Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QM6X1fB-TaFMmYdhu0qCB5h8VbQ.roa
File: QM6X1fB-TaFMmYdhu0qCB5h8VbQ.roa (raw, json)
Hash identifier: Ngd2wVJacTdYkb5nSWSGB4QB9B9UNwbIqaNwsrZFbvU=
Subject key identifier: 40:CE:97:D5:F0:7E:4D:A1:4C:99:87:61:BB:4A:82:07:98:7C:55:B4
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FF83C55AF56F07443D66DD2D4C74B1EE6
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QM6X1fB-TaFMmYdhu0qCB5h8VbQ.roa
Signing time: Wed 12 Aug 2026 23:08:51 +0000
ROA not before: Wed 12 Aug 2026 23:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202996
IP address blocks: 85.239.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:3c:55:af:56:f0:74:43:d6:6d:d2:d4:c7:4b:1e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 12 23:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40ce97d5f07e4da14c998761bb4a8207987c55b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:f8:63:2c:6b:80:52:8a:c2:2b:9d:d1:58:
e3:ad:39:77:b5:93:a7:38:89:fe:05:15:af:42:fa:
90:4b:a5:86:5b:77:88:b8:46:8b:76:2e:8b:42:14:
18:bd:97:85:f7:7c:fc:21:e6:20:06:da:7e:7b:b5:
0e:ed:a7:7e:21:4a:98:02:a3:55:9b:62:9d:9e:36:
9a:60:45:f9:6a:7d:92:d2:2e:8a:7d:e4:dd:3f:55:
49:03:ec:b9:65:e4:5b:18:4d:0f:e9:52:d1:91:bd:
d7:7b:b4:7f:26:76:73:e0:58:a0:92:3f:f2:33:25:
ad:5b:f3:e7:e0:e9:32:b9:a7:d7:5f:a9:44:48:fd:
97:ee:be:bc:d3:b9:b8:68:3d:7b:3c:40:23:6d:f3:
76:b6:b9:bc:8b:98:bc:2c:0d:72:12:db:15:37:1c:
de:fc:72:a7:6c:00:ba:8a:85:e8:1a:ba:14:e1:7e:
2c:7b:c9:f0:5c:3d:12:5b:4f:75:4c:b8:25:c0:80:
80:df:c6:83:1f:61:5d:e0:05:b7:aa:14:14:83:cd:
00:15:73:68:1c:cb:dd:39:79:52:62:46:c1:ed:d0:
6c:87:0b:ad:b0:5a:f7:49:61:02:fd:aa:31:b6:9b:
cf:7d:bf:77:06:f9:64:c7:a2:b3:8d:85:2c:c4:a6:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:97:D5:F0:7E:4D:A1:4C:99:87:61:BB:4A:82:07:98:7C:55:B4
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QM6X1fB-TaFMmYdhu0qCB5h8VbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:39:9c:c5:e1:31:74:2a:75:c1:26:bd:03:a0:e1:9d:63:48:
7f:38:a6:5d:1e:c3:a6:0a:cd:05:ba:3a:c5:4d:80:1a:4a:b9:
b1:51:6a:67:13:6c:45:bf:7b:0f:59:19:21:a1:61:6f:93:2a:
ec:d7:a2:8a:d5:81:d7:6e:c2:44:2b:8b:3c:9a:a7:e5:74:32:
7e:31:d9:4c:54:ee:30:d4:a4:08:41:64:d0:e6:4f:4e:34:74:
78:68:c1:c4:25:d6:44:6d:cc:ba:e4:3c:5f:76:43:e2:4d:3c:
b8:cb:de:36:84:05:e3:01:37:6b:3f:59:03:23:97:e7:56:52:
f3:2f:a5:42:d5:ff:06:cf:af:3a:56:26:e9:97:8b:c3:79:b1:
63:9f:d9:ed:32:fc:d3:9b:10:4b:95:7e:4a:07:05:bb:58:d3:
37:f4:d6:3f:6a:8c:bf:cf:f6:6f:dc:d6:37:f5:86:21:93:8f:
29:9b:6b:97:9a:57:69:e9:08:ef:bd:53:d7:c5:9a:12:97:71:
03:b2:c6:93:38:62:9d:f2:47:b0:54:7f:c8:55:d1:75:9a:2e:
0c:82:da:9f:33:87:9e:48:63:e5:ea:9b:fe:15:08:bb:56:c9:
a6:3f:cc:be:d2:21:10:4d:9c:63:9d:f7:7e:32:53:01:fe:be:
9b:54:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:40 2026 by rpki-client