Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xQJBqcrJYpUypxq7U1UbbfjYYLA.roa
File: xQJBqcrJYpUypxq7U1UbbfjYYLA.roa (raw, json)
Hash identifier: twvp4Wvczcl7F7w/hp3rjbvvn5aZCSoSa1WAibv+I9I=
Subject key identifier: C5:02:41:A9:CA:C9:62:95:32:A7:1A:BB:53:55:1B:6D:F8:D8:60:B0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A13E4D33334E6B2773862A592920A91702
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xQJBqcrJYpUypxq7U1UbbfjYYLA.roa
Signing time: Thu 15 Oct 2026 06:43:29 +0000
ROA not before: Thu 15 Oct 2026 06:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 178.239.116.0/24 maxlen: 24
178.239.127.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:4d:33:33:4e:6b:27:73:86:2a:59:29:20:a9:17:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 15 06:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c50241a9cac9629532a71abb53551b6df8d860b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:73:b7:20:dc:19:5f:f4:4a:78:12:27:68:
88:99:f3:1e:4d:1a:a7:5a:ee:65:71:69:60:33:1a:
95:b4:aa:5b:39:fb:29:63:9b:10:1e:aa:d1:21:da:
f9:22:86:5f:dd:10:37:55:4b:fd:1c:8d:22:0b:aa:
da:26:2b:3b:bb:b5:38:59:b8:6e:4d:5f:ca:71:29:
79:22:35:23:6f:ac:81:3a:d7:9e:cb:f4:db:e3:db:
18:82:e8:23:71:c4:b9:5e:e3:33:da:1b:ad:82:77:
53:b3:c2:f4:7e:a4:7b:d0:67:33:d7:b1:a2:ff:32:
2e:80:fe:3f:a4:11:fb:70:93:54:c4:13:20:1c:15:
87:35:9d:d5:6c:a1:3e:ee:5d:b7:ba:91:ee:e2:4b:
3a:43:14:e9:3d:3a:3b:aa:68:4a:36:f6:b4:88:48:
a7:7f:65:16:e7:d0:d8:e7:90:a3:46:79:29:ee:70:
96:25:f8:7e:12:89:bb:d9:63:81:41:82:37:a6:f5:
6d:66:c3:0c:b3:97:fc:33:69:61:23:24:47:b2:78:
fb:f4:fa:29:95:fc:20:98:49:87:40:23:f4:cc:5d:
25:f7:c5:18:3c:88:5f:52:59:9f:a0:09:9c:a3:f4:
fa:f0:91:1c:eb:75:e2:a3:2a:4d:bd:73:34:ce:af:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:41:A9:CA:C9:62:95:32:A7:1A:BB:53:55:1B:6D:F8:D8:60:B0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/xQJBqcrJYpUypxq7U1UbbfjYYLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.116.0/24
178.239.127.0/24
185.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:47:c8:2f:a3:51:2d:18:d4:02:42:df:11:92:ea:31:35:
ba:bc:cd:6e:b3:68:ce:bb:7b:f9:8d:9e:a1:ce:04:53:67:9e:
8f:d6:88:98:96:4b:8c:d6:2c:df:0b:c5:10:d3:b8:0e:a4:06:
6d:57:e4:fa:f4:f4:68:3e:64:b8:d9:ca:23:37:46:1d:0e:e6:
e7:b5:38:27:60:40:c9:24:73:0e:14:39:a2:12:e2:39:94:3e:
d3:cf:89:7d:bd:13:b3:21:a3:bc:38:f5:f0:4e:f4:01:16:dd:
77:f9:ef:e9:90:22:f4:3f:d9:77:01:eb:8c:59:58:52:3d:c0:
da:18:d7:9a:81:e4:be:77:35:9b:a9:c3:63:1a:d0:87:75:39:
73:c5:3c:31:82:23:64:b7:09:5e:05:65:a5:f1:f8:aa:bb:9c:
d9:48:75:79:06:a8:73:47:44:32:2f:77:2e:00:52:1b:b1:91:
ec:18:16:05:5e:38:7a:af:56:6c:4c:a7:da:7d:a3:fb:0f:8e:
d1:32:e5:b0:78:cc:bb:a7:7e:d9:27:bc:8e:d4:19:c8:60:59:
2e:56:db:c5:1f:80:13:ca:82:02:3c:fa:73:2c:b6:cb:8c:ad:
c6:99:a9:94:f6:4a:1c:ca:6f:df:65:20:77:69:ad:b7:76:ea:
18:d8:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:54 2026 by rpki-client