Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qUW-rvtusWiU9m40yufHRHqReOU.roa
File: qUW-rvtusWiU9m40yufHRHqReOU.roa (raw, json)
Hash identifier: l+hgs978ljFQtWA/6WpMCTbG4iRvPe6O/e/IYHJ8VCI=
Subject key identifier: A9:45:BE:AE:FB:6E:B1:68:94:F6:6E:34:CA:E7:C7:44:7A:91:78:E5
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F83D0C42703BF85CB1518EA3AB9D063D5
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qUW-rvtusWiU9m40yufHRHqReOU.roa
Signing time: Tue 21 Jul 2026 08:35:24 +0000
ROA not before: Tue 21 Jul 2026 08:35:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 85.239.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:d0:c4:27:03:bf:85:cb:15:18:ea:3a:b9:d0:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 21 08:35:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a945beaefb6eb16894f66e34cae7c7447a9178e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:60:b3:0b:55:6d:b3:cb:31:51:2f:cd:e1:
4d:c5:6a:07:d1:8a:2a:7e:aa:fb:8a:29:e9:9f:3c:
4f:78:53:43:af:73:07:fc:54:97:3f:53:b2:af:04:
95:31:a7:49:06:76:bd:c8:ed:55:26:2c:9b:90:0f:
28:e2:de:16:e2:e1:a2:3f:29:14:5b:fe:c2:14:66:
a9:c5:80:9d:eb:9e:ec:c5:4d:5d:76:e3:1a:47:55:
17:17:cc:20:b5:f0:be:66:4d:d8:a1:cd:9b:47:86:
10:fc:fc:5a:23:f7:e1:4e:61:e6:34:dd:38:93:09:
76:07:23:2b:0d:30:ea:d1:22:d0:72:39:f9:0a:92:
e7:dd:16:34:71:69:80:88:7d:34:15:45:21:97:8d:
d4:eb:83:d0:96:02:a7:28:86:b4:e2:aa:6f:4c:d1:
ad:41:82:11:97:78:9f:45:19:1a:89:cf:3a:86:75:
4f:c1:09:14:dd:f8:e7:b4:a6:9b:4d:6c:be:cc:da:
4d:81:0b:a7:fe:e5:d3:d8:ae:e0:d1:c9:c4:87:0c:
5f:42:5b:2c:91:10:a5:98:55:38:34:9b:53:a4:73:
8a:aa:b4:9e:6a:d5:71:3d:1e:ad:9f:cf:0c:fb:80:
9e:3d:22:bf:4a:0a:63:ab:27:ab:36:e9:64:58:58:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:45:BE:AE:FB:6E:B1:68:94:F6:6E:34:CA:E7:C7:44:7A:91:78:E5
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qUW-rvtusWiU9m40yufHRHqReOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2b:87:86:b5:0f:90:bc:a7:5f:65:d0:2c:a6:ed:ec:de:2a:
7c:0a:fd:83:73:fe:44:2c:42:49:22:38:e6:f6:b7:3f:30:10:
e4:7a:e7:2a:b4:87:08:65:44:cd:2b:87:3b:f1:ce:5b:dd:91:
2a:29:6c:eb:a3:f6:7a:cf:8c:d6:ae:b7:70:bf:40:ec:ba:fd:
07:5c:59:16:9b:10:07:71:6b:65:6e:f5:e9:45:b2:9f:7e:b2:
64:3e:92:90:d1:0d:2d:36:5a:fb:2b:30:bf:c4:4a:e7:c1:ac:
cb:54:0a:bf:27:4c:99:17:b7:a1:35:9a:49:2b:cc:5e:37:e9:
21:ab:6e:ef:81:21:0d:4d:9b:11:33:f9:a4:bc:ae:70:68:97:
fe:f8:69:ae:6f:46:48:f9:5e:58:fb:69:a6:9c:27:96:cc:28:
50:17:cd:33:8b:0f:c4:1f:69:58:a9:94:12:44:81:00:69:32:
2d:04:eb:3a:54:44:aa:8a:fc:2a:b1:a6:40:66:9e:f9:10:81:
25:33:39:4c:6c:98:ed:d2:2f:9d:57:b5:d7:93:07:99:92:5a:
4b:ca:e5:dc:51:f3:45:20:00:90:7f:10:0a:aa:d6:d2:58:9c:
d0:d0:80:d5:dc:10:f4:88:b3:c0:0b:7a:44:be:1c:67:e7:37:
73:a3:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:48 2026 by rpki-client