Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VwP4sEhAnyJ9XY0hDIug615dbvM.roa
File: VwP4sEhAnyJ9XY0hDIug615dbvM.roa (raw, json)
Hash identifier: YNkePphkCgGe6LX9VHSmNOLJ3BRI8AowWy0k/uxHsSM=
Subject key identifier: 57:03:F8:B0:48:40:9F:22:7D:5D:8D:21:0C:8B:A0:EB:5E:5D:6E:F3
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A03E7544A7759DEDB6DDEF739B8EE11C74
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VwP4sEhAnyJ9XY0hDIug615dbvM.roa
Signing time: Wed 26 Aug 2026 14:24:27 +0000
ROA not before: Wed 26 Aug 2026 14:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:75:44:a7:75:9d:ed:b6:dd:ef:73:9b:8e:e1:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 26 14:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5703f8b048409f227d5d8d210c8ba0eb5e5d6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:da:43:5d:b1:aa:fc:0f:c2:6e:4c:aa:ab:
f7:cb:34:0a:ad:c2:64:6e:69:c6:34:a0:8b:f6:9d:
d3:fc:04:7e:d6:d7:86:7b:7b:f3:88:25:95:2d:a2:
8b:06:0f:74:21:8b:1e:06:13:60:87:97:c4:d4:fc:
ba:aa:86:53:ee:6b:08:34:28:03:12:cb:8a:bd:7d:
97:68:ce:49:a0:88:fa:af:ae:eb:e3:02:cb:44:81:
62:fa:85:43:d4:54:54:e1:f8:01:60:2c:76:60:3f:
0b:f5:20:e6:a0:19:61:77:f3:a3:08:45:bf:e1:a7:
32:fc:29:85:fc:54:61:24:14:81:dd:14:19:65:5d:
4a:3b:fb:3a:a6:4f:13:67:ab:a9:bc:28:de:fa:71:
c5:42:c4:d4:19:25:bb:2f:86:fd:d6:f8:6a:ee:2a:
87:de:63:21:f5:ef:7d:b7:b0:d7:be:0d:b9:6e:69:
17:a5:2c:10:df:b3:7d:e4:79:0e:28:00:2d:38:f1:
f4:65:b0:ee:cc:59:e9:c7:a0:c6:99:38:9a:6c:bc:
78:10:56:d0:ef:bf:69:e7:34:cf:75:d4:c2:57:5c:
65:17:3d:87:d4:10:de:54:83:5c:ae:07:05:26:2c:
e9:db:69:c3:23:58:fd:d2:a2:c9:d5:ec:76:52:53:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:F8:B0:48:40:9F:22:7D:5D:8D:21:0C:8B:A0:EB:5E:5D:6E:F3
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VwP4sEhAnyJ9XY0hDIug615dbvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d2:c3:2a:ac:b2:5c:f5:ce:c2:d1:eb:0f:9f:ac:af:3c:75:
39:0a:78:fd:9d:19:5e:29:9d:a7:c7:31:46:53:5a:57:cf:66:
d5:30:b4:db:ad:0e:66:80:f9:d2:7a:99:06:90:5b:71:98:27:
1b:f0:57:60:f8:a0:57:d4:a7:89:27:37:5e:28:8f:47:b2:12:
3b:ec:7f:d9:d6:35:8a:ce:d0:b4:86:32:a2:89:fa:8b:4f:7c:
26:9b:c4:26:13:98:af:93:2c:35:9b:f7:31:a7:8f:6f:99:44:
89:3d:20:47:94:3b:7f:b9:44:a0:9f:cb:10:0b:8f:c2:b1:2e:
7f:89:c4:52:72:ec:34:86:3e:9f:40:34:6f:d1:72:ae:ad:b4:
56:2d:98:4a:09:98:3d:f3:d8:d5:c1:c0:c7:19:86:e1:e3:42:
83:c6:e3:b9:7c:12:65:85:dc:10:a5:5c:64:98:1b:ad:91:35:
62:d8:94:48:6d:e1:a4:3d:6b:98:ca:29:64:59:78:66:28:c5:
79:fd:b4:22:5d:13:fd:2f:7d:14:22:9a:d4:4e:1a:c5:0a:b1:
9e:8a:1a:50:42:e3:66:2c:2e:3b:85:cd:be:ff:2e:aa:6b:fd:
de:7a:e9:0f:f3:88:bf:24:c3:9c:8d:2b:59:aa:85:fd:24:22:
e9:e8:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:37 2026 by rpki-client