Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yyZ4BjhyuKGwPCQ3341NkBnihfg.roa
File: yyZ4BjhyuKGwPCQ3341NkBnihfg.roa (raw, json)
Hash identifier: nPIB0Offdnq32YRjDSkJfRitOjlTYbdjLWvfwWGiQ7Q=
Subject key identifier: CB:26:78:06:38:72:B8:A1:B0:3C:24:37:DF:8D:4D:90:19:E2:85:F8
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FEFEAD121EC19E02A3D57444DECB59293
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yyZ4BjhyuKGwPCQ3341NkBnihfg.roa
Signing time: Tue 11 Aug 2026 08:22:51 +0000
ROA not before: Tue 11 Aug 2026 08:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:ea:d1:21:ec:19:e0:2a:3d:57:44:4d:ec:b5:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 11 08:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb2678063872b8a1b03c2437df8d4d9019e285f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:8b:a8:12:55:fe:97:d1:55:98:96:f0:bf:
54:2b:14:db:61:40:a7:3f:2c:aa:0b:51:41:0f:43:
34:f8:fc:f6:f1:89:6c:77:be:31:1c:ab:87:fc:9c:
9d:d6:0b:06:93:8a:39:b4:b9:61:32:53:27:d4:44:
3e:1d:39:d3:96:14:1d:04:7f:5f:10:4c:61:8a:11:
46:21:eb:9f:71:24:de:75:61:c8:04:c8:fb:96:62:
d0:a1:6d:ca:74:e1:22:a4:1f:d2:d6:99:c3:63:de:
37:cc:1a:72:7d:c6:f1:79:ad:e5:c5:b4:0f:81:a9:
01:ed:0c:a3:0d:b3:96:47:a4:ab:55:bb:9d:53:f9:
d5:d2:c5:b2:52:9f:0a:22:65:c7:26:88:d5:b4:d1:
30:0b:e2:4e:8f:18:a2:fd:a3:34:12:43:b6:1d:b8:
66:61:36:d0:6e:6c:97:41:e0:59:ff:8c:b0:f9:e2:
69:61:d4:c0:67:5f:68:d6:18:83:e3:8d:d8:19:9b:
12:84:d0:23:28:91:79:fe:4e:35:59:11:0f:2f:b1:
4f:f5:b0:66:53:d7:a7:7d:2e:85:e8:85:8a:be:53:
60:49:cb:52:28:f5:8e:05:73:4c:2f:7e:f1:a3:18:
48:62:d1:9e:2f:95:54:a8:d2:43:5c:9e:8f:50:39:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:26:78:06:38:72:B8:A1:B0:3C:24:37:DF:8D:4D:90:19:E2:85:F8
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/yyZ4BjhyuKGwPCQ3341NkBnihfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
80:78:34:6f:d0:74:0e:9a:10:c3:b1:e6:73:3d:6a:9b:35:05:
8d:b5:cd:8c:66:74:93:95:fa:cd:d9:04:35:c5:33:2e:53:c7:
ee:f9:81:b7:29:c0:f8:e7:89:44:92:3c:5c:bf:aa:a9:6b:5e:
b7:26:80:3f:a2:be:60:80:f4:5d:96:79:4a:a0:14:52:77:6c:
6c:88:52:36:2a:a1:68:57:8d:4e:29:4d:21:1d:eb:a0:76:00:
ba:dd:08:66:a4:9e:6f:fd:2e:62:ce:1a:58:c7:0b:b4:56:6c:
24:be:f6:a1:1d:d7:56:45:8c:c4:90:43:7b:2a:e0:93:de:b3:
46:c1:7f:c6:a5:e8:c6:5e:53:70:4c:d9:b5:42:54:e2:18:19:
56:a2:67:02:35:29:6e:51:99:c4:86:90:60:11:2f:5e:35:0a:
11:1f:c5:4f:fc:ad:a1:ad:4b:a0:56:9c:f2:cd:aa:d4:b1:31:
5d:68:f6:3d:0a:75:66:20:83:da:e6:cb:27:a9:d9:4d:da:f6:
18:6d:d3:08:20:ad:f4:07:a4:a4:f8:a3:8a:d0:75:7e:db:ba:
b6:ed:0b:38:9b:29:e2:76:44:f1:29:20:c0:5d:79:b6:11:2d:
6b:ed:88:ea:ce:95:3b:e0:4e:2f:32:16:c5:ff:07:d5:ac:94:
1f:f5:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:53 2026 by rpki-client