Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cBMHGs26YpfPFmzEGROlf-GzUm0.roa
File: cBMHGs26YpfPFmzEGROlf-GzUm0.roa (raw, json)
Hash identifier: DegbaYXXnt5Np7swJiztfM7K+NouxTqUBNHxSEf5xy0=
Subject key identifier: 70:13:07:1A:CD:BA:62:97:CF:16:6C:C4:19:13:A5:7F:E1:B3:52:6D
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A00FF017817E38911716E45AF963157974
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cBMHGs26YpfPFmzEGROlf-GzUm0.roa
Signing time: Mon 17 Aug 2026 13:36:27 +0000
ROA not before: Mon 17 Aug 2026 13:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.148.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:f0:17:81:7e:38:91:17:16:e4:5a:f9:63:15:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 17 13:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7013071acdba6297cf166cc41913a57fe1b3526d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:4a:70:89:b0:00:c2:0b:60:e8:4d:05:e5:
45:0b:d5:13:b7:29:ba:bb:bb:fa:9d:c2:4e:2e:6b:
65:c3:32:e2:3c:e7:1d:0e:6c:6c:b6:5e:81:b4:f7:
d1:54:40:0d:90:c7:89:9b:86:6e:95:56:c9:12:a2:
54:80:24:79:f9:15:14:76:86:d7:2c:e3:f9:0b:35:
13:2a:f2:24:de:c4:aa:fc:77:54:41:8a:27:bf:d5:
a9:24:dd:a5:ba:0d:61:19:97:2a:c4:17:c6:1a:f1:
ec:ab:23:45:d6:9c:31:b4:ca:3e:f2:44:02:56:02:
f9:17:bc:c5:89:6e:da:af:4d:6f:b6:21:d8:aa:a5:
fe:4c:a5:f2:b3:69:79:ac:ed:92:6f:6e:98:ac:ae:
6b:56:1b:25:c4:33:f7:a7:32:83:ce:e8:52:c8:9a:
cc:60:4e:51:ba:6b:7f:40:54:d2:7b:7d:7c:b3:14:
c9:6d:57:96:8c:96:9b:0e:20:24:c6:f7:9c:f6:df:
f1:f5:22:a4:a6:05:53:5c:ca:41:08:46:76:98:8e:
f1:23:ed:9f:f4:ab:09:6d:3b:73:f9:fb:65:d7:7b:
6e:3b:19:20:23:49:39:86:9a:75:9f:26:a9:67:e1:
cd:1e:c7:96:72:f6:72:0d:fa:24:98:32:3f:f9:c7:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:07:1A:CD:BA:62:97:CF:16:6C:C4:19:13:A5:7F:E1:B3:52:6D
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cBMHGs26YpfPFmzEGROlf-GzUm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
92.62.253.0/24
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:57:ec:b2:f8:e3:69:cb:3f:d6:47:a1:6c:9e:80:04:ba:43:
cd:e7:4a:9d:ed:54:e9:f2:42:9f:23:a7:51:06:c6:6a:65:c1:
d2:67:91:cc:eb:ad:3e:1e:d6:6f:8d:57:19:8d:fb:5a:e2:31:
b4:7b:90:9e:8f:79:c7:c8:ee:4c:6f:ff:b8:b2:8a:b8:8e:d7:
8c:87:bd:af:2a:c3:dd:3c:6c:b7:71:10:b8:60:25:51:ab:b0:
85:70:f2:eb:9a:a3:96:d1:f4:49:5e:b1:9f:e9:89:53:93:68:
b8:08:98:fe:29:9e:22:31:55:dd:bd:d8:d7:2c:c9:fd:1c:e4:
cf:5e:f2:00:5b:60:51:f7:03:eb:93:02:af:e6:f0:55:67:d6:
37:ca:90:fd:28:73:72:dd:46:b2:03:b4:d8:da:2f:e4:83:df:
c7:e8:de:ea:38:34:7c:f1:6f:50:cd:8f:b1:a2:3b:c4:96:12:
24:13:eb:77:a3:b9:b5:0e:7b:73:0b:11:78:b9:38:b0:84:40:
4f:85:1b:90:66:e9:78:73:3a:c7:2f:d9:a6:ca:d2:a5:19:36:
9d:15:c4:7a:cb:ac:9e:6f:ad:3b:ec:e6:24:62:26:b1:bf:41:
7f:ee:60:bc:b6:ba:83:e4:d7:bf:10:75:4b:a4:9d:b3:ac:65:
d4:0a:07:8a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAP8BeBfjiRFxbkWvljFXl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwODE3MTMzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDEzMDcxYWNkYmE2Mjk3Y2YxNjZjYzQxOTEzYTU3ZmUxYjM1MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUFKcImwAMILYOhNBeVFC9UTtym6
u7v6ncJOLmtlwzLiPOcdDmxstl6BtPfRVEANkMeJm4ZulVbJEqJUgCR5+RUUdobX
LOP5CzUTKvIk3sSq/HdUQYonv9WpJN2lug1hGZcqxBfGGvHsqyNF1pwxtMo+8kQC
VgL5F7zFiW7ar01vtiHYqqX+TKXys2l5rO2Sb26YrK5rVhslxDP3pzKDzuhSyJrM
YE5Rumt/QFTSe318sxTJbVeWjJabDiAkxvec9t/x9SKkpgVTXMpBCEZ2mI7xI+2f
9KsJbTtz+ftl13tuOxkgI0k5hpp1nyapZ+HNHseWcvZyDfokmDI/+ccgjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHATBxrNumKXzxZsxBkTpX/hs1JtMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvY0JNSEdzMjZZcGZQRm16RUdST2xmLUd6VW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe+UAwQA
XD79AwQAsu9wMA0GCSqGSIb3DQEBCwUAA4IBAQCsV+yy+ONpyz/WR6FsnoAEukPN
50qd7VTp8kKfI6dRBsZqZcHSZ5HM660+HtZvjVcZjfta4jG0e5Cej3nHyO5Mb/+4
soq4jteMh72vKsPdPGy3cRC4YCVRq7CFcPLrmqOW0fRJXrGf6YlTk2i4CJj+KZ4i
MVXdvdjXLMn9HOTPXvIAW2BR9wPrkwKv5vBVZ9Y3ypD9KHNy3UayA7TY2i/kg9/H
6N7qODR88W9QzY+xojvElhIkE+t3o7m1DntzCxF4uTiwhEBPhRuQZul4czrHL9mm
ytKlGTadFcR6y6yeb6077OYkYiaxv0F/7mC8trqD5Ne/EHVLpJ2zrGXUCgeK
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:25 2026 by rpki-client