Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PzsjLeZr9DjQo3N5QMvhtQ1h0Ew.roa
File: PzsjLeZr9DjQo3N5QMvhtQ1h0Ew.roa (raw, json)
Hash identifier: 0GRyT1GG24ZrZgFK+QmgIFCK2bVtVSOTinEBybZmrZA=
Subject key identifier: 3F:3B:23:2D:E6:6B:F4:38:D0:A3:73:79:40:CB:E1:B5:0D:61:D0:4C
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FAD229C0F2F2C48AD7DE7CF367B030240
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PzsjLeZr9DjQo3N5QMvhtQ1h0Ew.roa
Signing time: Wed 29 Jul 2026 09:09:14 +0000
ROA not before: Wed 29 Jul 2026 09:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 85.239.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:22:9c:0f:2f:2c:48:ad:7d:e7:cf:36:7b:03:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 29 09:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f3b232de66bf438d0a3737940cbe1b50d61d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:78:b9:24:ea:ad:7e:56:c7:94:5d:42:d0:
75:47:e4:bb:20:c4:64:75:7f:d9:1e:87:26:7e:7b:
44:30:db:f0:22:b1:38:8d:d1:b2:bd:3a:b1:bf:8c:
be:66:d5:ec:26:b4:1c:f9:18:04:91:a7:41:81:84:
32:a9:eb:d3:46:b9:6d:68:2f:39:cd:56:b5:e0:60:
cc:95:c1:03:ef:5f:b9:a1:28:26:3b:d2:40:f2:db:
eb:ad:91:02:8f:1f:56:3e:84:a7:6d:2f:ca:1c:57:
f6:1f:d2:67:36:42:e0:fa:be:70:ef:27:9a:85:58:
84:eb:7c:52:d4:44:2a:df:90:4a:4e:86:96:46:fc:
0f:41:8d:83:7d:32:aa:fb:68:a8:88:54:ca:1d:b4:
8b:ba:4e:90:d6:6f:e6:ec:9a:0a:a8:8b:09:0e:19:
f7:04:79:cf:44:8a:f3:8b:63:af:4b:7b:2d:c4:8f:
af:e3:f4:4b:e6:36:e4:1b:57:4d:18:86:17:f8:1f:
ba:ac:31:c7:ea:2d:ed:87:70:6f:12:7d:36:13:73:
d7:bf:15:a0:53:27:4c:29:9d:a2:38:af:87:71:21:
6d:f1:9e:9f:23:c1:85:f1:5b:dd:35:a1:1b:5b:65:
c4:4e:48:1d:81:57:67:ad:4a:c2:84:49:c9:48:5c:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:23:2D:E6:6B:F4:38:D0:A3:73:79:40:CB:E1:B5:0D:61:D0:4C
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PzsjLeZr9DjQo3N5QMvhtQ1h0Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
36:21:2d:11:85:2e:99:31:14:db:82:a5:ea:df:32:aa:02:54:
95:75:bd:67:6b:3a:25:fc:9f:44:e4:7f:32:2d:94:84:1f:bd:
47:2d:7c:81:6d:01:0a:df:90:b5:e4:bf:ff:53:25:f7:27:46:
08:ac:d2:9a:19:b8:e2:51:95:be:39:69:17:d8:75:76:f8:18:
2d:6f:3f:b2:ef:2e:01:a7:cb:bb:13:8c:c0:a2:93:5e:e7:12:
16:80:d0:04:65:a3:26:da:6a:80:ad:a6:a9:e8:aa:ad:d4:b4:
b2:c6:62:1a:7e:70:ed:d8:72:3e:81:2f:3d:7b:6d:e4:cc:f9:
2b:e5:f9:7f:56:7d:dd:00:97:53:bc:38:c2:d6:7a:6e:c1:57:
28:f5:1d:46:a1:45:a3:43:b2:09:03:a0:ad:f0:f9:86:fb:ca:
47:91:41:c3:98:61:e4:fd:0c:63:58:ab:d2:ce:1c:d0:84:c6:
65:36:1d:d6:ad:65:36:89:c5:30:a7:1d:d8:de:e3:f8:b0:aa:
3d:c2:29:88:9e:67:1e:19:20:9c:c8:22:b6:b6:40:88:97:e9:
43:80:39:0b:74:5c:e8:fe:8c:f2:72:67:91:9f:b9:55:8d:65:
dc:a9:5a:8b:d8:9c:42:e9:7d:01:e1:8b:4d:a7:f6:4d:63:5f:
80:91:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:29 2026 by rpki-client