Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/dRyOqug6y0z7G4qGuuZTgnJkwHg.roa
File: dRyOqug6y0z7G4qGuuZTgnJkwHg.roa (raw, json)
Hash identifier: bBDCGTJzlb08y75oiDc62atxQFPBBDjoxkj6VMlipVE=
Subject key identifier: 75:1C:8E:AA:E8:3A:CB:4C:FB:1B:8A:86:BA:E6:53:82:72:64:C0:78
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F74679B0FB986867C3A16FBF1F3A04CBC
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/dRyOqug6y0z7G4qGuuZTgnJkwHg.roa
Signing time: Sat 18 Jul 2026 08:46:14 +0000
ROA not before: Sat 18 Jul 2026 08:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:67:9b:0f:b9:86:86:7c:3a:16:fb:f1:f3:a0:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 18 08:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=751c8eaae83acb4cfb1b8a86bae653827264c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:53:40:2a:a3:44:7d:36:9b:df:6d:e6:43:
05:df:53:42:b9:38:ea:70:25:4c:c8:53:25:24:c3:
4d:f5:b4:6d:9c:c8:05:10:10:de:a4:59:80:b1:b7:
d4:3b:d3:38:1a:4e:bf:90:a1:52:e9:7c:94:07:34:
10:d5:ca:06:03:c6:09:65:ab:fd:58:fd:0c:6e:f3:
ea:76:e4:4c:d4:db:43:83:ff:68:75:38:e8:c2:8b:
7c:62:6c:ed:c5:79:52:f4:96:ec:68:25:87:9a:b0:
52:58:b5:50:ba:81:d7:b0:55:68:76:ac:d1:72:b0:
1f:8b:c3:63:7d:1e:b4:5b:50:ce:f2:c3:6a:2b:0d:
8a:b7:97:d1:4d:00:d9:34:0b:0f:67:c1:f0:3a:cb:
57:cd:78:ef:4a:75:4d:87:ea:a6:6f:b7:7f:88:b6:
66:35:63:62:8b:12:9e:df:56:3e:5b:44:4d:34:e7:
d1:d3:42:eb:c8:17:f8:7b:f9:51:24:d1:7e:6e:69:
90:dd:bb:13:ca:6f:90:8d:fd:60:ea:a6:13:7d:ef:
35:9f:9b:77:5c:77:a0:51:9f:de:69:80:2b:53:18:
1b:29:96:c6:ef:45:d6:47:d5:f3:dd:e8:c9:7b:a5:
a2:27:a2:03:0a:2f:a7:82:99:44:90:e2:08:3c:8d:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1C:8E:AA:E8:3A:CB:4C:FB:1B:8A:86:BA:E6:53:82:72:64:C0:78
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/dRyOqug6y0z7G4qGuuZTgnJkwHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9d:85:41:f9:e4:73:46:d3:61:04:27:2e:13:0b:d1:e4:7f:
2c:84:0c:72:d6:bf:66:1b:0e:50:5d:5f:01:13:e0:91:fa:b5:
37:9f:f4:e6:56:5d:de:15:d4:20:2b:40:28:26:85:a8:3f:bd:
94:d7:af:a1:59:ed:4e:c3:d7:40:3a:fb:b4:c8:6d:ce:fb:0c:
58:bc:15:2f:f5:9f:8f:15:2d:11:97:7a:ba:30:0d:c2:0a:42:
7a:fe:9b:b7:df:7d:3a:7b:9f:c9:66:64:f1:a4:6f:48:74:e4:
1e:15:8f:21:2f:c8:f2:9e:58:cd:ed:ba:72:f7:23:18:c7:ae:
c4:6d:34:6d:64:1d:69:af:bf:35:bd:49:8c:2f:65:3c:85:3f:
cb:e8:d1:fd:85:71:e8:7f:41:af:a4:f7:94:12:63:33:37:69:
65:71:02:39:69:10:f0:2c:16:57:c9:63:70:27:de:2f:c9:43:
74:b4:6d:f4:6b:47:c8:10:80:45:eb:de:59:11:31:08:38:2d:
16:36:ee:96:14:ae:18:9e:63:c4:4c:71:25:c6:83:b4:5e:9a:
c9:97:16:e5:c9:75:c4:53:97:fe:f5:e5:2c:ef:be:f6:dc:2c:
d4:e1:41:15:c7:d2:09:25:89:6d:ae:68:b2:c8:31:89:94:0b:
42:2a:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:49 2026 by rpki-client