Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/skvhhwXCE9XaF4GovY1LTU7fAzk.roa
File: skvhhwXCE9XaF4GovY1LTU7fAzk.roa (raw, json)
Hash identifier: i8mqWts4QwtPmn2/cy0EpJD+o9HkLAtvYS+eI1qS5Rs=
Subject key identifier: B2:4B:E1:87:05:C2:13:D5:DA:17:81:A8:BD:8D:4B:4D:4E:DF:03:39
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FEFEAD19009C2DFCD190CB6BBEF5A9A24
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/skvhhwXCE9XaF4GovY1LTU7fAzk.roa
Signing time: Tue 11 Aug 2026 08:22:51 +0000
ROA not before: Tue 11 Aug 2026 08:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:ea:d1:90:09:c2:df:cd:19:0c:b6:bb:ef:5a:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 11 08:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b24be18705c213d5da1781a8bd8d4b4d4edf0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:de:b5:43:5a:c0:e0:88:b2:ef:5a:9f:a0:
d3:2b:be:0f:e6:3b:05:46:9f:b2:ed:34:d4:97:7f:
9c:bd:46:df:e6:f7:d5:0a:46:5d:0d:46:9d:1f:91:
7f:50:c5:f2:71:f5:6d:39:b9:7c:a3:3e:9e:c2:58:
98:c4:44:7d:43:fa:f5:e7:2a:9b:58:ff:04:9c:61:
32:64:5f:51:ab:ce:d8:a3:cf:da:78:c0:38:66:7e:
b8:f7:e6:45:05:8d:ab:3f:d4:01:d6:dd:d2:a0:08:
32:80:53:b4:d5:58:39:06:a1:f7:d6:08:de:19:70:
c2:79:14:3f:ce:ca:de:eb:af:47:d5:1c:c2:86:71:
b8:0c:e3:b5:6f:41:47:be:bc:96:55:c8:e0:d0:70:
3c:8e:7c:11:32:84:f3:57:63:2e:e6:a7:a2:4e:1f:
fa:bc:f6:72:21:e4:9e:cb:b2:42:e3:17:22:31:c6:
c4:aa:09:eb:da:5a:bd:5a:70:3c:f5:c5:8c:34:32:
62:05:16:ff:44:63:b4:8c:6b:f5:de:00:a7:51:d3:
23:df:fc:91:d4:de:20:50:7a:81:92:28:87:8d:b7:
a4:74:bf:7c:99:72:22:da:2f:71:09:c1:40:cf:52:
31:e5:3d:60:e8:c6:5c:c4:3c:f6:c2:a6:a9:b6:e0:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:E1:87:05:C2:13:D5:DA:17:81:A8:BD:8D:4B:4D:4E:DF:03:39
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/skvhhwXCE9XaF4GovY1LTU7fAzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2a:e2:a5:41:ee:d9:18:9f:0b:57:7a:03:28:e0:21:f1:14:
2d:44:ea:5c:6f:90:51:7a:0e:b6:b3:c8:3b:fa:f2:2b:29:50:
a8:49:ce:84:e0:6d:1b:54:20:c8:d9:ba:d3:f2:e1:68:33:83:
d1:e4:00:ee:20:66:ca:2b:1d:75:8e:65:2c:d8:a8:a4:4a:5e:
8c:c9:6f:8f:5a:32:65:22:af:3d:0c:8a:ee:58:9d:2b:2f:9a:
67:90:ab:1e:ad:41:b8:72:7d:27:fa:41:6f:f0:a9:ac:07:eb:
33:bf:6d:7d:c8:1d:cb:44:82:1e:3c:09:db:0b:8c:6e:dd:13:
eb:1f:cf:14:29:15:e1:2c:e3:a1:6d:75:49:57:a8:ae:d5:d6:
d3:dc:b9:d3:7f:c8:51:d0:6c:6e:ba:22:7c:6f:24:a5:da:b6:
3a:9c:1c:5e:8a:56:ba:d1:d6:7f:55:89:03:eb:73:37:fc:d0:
17:40:d1:27:a6:15:6f:35:c9:af:75:dc:a4:88:98:4b:7b:4a:
6a:22:48:97:b1:91:01:65:fe:cd:ec:6c:08:60:a9:62:03:63:
d5:59:2e:63:5f:ff:61:49:16:8b:e0:a2:bf:58:58:90:38:32:
5f:a8:ed:6d:46:85:af:b2:95:b7:ef:f1:e0:7b:fc:5c:12:94:
8c:c1:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:18 2026 by rpki-client