Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDFhGHPcDqoireXeV-9PtxIsd_k.roa
File: cDFhGHPcDqoireXeV-9PtxIsd_k.roa (raw, json)
Hash identifier: nKa53myk3XzTrnxdf7N5fszSAS/jw15fDZoWm2bNrZE=
Subject key identifier: 70:31:61:18:73:DC:0E:AA:22:AD:E5:DE:57:EF:4F:B7:12:2C:77:F9
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A018EDB9BE248EAADA5961A67EF6DBD3C4
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDFhGHPcDqoireXeV-9PtxIsd_k.roa
Signing time: Wed 19 Aug 2026 07:30:27 +0000
ROA not before: Wed 19 Aug 2026 07:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 178.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:ed:b9:be:24:8e:aa:da:59:61:a6:7e:f6:db:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 19 07:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7031611873dc0eaa22ade5de57ef4fb7122c77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:2c:b5:c2:fa:62:68:75:b0:28:27:f3:b9:
98:b4:07:ce:bf:a7:9d:ea:5d:6f:ce:da:ae:f3:d8:
3c:e5:32:85:15:98:72:4c:d4:12:03:6a:4f:c2:0f:
0f:58:19:24:9c:11:36:12:49:3a:cb:3e:1e:a6:e3:
50:42:a7:2b:52:33:95:74:e2:64:9d:d1:62:85:6d:
2d:89:62:3c:89:7e:04:80:37:7b:25:fa:bf:a2:84:
13:62:d6:28:fd:7c:35:78:ad:75:f7:25:77:f9:84:
38:ae:5e:2f:ff:80:a9:fd:44:13:eb:bf:7c:9d:52:
57:14:13:25:83:ca:34:1f:4d:e9:1f:ed:22:da:a4:
16:a6:95:64:8e:5e:87:08:72:20:64:9a:ad:fe:3f:
49:fe:ba:c9:4a:f7:4b:25:a5:f6:51:04:48:cb:60:
d5:3b:99:3b:78:28:ac:d2:fa:a5:2d:f8:31:df:49:
01:17:5f:81:00:e5:65:d1:d8:52:a7:6c:34:f5:5d:
69:1b:bd:71:07:5f:6b:1f:d4:db:52:6e:8c:d0:5f:
40:6c:d1:7f:e2:44:84:82:ba:03:16:e5:e2:b9:58:
49:bf:94:55:bb:87:f7:ba:f1:11:5c:c8:56:81:d3:
01:60:cb:80:d3:96:4f:a5:28:19:06:29:8a:cf:55:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:61:18:73:DC:0E:AA:22:AD:E5:DE:57:EF:4F:B7:12:2C:77:F9
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDFhGHPcDqoireXeV-9PtxIsd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5f:2f:22:f3:e4:c1:ce:a6:38:c8:a2:3f:0d:5a:78:e7:e8:
0e:17:55:58:4d:b9:80:d3:c7:48:93:5c:37:ba:95:fe:71:63:
68:e3:dd:1e:2e:06:3b:02:47:e7:3b:47:89:dd:e0:86:ee:c2:
dd:41:ad:0a:7b:51:a8:39:c6:55:6a:3b:99:2f:b1:43:c2:51:
8e:b1:c3:12:e6:c7:80:f3:d4:d8:d1:21:0e:db:f3:53:76:62:
5e:e1:32:b5:e4:5a:85:14:a9:de:1e:dd:ff:eb:0f:a3:0a:29:
8d:85:30:fb:c6:ad:50:02:10:8d:29:58:53:34:08:bc:ba:38:
38:40:93:f6:c6:08:76:d8:70:2f:34:26:81:2b:fc:b0:de:f2:
ae:ad:96:b3:7c:55:7b:06:a7:62:b6:55:9d:f7:a7:9d:f7:e7:
af:5c:8e:5a:1f:b9:cf:b7:3c:b4:13:f4:2f:8c:71:fd:ac:03:
d4:cd:e3:84:cc:50:38:b4:9c:e6:20:b1:77:35:10:0b:f3:60:
ad:27:5a:2f:18:81:82:c4:9e:9f:c0:44:45:22:da:fb:1b:21:
1d:96:0d:ec:9b:27:a3:47:d8:e3:9b:e7:4b:5e:f6:d4:da:b1:
1a:db:8d:e3:3c:85:17:bf:cc:1a:32:8b:49:15:a0:da:bb:19:
a8:49:cd:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAY7bm+JI6q2llhpn7229PEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwODE5MDczMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDMxNjExODczZGMwZWFhMjJhZGU1ZGU1N2VmNGZiNzEyMmM3N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRwstcL6Ymh1sCgn87mYtAfOv6ed
6l1vztqu89g85TKFFZhyTNQSA2pPwg8PWBkknBE2Ekk6yz4epuNQQqcrUjOVdOJk
ndFihW0tiWI8iX4EgDd7Jfq/ooQTYtYo/Xw1eK119yV3+YQ4rl4v/4Cp/UQT6798
nVJXFBMlg8o0H03pH+0i2qQWppVkjl6HCHIgZJqt/j9J/rrJSvdLJaX2UQRIy2DV
O5k7eCis0vqlLfgx30kBF1+BAOVl0dhSp2w09V1pG71xB19rH9TbUm6M0F9AbNF/
4kSEgroDFuXiuVhJv5RVu4f3uvERXMhWgdMBYMuA05ZPpSgZBimKz1UZ6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAxYRhz3A6qIq3l3lfvT7cSLHf5MB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvY0RGaEdIUGNEcW9pcmVYZVYtOVB0eElzZF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu96MA0G
CSqGSIb3DQEBCwUAA4IBAQBTXy8i8+TBzqY4yKI/DVp45+gOF1VYTbmA08dIk1w3
upX+cWNo490eLgY7AkfnO0eJ3eCG7sLdQa0Ke1GoOcZVajuZL7FDwlGOscMS5seA
89TY0SEO2/NTdmJe4TK15FqFFKneHt3/6w+jCimNhTD7xq1QAhCNKVhTNAi8ujg4
QJP2xgh22HAvNCaBK/yw3vKurZazfFV7BqditlWd96ed9+evXI5aH7nPtzy0E/Qv
jHH9rAPUzeOEzFA4tJzmILF3NRAL82CtJ1ovGIGCxJ6fwERFItr7GyEdlg3smyej
R9jjm+dLXvbU2rEa243jPIUXv8waMotJFaDauxmoSc1w
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:12 2026 by rpki-client