Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_QNTykgEDm1B9jfgvmsfxHChgzk.roa
File: _QNTykgEDm1B9jfgvmsfxHChgzk.roa (raw, json)
Hash identifier: PaJMKUvz2xZUAH58M1x2MSx2nnk6tacdqcVH/ruO+0A=
Subject key identifier: FD:03:53:CA:48:04:0E:6D:41:F6:37:E0:BE:6B:1F:C4:70:A1:83:39
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F3D1FD4AF7A6316F51782AD45561EA6A6
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_QNTykgEDm1B9jfgvmsfxHChgzk.roa
Signing time: Tue 07 Jul 2026 15:08:43 +0000
ROA not before: Tue 07 Jul 2026 15:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:1f:d4:af:7a:63:16:f5:17:82:ad:45:56:1e:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 7 15:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0353ca48040e6d41f637e0be6b1fc470a18339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:48:96:b5:5c:7a:ba:c0:24:94:d5:e6:2e:
9e:06:58:fa:7b:72:30:40:00:9e:0b:ae:71:cc:cd:
e2:10:2f:96:29:68:07:43:9a:7c:96:f1:9b:44:5d:
79:1a:47:21:9f:05:11:2d:76:a0:9a:03:b7:84:c1:
b5:23:fc:9f:04:ca:eb:4f:dc:3a:d6:3a:8a:92:38:
b3:74:eb:6c:bb:0c:62:56:28:4d:ca:46:11:5e:9e:
56:cd:15:e6:69:a8:23:cc:f1:d6:ba:38:23:9b:7d:
6f:85:40:70:d0:1a:a3:bd:c6:82:06:0c:57:63:97:
98:bc:fa:a3:93:ed:12:5b:b3:c1:92:74:94:5d:9d:
41:56:3d:ea:e7:3b:6e:58:76:61:ea:bc:85:4a:ee:
47:f4:a2:63:41:49:91:04:b8:89:bf:32:c7:e1:49:
46:dd:ab:85:09:58:9b:03:88:5b:e5:24:26:52:38:
4a:31:2a:9f:d7:a4:b7:45:49:22:3d:96:62:8a:ed:
ae:d3:68:54:81:f9:22:ab:2b:92:41:8f:19:7a:df:
63:28:2f:29:49:c4:c3:9d:62:ba:5e:b2:37:fa:03:
a9:65:27:31:c3:ba:8c:03:e5:5c:5c:0a:8b:3b:92:
f2:13:65:00:7e:76:fd:cc:08:f6:2f:1d:89:f0:77:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:53:CA:48:04:0E:6D:41:F6:37:E0:BE:6B:1F:C4:70:A1:83:39
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/_QNTykgEDm1B9jfgvmsfxHChgzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:55:e1:cf:44:a2:41:6d:ad:05:e4:a3:da:7a:72:53:7a:6c:
e8:f3:2e:bf:68:db:21:db:06:6f:d5:5a:55:a1:84:1c:13:a9:
ba:f3:4e:ab:cd:ea:e9:36:3e:d2:f6:37:e1:76:46:03:1d:ab:
19:9f:99:ac:d5:c3:97:4f:2d:1b:f1:1d:ce:c1:23:71:c0:9d:
ef:f3:13:bf:a1:6c:b9:4e:d6:ea:f1:d4:76:68:b9:af:43:c3:
bc:9f:79:27:05:bf:69:d1:cb:1b:45:d4:37:8d:9c:da:09:52:
4f:87:ea:c0:d8:5a:fc:c2:d7:f6:21:67:f8:4b:c8:e4:86:80:
3b:52:93:f6:b6:b5:f7:ac:8a:1c:60:55:d2:5c:a5:5e:37:54:
72:9f:42:a2:cc:f4:1f:0b:c5:3b:3e:37:71:4a:56:ad:33:25:
ea:cf:a5:66:63:25:3f:d1:41:f5:0f:47:69:8b:9e:34:c7:f4:
e7:d2:77:7c:27:de:9e:99:54:9d:41:eb:36:2c:f3:aa:b0:53:
74:59:d3:c0:f5:00:c5:e0:66:58:82:d2:28:34:6b:cb:10:df:
3e:93:ba:3a:f2:d3:af:56:3e:98:34:4e:d2:75:db:18:c3:29:
09:e6:aa:17:82:dc:ce:82:47:22:e2:cf:25:f9:fa:21:d6:45:
f9:31:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:48 2026 by rpki-client