Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/RQgDDP8e04kHHU6LZ1uovMrm1ek.roa
File: RQgDDP8e04kHHU6LZ1uovMrm1ek.roa (raw, json)
Hash identifier: FVyJUW93zXQCQD7MWSXQwVQBQtgfQ7qFkav7ALewlsU=
Subject key identifier: 45:08:03:0C:FF:1E:D3:89:07:1D:4E:8B:67:5B:A8:BC:CA:E6:D5:E9
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A042944A99AC00BFF70F4B5A9F23058324
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/RQgDDP8e04kHHU6LZ1uovMrm1ek.roa
Signing time: Thu 27 Aug 2026 09:36:49 +0000
ROA not before: Thu 27 Aug 2026 09:36:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:94:4a:99:ac:00:bf:f7:0f:4b:5a:9f:23:05:83:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 27 09:36:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4508030cff1ed389071d4e8b675ba8bccae6d5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:58:d7:8e:f9:a1:cb:56:a2:b1:38:31:f0:
af:1c:6e:40:0c:4f:88:e7:10:29:06:a8:2d:17:fd:
02:42:76:c6:39:8b:68:47:40:f6:08:9a:22:02:63:
4b:13:dd:80:e7:a6:4e:0e:39:09:d9:12:a9:6a:fc:
35:a1:8b:31:5f:4f:42:bc:a5:c7:50:fa:68:46:5f:
d0:35:3d:93:d6:a2:bf:57:0e:4c:ff:36:f0:57:c6:
ce:bb:3e:b9:ab:d1:8a:6f:05:44:42:a5:32:1b:22:
88:92:c0:36:7d:3c:46:88:7e:f6:6f:79:fd:5a:d0:
44:be:a4:e4:4a:ff:51:3b:51:30:37:a1:a5:0c:72:
54:75:32:30:e5:62:9b:b6:e4:f4:d3:01:c8:fe:aa:
e0:03:2d:e0:93:bb:78:d1:ed:80:0a:45:a7:ab:a1:
33:70:7c:a1:33:7f:ee:8d:44:18:b6:e2:53:ec:40:
d0:65:a9:40:6f:31:92:df:e6:ce:76:e9:6e:f9:2c:
2c:75:5a:9a:d2:a2:e3:d6:3c:c5:36:18:57:20:bc:
63:dc:ab:ff:6e:be:5e:de:4e:d5:1b:67:ce:c2:8f:
b1:cc:dd:1e:7f:f0:d1:e4:ce:af:a6:a9:e4:a0:48:
d8:f8:8a:ea:cc:95:fd:45:db:01:4d:1f:a8:fb:14:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:03:0C:FF:1E:D3:89:07:1D:4E:8B:67:5B:A8:BC:CA:E6:D5:E9
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/RQgDDP8e04kHHU6LZ1uovMrm1ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:78:fb:a6:49:b7:02:e1:e6:7e:91:97:c8:ba:bd:ed:11:
cd:84:29:ed:27:6f:8e:a2:a5:c1:ec:e1:84:49:38:c9:67:bb:
74:a6:52:7d:b0:bf:81:c0:ba:d4:e1:0c:93:5b:35:0b:eb:d2:
23:ee:63:3f:5b:99:22:d2:c2:2e:92:67:86:6d:8a:c8:61:70:
f6:4d:e1:87:ee:09:18:67:fa:17:b4:d2:93:46:3f:6e:07:84:
52:d5:f4:7d:43:97:4a:68:b4:ba:8a:f4:e7:e5:6f:8b:ee:eb:
18:b1:a9:92:22:fc:7d:d5:8a:a6:77:a9:dd:52:7d:ae:ab:55:
54:83:87:42:14:d2:7b:b9:d6:ce:ce:7a:92:80:e1:73:09:3d:
b1:a4:f5:ef:51:a9:23:64:9d:80:0b:f8:91:24:4a:d5:f7:9e:
87:24:ce:18:6e:34:0b:fd:16:9d:fa:b3:d9:15:f9:7a:a8:bb:
51:c0:34:e7:0c:49:83:5b:1c:2c:c6:59:9d:3b:c0:9d:61:fc:
15:73:f1:99:d5:df:bd:67:02:2a:1f:81:68:02:6f:be:9b:40:
e7:1c:4b:ea:17:f6:a7:bb:f2:42:84:9d:6e:8c:31:c9:ed:81:
52:b3:b6:88:a5:be:b4:1a:66:32:c6:a2:9e:4e:35:47:25:d9:
31:78:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:20 2026 by rpki-client