Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yV6h6g8VjrUh68Bki8auNPepq9c.roa
File: yV6h6g8VjrUh68Bki8auNPepq9c.roa (raw, json)
Hash identifier: U10jVLAGUKzKkILiaP8XQG1ps0Dkg6drpeXmhxDaJd0=
Subject key identifier: C9:5E:A1:EA:0F:15:8E:B5:21:EB:C0:64:8B:C6:AE:34:F7:A9:AB:D7
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F3BFADD324850BCD3FD9F5B227E35A33B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yV6h6g8VjrUh68Bki8auNPepq9c.roa
Signing time: Tue 07 Jul 2026 09:48:44 +0000
ROA not before: Tue 07 Jul 2026 09:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:fa:dd:32:48:50:bc:d3:fd:9f:5b:22:7e:35:a3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 7 09:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c95ea1ea0f158eb521ebc0648bc6ae34f7a9abd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:25:59:95:aa:5a:79:39:94:55:a5:38:92:
13:0a:d4:b3:7c:d9:c2:14:1a:5d:8a:ad:cc:96:ea:
2f:be:71:3d:d4:65:6e:c3:b5:02:21:91:62:60:7f:
c0:0a:08:b9:6c:25:e6:df:ce:85:05:98:26:bb:68:
87:d1:e5:ab:2a:7a:40:ec:76:d1:55:66:ad:82:25:
af:48:29:95:f4:cf:f3:d5:57:bc:ea:7e:1b:0d:fc:
e7:57:e8:52:76:ff:65:1e:a0:74:7b:c8:53:20:6d:
29:55:6a:3a:54:9e:04:ce:b5:66:4d:1d:f0:1f:4d:
e6:05:43:4a:e2:8d:45:b5:ef:7c:3b:ca:57:77:49:
0d:e2:97:11:f5:3e:f5:2f:80:41:13:d7:36:a4:10:
d5:4c:26:a9:f2:4e:c1:8f:cd:8f:0b:99:ab:b8:d5:
28:44:6e:d2:a3:77:04:27:21:0f:9f:7e:4f:bb:25:
de:5b:ad:b4:71:15:89:86:49:86:80:da:8e:eb:ec:
e2:1b:80:1a:ef:d5:8b:ab:98:d6:3d:ce:b0:20:79:
88:4c:20:53:a6:f5:2b:2a:fd:7f:90:7d:7d:6a:fe:
b2:c3:f4:76:3b:6f:be:ea:36:52:cd:3e:d5:60:f3:
6e:07:cb:5d:d6:d5:94:d1:43:74:2c:a9:98:62:38:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:A1:EA:0F:15:8E:B5:21:EB:C0:64:8B:C6:AE:34:F7:A9:AB:D7
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yV6h6g8VjrUh68Bki8auNPepq9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d7:a6:de:f9:45:76:11:f4:76:f2:a6:0d:25:ee:a8:1a:1a:
56:b9:ae:39:9d:3d:d7:0c:c1:a5:4f:ca:d7:e0:96:6a:41:02:
1d:11:35:11:2d:9d:1f:0a:28:f1:d8:de:82:69:9d:df:90:2b:
77:bb:0b:6a:a1:47:79:28:ee:87:4e:f9:82:47:a8:b5:6e:58:
1c:35:e6:6c:7d:1c:94:86:b0:2e:40:f3:3a:0d:b8:c0:52:ae:
05:89:2d:53:de:1f:fc:60:4e:39:cd:cb:20:4c:2f:bc:57:03:
fd:a4:55:8a:a5:77:ef:d4:0d:e7:16:2c:dd:73:19:59:a3:65:
e8:19:12:05:f1:c0:ca:a4:4c:6a:27:03:31:bd:7e:00:1c:88:
fd:00:22:33:9a:6e:cc:eb:8e:26:5f:4f:3d:30:ec:20:d0:de:
05:58:ab:1f:90:a1:4f:70:72:1f:4d:27:9b:83:31:d4:6d:11:
bd:af:18:2e:2d:48:ba:4e:c4:0d:4b:94:66:73:77:ec:8f:5c:
09:c6:a5:80:9c:8b:68:d0:f6:88:af:89:eb:80:ba:b8:4a:c6:
fa:c7:d8:8b:50:b4:fb:ed:e6:36:15:f9:42:9e:6e:a3:79:22:
a7:41:a2:bd:a7:02:b6:20:d4:fb:84:ad:75:6c:10:4d:30:ad:
ab:63:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:46 2026 by rpki-client