2:cf:f4:23:78:71:73:13:62:
fd:9c:9c:62:10:8b:fe:27:ae:19:e7:dd:d5:2a:42:
58:a4:a5:06:e0:2a:2b:27:8f:c5:cc:14:8f:5c:96:
3d:8f:00:3c:11:e9:d1:ad:45:f6:8d:8e:83:69:4b:
c5:bb:96:4c:4d:75:3a:26:4c:61:62:d1:32:78:aa:
68:60:7c:89:1a:dd:91:bd:1d:6f:00:6a:81:ef:ea:
8b:dc:a1:3b:b4:bd:71:cb:a0:ef:6b:8b:e8:a9:08:
f9:03:11:aa:9a:99:56:27:04:76:0c:4a:2c:5d:3c:
e1:cb:4e:60:e5:cd:22:37:17:63:04:26:ac:7a:aa:
2d:eb:ec:31:4e:da:cd:76:93:d8:5a:08:f1:e5:4c:
aa:53:65:8d:02:e7:f2:1f:5e:81:f6:39:1b:8e:72:
57:62:d9:56:23:89:d2:43:7f:e3:b4:f0:86:cc:d9:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:4B:5A:1E:46:68:8B:9B:00:FD:85:90:36:85:DE:54:E3:EB:68
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9fdLWh5GaIubAP2FkDaF3lTj62g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a9:3d:9d:4a:ee:e5:f9:29:6b:5e:d1:5e:66:9c:93:a2:4c:
9d:96:4d:7d:44:05:12:79:0d:20:94:e6:eb:8e:10:70:95:d7:
e8:2d:03:7a:d6:d2:d6:ba:5f:af:93:31:e8:fe:5e:26:d6:0a:
37:7c:af:44:3f:ba:4f:99:a2:b7:f3:c9:3c:03:4f:b3:63:de:
4e:b4:ad:f4:c9:51:d0:a2:20:c6:03:64:a2:0a:ac:ec:7c:25:
01:f6:e8:a5:cb:55:b7:fc:cf:cd:f9:04:94:05:a9:78:5e:16:
9a:fc:7c:a7:fe:a0:bd:b1:a7:20:6b:fa:88:cf:b6:c6:de:32:
22:0d:4e:8e:98:e5:af:df:b3:31:db:9e:b2:91:fc:77:ff:b7:
ea:f2:7a:71:5f:74:53:b8:f7:24:92:22:2a:a4:6e:1e:07:73:
22:4f:87:29:f0:1d:ef:d9:64:05:13:fe:39:5e:27:cf:13:43:
79:a0:9b:f2:8f:05:69:c5:84:fa:33:fd:8e:98:3d:fb:d3:2a:
2f:12:c9:f9:fd:04:4f:ed:2c:01:0f:3b:8f:26:48:5d:2e:9e:
a8:2f:2f:aa:27:d8:54:00:66:0b:70:0c:73:c4:4d:b3:f1:63:
f8:8d:b0:bf:31:a5:28:23:62:05:6d:e4:c5:97:90:d5:f2:1c:
b6:6d:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:14 2026 by rpki-client