Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NKaMNSd5VnvMqZHx9jPK1nl5OM4.roa
File: NKaMNSd5VnvMqZHx9jPK1nl5OM4.roa (raw, json)
Hash identifier: XRq6bJ4N9wE4NjsD8leRSBsYQMSCNsF5y3x7wtSda+4=
Subject key identifier: 34:A6:8C:35:27:79:56:7B:CC:A9:91:F1:F6:33:CA:D6:79:79:38:CE
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0DD09FD3FFAC2C9290A5F56855C314B87
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NKaMNSd5VnvMqZHx9jPK1nl5OM4.roa
Signing time: Sat 26 Sep 2026 09:26:54 +0000
ROA not before: Sat 26 Sep 2026 09:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.239.154.0/24 maxlen: 24
178.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:09:fd:3f:fa:c2:c9:29:0a:5f:56:85:5c:31:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 26 09:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34a68c352779567bcca991f1f633cad6797938ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:fa:03:74:1b:1c:23:4f:0a:5c:55:b4:bc:
f9:07:0c:63:48:01:0d:87:27:d3:6b:73:f6:96:28:
66:e1:4c:0d:de:48:73:76:d4:89:36:db:68:78:82:
94:71:4c:72:17:95:1f:a5:4d:c0:63:98:3a:d5:f5:
72:ad:42:89:38:6d:a8:02:32:07:d2:8a:81:cd:8a:
51:ae:d4:80:25:21:e5:e3:c4:32:8c:7e:c6:7e:5f:
68:0f:03:27:bc:ca:f7:a6:b6:e3:8d:1d:c9:60:43:
e9:b3:17:0b:36:37:a9:fd:b7:e9:ab:2c:73:e3:c4:
dc:66:f6:cf:8c:85:14:cc:24:3b:9d:ea:be:fc:d4:
39:01:3c:e2:43:d1:cd:ea:6e:3b:84:ff:09:73:29:
4f:72:24:ac:5a:c1:08:f9:80:bf:a3:2e:b0:df:db:
45:71:9b:a1:fa:f9:a8:c7:65:a7:87:f4:f6:f1:f9:
0f:08:bd:b0:fd:db:2a:a2:23:e3:23:cf:5c:c7:88:
3a:9a:b8:b1:4b:54:2d:8f:e4:2c:97:f6:93:15:dd:
e9:f0:69:06:57:92:58:d1:2c:7e:00:36:d9:95:2d:
35:02:91:5f:93:7b:ec:41:d1:c5:97:38:cc:f0:1f:
f9:2e:5f:92:21:72:92:5d:ee:c0:04:63:45:cf:2e:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:8C:35:27:79:56:7B:CC:A9:91:F1:F6:33:CA:D6:79:79:38:CE
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NKaMNSd5VnvMqZHx9jPK1nl5OM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
178.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d1:f0:fe:0a:7f:53:48:ba:c1:af:0d:ee:b0:c7:23:23:de:
d4:79:a4:9f:0b:ea:44:0e:5b:cd:8f:44:31:ec:fe:c4:13:e9:
68:59:56:2f:e4:2b:30:55:33:9b:e6:7f:1c:96:16:67:c4:ab:
a5:ab:42:a5:21:2e:61:3d:b7:86:a2:aa:3d:fd:37:0c:45:15:
58:f2:52:5f:65:ab:25:f9:6a:35:35:7a:8b:f6:69:36:97:45:
c8:2f:b5:aa:18:cf:0e:e7:86:4b:a7:b1:a5:49:f5:65:eb:02:
a7:e9:bc:09:d2:6e:e5:66:91:a6:6f:44:75:49:b5:ad:97:f6:
b3:1a:c8:93:12:55:47:0f:85:db:b2:92:97:dd:5e:d8:42:dd:
e4:27:e3:b9:75:4b:9e:4b:b0:49:1f:73:96:2d:b3:e2:8d:1d:
d7:30:5f:a1:7a:84:07:cb:84:80:2a:52:f9:af:03:ac:91:93:
56:06:50:fb:c8:e3:8d:0e:20:a4:3c:c0:ac:15:4d:e1:e4:7e:
61:19:a1:25:4b:f6:3b:f8:40:36:23:19:69:c3:83:b2:03:dc:
05:9f:7c:0f:9a:52:3d:e0:30:bf:ea:e9:65:6d:95:bf:98:37:
c5:88:34:d8:5e:c9:d8:cb:14:6c:33:3d:6f:e5:5b:ea:f9:d8:
25:f3:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:15 2026 by rpki-client