Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zLeMuu07MdTctTW7KUuXe1fyuCo.roa
File: zLeMuu07MdTctTW7KUuXe1fyuCo.roa (raw, json)
Hash identifier: 0fmbLbzJCCXmZbIYxh8zj5Peh65NTpmFnSh6FWhKUNE=
Subject key identifier: CC:B7:8C:BA:ED:3B:31:D4:DC:B5:35:BB:29:4B:97:7B:57:F2:B8:2A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019DA567E07765BE4AFEF3C013E9605C3533
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zLeMuu07MdTctTW7KUuXe1fyuCo.roa
Signing time: Sun 19 Apr 2026 11:02:21 +0000
ROA not before: Sun 19 Apr 2026 11:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142561
IP address blocks: 178.239.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:e0:77:65:be:4a:fe:f3:c0:13:e9:60:5c:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 19 11:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccb78cbaed3b31d4dcb535bb294b977b57f2b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:6e:77:bc:fb:ad:11:9e:70:c3:5c:99:65:
20:80:9f:b2:67:70:6a:cd:e3:b7:22:84:80:e3:8e:
d7:98:79:ae:ec:88:fa:a3:60:2e:25:67:5f:40:95:
94:86:77:ba:5f:3d:52:62:f8:7d:d0:51:6d:4f:59:
66:31:33:c3:e8:d4:3e:f8:05:96:4f:42:26:c9:07:
c4:de:d8:45:66:97:a0:e3:ef:68:6f:4c:3f:82:a5:
39:55:e4:6e:1e:a2:22:e0:16:89:41:69:6d:23:5e:
90:8d:30:f7:9f:40:f6:19:72:62:bb:72:9f:87:f1:
e2:2f:5f:2a:83:08:2f:ef:a4:af:01:fa:cf:ef:62:
d0:98:a2:d2:29:b3:aa:ac:6c:20:28:a2:07:b2:ae:
98:8c:d4:4c:c3:8e:15:37:0a:88:c3:0f:04:73:5d:
03:b2:4b:46:5b:13:8b:fa:43:57:1c:41:da:76:df:
d9:10:a4:d3:0d:27:7e:02:f0:c0:81:75:cc:07:6b:
50:04:70:a2:db:6a:d3:5d:b6:82:56:db:66:17:3c:
75:d7:d9:46:43:4b:f2:85:79:fe:ca:b5:f9:3b:3d:
86:c8:e7:a7:97:a7:9a:59:c3:16:c9:eb:40:5d:a5:
d1:09:b6:1b:9b:52:50:c5:aa:93:27:e8:b5:f2:cd:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:8C:BA:ED:3B:31:D4:DC:B5:35:BB:29:4B:97:7B:57:F2:B8:2A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zLeMuu07MdTctTW7KUuXe1fyuCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.118.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b4:4e:73:e5:c6:03:97:fd:4f:ef:b0:2c:7c:51:e7:f6:0c:
78:c3:9a:e6:56:71:4c:b9:6b:85:e5:a4:51:c7:9e:88:9c:da:
6c:7e:f2:33:1b:c3:d7:14:3b:49:1e:9d:29:13:e5:7b:e8:dd:
b6:93:93:5b:75:83:cb:ed:f1:fb:36:6a:86:b6:b8:22:a9:c1:
6c:a7:09:ec:e2:1d:3d:69:bb:4c:91:fe:03:59:31:4f:18:88:
9e:68:e0:15:71:ed:fb:06:6e:20:4c:53:62:2c:84:a8:d3:ee:
2d:95:c1:02:78:6d:19:f5:ab:85:fe:c6:d1:5d:8f:1a:ac:e7:
de:8a:19:d4:fe:8d:7f:08:99:0c:c0:fd:37:5d:f0:a4:3c:d7:
24:14:d5:af:96:a8:57:1f:f5:4c:92:0d:4c:e5:f4:53:9c:e0:
db:fe:39:fd:4e:4b:d1:cd:15:5c:58:ad:08:bc:af:37:86:3f:
46:36:ce:6f:3e:57:5d:ca:fd:80:fd:05:55:02:75:a7:04:1c:
b3:87:7d:bd:8c:8c:2a:62:cf:df:da:de:be:85:7b:1d:a3:dc:
3e:a4:6d:ee:18:5f:03:e7:90:fb:9b:70:07:59:dc:1e:50:ce:
30:37:d4:8d:04:b8:ff:54:94:66:61:a0:d4:50:65:2b:da:02:
fb:7f:81:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2lZ+B3Zb5K/vPAE+lgXDUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwNDE5MTEwMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2I3OGNiYWVkM2IzMWQ0ZGNiNTM1YmIyOTRiOTc3YjU3ZjJiODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uxud7z7rRGecMNcmWUggJ+yZ3Bq
zeO3IoSA447XmHmu7Ij6o2AuJWdfQJWUhne6Xz1SYvh90FFtT1lmMTPD6NQ++AWW
T0ImyQfE3thFZpeg4+9ob0w/gqU5VeRuHqIi4BaJQWltI16QjTD3n0D2GXJiu3Kf
h/HiL18qgwgv76SvAfrP72LQmKLSKbOqrGwgKKIHsq6YjNRMw44VNwqIww8Ec10D
sktGWxOL+kNXHEHadt/ZEKTTDSd+AvDAgXXMB2tQBHCi22rTXbaCVttmFzx119lG
Q0vyhXn+yrX5Oz2GyOenl6eaWcMWyetAXaXRCbYbm1JQxaqTJ+i18s3O2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMy3jLrtOzHU3LU1uylLl3tX8rgqMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvekxlTXV1MDdNZFRjdFRXN0tVdVhlMWZ5dUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu92MA0G
CSqGSIb3DQEBCwUAA4IBAQB0tE5z5cYDl/1P77AsfFHn9gx4w5rmVnFMuWuF5aRR
x56InNpsfvIzG8PXFDtJHp0pE+V76N22k5NbdYPL7fH7NmqGtrgiqcFspwns4h09
abtMkf4DWTFPGIieaOAVce37Bm4gTFNiLISo0+4tlcECeG0Z9auF/sbRXY8arOfe
ihnU/o1/CJkMwP03XfCkPNckFNWvlqhXH/VMkg1M5fRTnODb/jn9TkvRzRVcWK0I
vK83hj9GNs5vPlddyv2A/QVVAnWnBByzh329jIwqYs/f2t6+hXsdo9w+pG3uGF8D
55D7m3AHWdweUM4wN9SNBLj/VJRmYaDUUGUr2gL7f4Gc
-----END CERTIFICATE-----
Generated at Mon Apr 20 09:36:09 2026 by rpki-client