Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa
File: nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa (raw, json)
Hash identifier: u2+7yozTQeMOtMONRXeBN03Oi3gmBQuRthSsXSMKmik=
Subject key identifier: 9D:6B:77:BE:B4:5B:55:CE:6A:A9:0F:11:60:AF:47:92:A0:DF:F7:91
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F02D3B40728B2583A13B9392B6F8715CF
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa
Signing time: Fri 26 Jun 2026 07:27:36 +0000
ROA not before: Fri 26 Jun 2026 07:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 178.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:d3:b4:07:28:b2:58:3a:13:b9:39:2b:6f:87:15:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 26 07:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d6b77beb45b55ce6aa90f1160af4792a0dff791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:19:8d:da:e5:eb:54:f4:16:37:04:e2:d6:
90:64:18:23:f1:96:c1:94:d5:65:bc:41:c5:ab:fb:
74:9e:e9:f3:44:6a:9b:42:0f:d2:45:4a:11:d3:5c:
ae:65:da:6b:70:d4:d9:63:42:ad:2d:8f:2c:60:43:
c8:df:31:4c:05:78:78:25:d1:01:3d:b8:e9:e5:49:
53:64:c3:3e:e8:e6:8f:9a:21:bd:09:d9:4c:61:20:
1f:ec:a8:92:6e:c3:48:91:2b:dd:85:dc:08:91:ee:
f6:d6:48:99:89:85:5b:03:f6:8b:ed:07:10:19:49:
16:71:7f:b5:88:40:ba:59:b4:58:05:32:b7:99:8a:
5d:db:fe:a1:98:69:0d:5e:06:15:0b:91:db:94:47:
0a:d0:87:07:03:26:b1:04:f1:83:6b:5e:91:b1:f0:
cb:af:fb:f0:79:0a:89:a1:60:c4:e9:42:24:a3:d7:
e2:cd:da:4a:e9:6a:e2:6c:f5:bd:9f:36:83:22:c5:
f7:12:07:d4:cc:de:55:7a:9d:b6:46:09:a4:ea:48:
56:41:25:88:81:dd:90:de:c9:c4:9b:3e:38:f8:51:
14:b1:2a:17:55:0e:ef:a9:73:f7:b2:1f:73:43:01:
9d:78:fb:3e:4f:1e:25:84:ed:c2:04:8b:cf:c9:d1:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:77:BE:B4:5B:55:CE:6A:A9:0F:11:60:AF:47:92:A0:DF:F7:91
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:0f:6f:85:90:ca:7d:b3:29:00:c9:16:25:2f:d0:07:cc:63:
06:21:ce:0e:63:43:b2:ff:db:81:36:fc:09:ab:e7:1d:e1:25:
17:e7:4d:da:61:3f:7c:bb:c7:63:f5:c1:32:1b:3f:76:9a:e4:
87:5f:fc:4b:cb:19:aa:3b:50:91:1d:98:04:a9:0f:92:28:62:
66:f4:94:cb:58:12:07:29:85:fe:2c:f8:a4:05:ea:bd:2f:eb:
c7:81:6d:40:82:89:24:ce:fa:c5:6b:4a:c6:e6:81:aa:06:90:
3a:0e:4b:c4:16:8c:d6:3a:f3:b2:fc:38:bb:fd:79:08:e0:93:
20:d4:f7:b4:24:42:bb:bc:80:e4:79:f4:39:3f:2f:1b:6a:7c:
e8:ba:fa:f7:3b:70:92:4d:1b:96:ef:8f:c5:5b:3a:cb:cb:4f:
5d:2b:2e:03:40:18:fb:13:0a:76:cd:79:9f:36:1d:bd:1a:a0:
20:e0:1a:8c:67:f2:7a:78:9d:6c:d0:89:35:14:a5:11:2d:c4:
0f:3b:11:08:eb:ef:cc:02:86:94:01:02:33:29:a4:35:87:8b:
4b:af:47:e4:d9:3d:d5:57:a5:ae:64:ea:56:27:45:cf:a9:89:
a1:88:55:33:b1:6c:36:0b:a9:39:83:e7:59:71:f8:b2:a2:cb:
e6:d5:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:20:30 2026 by rpki-client