Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/INDwpg5_YWVnr7x3oxl2LNr1414.roa
File: INDwpg5_YWVnr7x3oxl2LNr1414.roa (raw, json)
Hash identifier: JZZE0guo+73MPDdAIfwpga2Mv0EUcaKy5j9AolPVxdM=
Subject key identifier: 20:D0:F0:A6:0E:7F:61:65:67:AF:BC:77:A3:19:76:2C:DA:F5:E3:5E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FC1326EAF5E9B51E2A869149D60FD8E81
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/INDwpg5_YWVnr7x3oxl2LNr1414.roa
Signing time: Sun 02 Aug 2026 06:38:55 +0000
ROA not before: Sun 02 Aug 2026 06:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:32:6e:af:5e:9b:51:e2:a8:69:14:9d:60:fd:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 2 06:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20d0f0a60e7f616567afbc77a319762cdaf5e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:6c:3b:18:95:46:74:cd:81:b1:42:4e:f4:
eb:f5:45:f3:9a:be:f9:26:32:e9:0d:c6:71:2f:7f:
c9:52:cd:02:92:1e:ea:5b:86:6e:65:a7:e2:7f:a3:
41:3b:90:25:c5:54:c7:a2:29:09:8b:2a:85:15:2d:
fe:f6:8c:ab:72:1e:44:86:e7:02:b4:86:97:0e:d1:
78:a8:f0:24:6d:5b:f3:8e:3a:f5:8e:63:9d:06:19:
22:76:34:7c:fa:0c:17:b4:23:ea:be:84:3a:86:75:
b7:80:59:1f:76:3b:97:80:63:b2:fb:40:80:b4:49:
da:0e:1f:f0:39:d5:a2:ee:16:a1:4e:7c:e8:4b:c3:
11:93:5b:9c:90:06:01:0e:80:5b:5f:36:1d:d7:44:
14:8a:c3:cb:09:7d:73:dd:ba:ca:2e:62:31:75:74:
64:90:4b:b2:84:c1:0a:10:4a:75:3e:d5:43:f5:1f:
2e:47:6c:27:66:f2:43:52:2a:8c:4c:f2:3a:e8:64:
01:c1:e5:21:7b:bc:78:8e:09:18:18:34:32:a5:00:
f1:49:38:c8:bc:bc:0b:49:2f:46:da:5c:66:8d:5e:
b5:c0:40:9e:d5:b6:84:22:d2:c0:38:32:6f:de:c1:
4c:1e:2d:ef:19:57:bf:0a:f3:f4:04:a5:8c:6e:3e:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:F0:A6:0E:7F:61:65:67:AF:BC:77:A3:19:76:2C:DA:F5:E3:5E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/INDwpg5_YWVnr7x3oxl2LNr1414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
52:24:89:c0:73:b1:73:41:2d:14:18:8b:3c:64:22:74:4d:e5:
e0:bd:64:8f:a4:e0:9f:17:a2:6c:73:c4:84:86:7d:c0:8d:67:
14:dc:76:63:a3:a0:9d:35:a9:bf:0c:5f:76:be:6b:5c:7c:a5:
f4:bd:d9:1f:5b:d4:ba:cd:42:c7:80:e3:0f:28:61:c2:0f:e0:
d8:4c:cf:43:c2:77:17:84:ca:d3:77:54:92:97:6d:33:6f:e1:
21:f4:fc:86:e6:b7:b8:05:a9:5e:e1:b5:66:11:63:dd:84:76:
d0:3c:bc:03:33:c8:68:54:b8:d7:ca:63:20:af:ff:50:18:a8:
22:17:b7:39:fd:3f:43:ff:49:d7:83:8c:d9:f0:cb:ff:ad:ce:
80:34:33:9c:7e:8d:cd:87:5b:e4:61:64:d9:7c:4e:6a:cd:25:
e7:ad:06:a1:57:80:d6:2d:89:39:4f:08:7f:44:24:70:2a:9b:
81:87:c4:47:c5:44:bc:4b:b5:b2:ec:4f:82:a1:84:bd:71:3e:
d5:19:cf:12:cb:fa:15:f7:24:6b:32:bf:97:0b:08:3c:fc:b4:
95:4e:01:3c:7d:21:fc:d2:c3:34:41:94:98:af:e6:e0:b1:04:
1d:91:cb:58:85:ee:31:d1:fa:23:f5:3c:ed:5a:d8:ad:78:db:
58:e2:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:10 2026 by rpki-client