Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fYHBkTuWSTexQ8ISFSo2LYZxa-A.roa
File: fYHBkTuWSTexQ8ISFSo2LYZxa-A.roa (raw, json)
Hash identifier: yLjYtTEZVY2nRmy54waV6hOpdJWraZ+6NODmPwHGQQE=
Subject key identifier: 7D:81:C1:91:3B:96:49:37:B1:43:C2:12:15:2A:36:2D:86:71:6B:E0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019D9C803547816A2A602BB9EC9009E360EB
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fYHBkTuWSTexQ8ISFSo2LYZxa-A.roa
Signing time: Fri 17 Apr 2026 17:32:21 +0000
ROA not before: Fri 17 Apr 2026 17:32:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 85.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:80:35:47:81:6a:2a:60:2b:b9:ec:90:09:e3:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 17 17:32:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d81c1913b964937b143c212152a362d86716be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:38:2b:3d:f7:72:97:88:89:5a:63:e5:06:
54:f1:66:26:60:f6:b3:39:85:c2:4f:14:1a:b2:1d:
78:f5:e7:04:ca:b6:36:00:dd:de:d0:32:96:ed:99:
4b:3d:21:cb:13:0f:df:91:1b:21:f6:83:aa:7f:8c:
55:19:aa:2c:cb:4d:7d:bc:dd:5d:02:cf:1d:30:f7:
19:64:1d:14:30:68:2f:72:88:00:32:2e:77:bf:4c:
c0:dc:12:9c:89:53:7b:34:9b:a6:65:9e:12:d8:55:
d2:46:20:23:00:07:62:3d:7a:9d:67:02:66:41:80:
f1:b3:47:22:6b:4c:27:48:71:1a:19:1f:a5:0f:d1:
6d:96:d9:7d:fc:e0:e8:01:bc:d1:64:94:65:75:21:
4b:71:a1:e9:5f:ed:62:94:8a:fb:84:98:28:a4:b1:
86:fe:6c:47:d4:8a:d9:3a:6a:f8:3c:89:88:59:87:
49:20:3e:29:56:a6:02:93:16:4b:20:87:ac:e6:52:
0b:68:53:0f:12:c2:71:e7:b7:90:ce:15:d4:e5:a4:
5b:45:ac:ca:e5:4f:e0:a8:0e:64:55:6c:82:64:e2:
69:66:e4:5f:57:bf:e5:4a:45:c3:3b:c3:c9:74:0d:
91:e3:1e:c1:4c:79:ad:2c:5b:c8:a6:31:4e:5e:57:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:81:C1:91:3B:96:49:37:B1:43:C2:12:15:2A:36:2D:86:71:6B:E0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fYHBkTuWSTexQ8ISFSo2LYZxa-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:04:8a:83:25:14:f2:cf:fb:4c:b5:b8:ab:90:8d:52:06:48:
1e:07:db:75:5a:9f:5b:fb:00:6e:dd:b2:d6:3c:ab:53:a8:8f:
d1:9b:c4:b3:34:b3:fd:e1:e2:62:11:ba:58:21:c4:95:a9:14:
56:a4:a5:2f:df:74:36:fa:86:82:f0:a6:32:71:f6:24:a9:ba:
3e:86:42:44:ef:26:61:63:48:b7:e3:0a:66:ce:a8:fa:ef:d6:
90:7f:2b:21:57:c3:1a:c9:1c:ed:0d:8a:c5:6a:ae:d7:37:8b:
f5:9c:74:fa:a7:39:fa:56:5d:bf:a9:0b:61:70:cc:7e:d7:64:
09:06:07:aa:0a:19:f5:fd:21:4a:68:22:d0:5c:54:8e:e1:37:
f7:cb:a1:89:87:eb:e1:86:20:83:32:71:8e:49:d3:dc:d2:07:
93:4c:0f:df:1f:32:33:77:1b:13:a5:f4:65:12:4c:ba:2a:95:
ef:93:1c:fe:12:d1:fb:d2:68:17:0a:4e:9c:90:ab:c9:a3:29:
33:a3:12:54:cc:71:15:fd:8e:fc:dd:59:1f:0d:b8:02:53:b1:
b6:0e:c7:70:fd:62:a3:50:c7:07:fc:b0:84:6b:98:31:c3:db:
13:bf:03:69:01:28:3c:e1:3e:08:98:21:44:d0:ab:90:de:f0:
7f:d5:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:36:11 2026 by rpki-client