Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qY6ePJzknG48m3NnI41O99izBvw.roa
File: qY6ePJzknG48m3NnI41O99izBvw.roa (raw, json)
Hash identifier: BAwE8878XGl5akLabObqQeN53cC0JkNhYtz9Ax3AsmM=
Subject key identifier: A9:8E:9E:3C:9C:E4:9C:6E:3C:9B:73:67:23:8D:4E:F7:D8:B3:06:FC
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A049485612A32F0DC7E086034F125DC392
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qY6ePJzknG48m3NnI41O99izBvw.roa
Signing time: Fri 28 Aug 2026 16:51:12 +0000
ROA not before: Fri 28 Aug 2026 16:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 178.239.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:48:56:12:a3:2f:0d:c7:e0:86:03:4f:12:5d:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 28 16:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98e9e3c9ce49c6e3c9b7367238d4ef7d8b306fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:87:7b:31:bd:8f:6f:05:05:a3:1b:02:ef:
49:a4:2d:74:81:0a:c7:36:3f:1a:c1:05:0c:74:37:
9e:22:bb:75:c2:23:c7:20:3d:44:52:70:9b:eb:b4:
92:6a:18:e5:6b:16:27:7c:c8:07:14:fb:91:e1:fc:
3b:76:6d:0a:1d:30:53:5e:6d:e1:3d:61:cc:9f:d5:
f2:59:ee:ed:30:78:4b:bb:74:5e:d8:a8:65:0c:4b:
2f:8e:52:ba:e5:d3:0d:18:f6:e2:18:61:cb:08:89:
0c:27:4c:0b:91:b1:0e:ce:55:18:29:10:b7:de:ce:
6f:28:9b:ac:c0:2f:58:3c:b2:8e:cb:be:65:fa:8a:
30:0c:5e:5f:fd:af:24:46:fe:c3:30:a8:14:4c:79:
d0:9f:d2:23:11:ae:18:f2:fa:0e:9d:f0:6b:ee:f2:
63:b0:54:0b:d1:77:d3:29:12:3b:d2:6d:70:e1:12:
29:ff:11:bd:fa:3a:04:13:9a:d1:93:4b:8e:df:b6:
24:40:d2:04:2b:20:be:8e:ef:81:1f:43:50:2a:a7:
e1:1b:3e:73:e8:9c:cf:66:b5:7d:33:67:87:a1:af:
63:44:eb:64:d5:2e:e2:c5:11:20:5e:4f:96:0a:65:
7f:d7:b1:c1:89:c3:77:61:35:35:05:4a:29:7e:c3:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:9E:3C:9C:E4:9C:6E:3C:9B:73:67:23:8D:4E:F7:D8:B3:06:FC
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qY6ePJzknG48m3NnI41O99izBvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.123.0/24
Signature Algorithm: sha256WithRSAEncryption
53:de:53:42:e7:a8:67:ee:f4:8b:94:a8:cd:0e:97:19:2b:5a:
12:b9:4c:10:82:10:61:36:19:eb:eb:83:88:3c:f6:9f:15:ad:
b3:b7:17:01:25:51:7b:0b:3a:43:f6:fb:0d:e5:86:db:c0:31:
c7:39:af:14:b2:ad:7c:1e:8c:34:a9:a7:96:fe:4f:db:e3:fc:
ff:99:ed:7d:53:e1:d9:0e:4c:39:46:bb:41:63:81:81:ab:f1:
a6:48:bb:98:b5:37:6e:36:cf:03:f9:ca:53:cf:8d:af:31:e1:
0a:fe:de:ed:30:81:14:fa:f5:26:d5:7b:6c:10:9a:bf:04:13:
b7:5a:88:cc:b4:fb:71:25:ca:14:b1:18:74:3f:4e:d0:3f:a2:
6d:05:f4:cc:44:90:1b:cd:41:a9:bd:c3:b9:49:cd:9a:a3:1b:
2f:45:2f:fc:f9:c0:6b:da:e9:41:8b:f1:26:a3:b4:70:72:7e:
4a:04:8f:86:94:47:3d:37:df:20:5b:97:71:3b:0e:92:f2:4e:
e6:c3:47:bd:ca:e5:84:ae:c1:72:5f:43:0f:8c:b2:10:18:83:
a5:63:32:aa:1e:96:9e:ab:82:fa:de:89:a8:5f:d2:b7:68:43:
64:bf:d4:ef:f5:3a:86:06:b6:ec:9e:93:c2:66:41:3c:5b:50:
04:ed:2b:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBJSFYSoy8Nx+CGA08SXcOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwODI4MTY1MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThlOWUzYzljZTQ5YzZlM2M5YjczNjcyMzhkNGVmN2Q4YjMwNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iSHezG9j28FBaMbAu9JpC10gQrH
Nj8awQUMdDeeIrt1wiPHID1EUnCb67SSahjlaxYnfMgHFPuR4fw7dm0KHTBTXm3h
PWHMn9XyWe7tMHhLu3Re2KhlDEsvjlK65dMNGPbiGGHLCIkMJ0wLkbEOzlUYKRC3
3s5vKJuswC9YPLKOy75l+oowDF5f/a8kRv7DMKgUTHnQn9IjEa4Y8voOnfBr7vJj
sFQL0XfTKRI70m1w4RIp/xG9+joEE5rRk0uO37YkQNIEKyC+ju+BH0NQKqfhGz5z
6JzPZrV9M2eHoa9jROtk1S7ixREgXk+WCmV/17HBicN3YTU1BUopfsN3SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmOnjyc5JxuPJtzZyONTvfYswb8MB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvcVk2ZVBKemtuRzQ4bTNObkk0MU85OWl6QnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu97MA0G
CSqGSIb3DQEBCwUAA4IBAQBT3lNC56hn7vSLlKjNDpcZK1oSuUwQghBhNhnr64OI
PPafFa2ztxcBJVF7CzpD9vsN5YbbwDHHOa8Usq18How0qaeW/k/b4/z/me19U+HZ
Dkw5RrtBY4GBq/GmSLuYtTduNs8D+cpTz42vMeEK/t7tMIEU+vUm1XtsEJq/BBO3
WojMtPtxJcoUsRh0P07QP6JtBfTMRJAbzUGpvcO5Sc2aoxsvRS/8+cBr2ulBi/Em
o7Rwcn5KBI+GlEc9N98gW5dxOw6S8k7mw0e9yuWErsFyX0MPjLIQGIOlYzKqHpae
q4L63omoX9K3aENkv9Tv9TqGBrbsnpPCZkE8W1AE7StJ
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:40 2026 by rpki-client