Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/29oQ-_YhALXcaCnBoms6zHFWIUg.roa
File: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (raw, json)
Hash identifier: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=
Subject key identifier: DB:DA:10:FB:F6:21:00:B5:DC:68:29:C1:A2:6B:3A:CC:71:56:21:48
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019F236918D51421781859357991BFA2CBB1
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/29oQ-_YhALXcaCnBoms6zHFWIUg.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.142.0/24 maxlen: 24
185.166.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:d5:14:21:78:18:59:35:79:91:bf:a2:cb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbda10fbf62100b5dc6829c1a26b3acc71562148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:b3:9c:2f:32:db:28:d0:bb:a9:f2:e5:5d:
09:cb:d3:40:f9:c6:dd:f7:92:43:df:4f:65:86:92:
f9:97:b0:b7:6e:2e:d1:03:02:07:c8:25:77:0d:33:
7e:1b:76:c0:66:da:2d:ed:51:05:44:6a:e9:8f:b7:
63:a1:ed:ae:f4:28:e6:7c:99:39:a2:97:0c:7f:31:
32:2b:8f:20:76:9c:7a:4b:dd:23:95:91:35:e8:61:
b2:f2:0a:59:2e:b6:4e:b5:0f:ad:18:83:7c:e3:a9:
5e:b3:a6:66:a8:09:54:74:e4:90:f1:94:cf:12:33:
ad:7a:9d:87:bb:be:b6:42:b1:28:2d:7f:0e:52:59:
dc:25:0c:5a:1f:08:64:76:90:a4:60:c8:66:df:55:
6f:80:da:6c:05:7d:f4:14:e3:7e:5b:2e:5c:64:1f:
7b:89:ac:ff:e2:b7:10:73:e0:e0:1d:04:db:8f:07:
59:45:7c:45:eb:fc:8b:65:e0:8b:e2:ab:52:1c:73:
ae:af:6f:71:7d:94:63:dd:06:19:6f:f3:94:ed:06:
2e:13:75:37:fd:a8:31:c4:26:3e:b3:a9:e8:89:9b:
49:61:ab:45:da:d2:50:a1:b5:1c:5e:68:a6:a4:c7:
89:a5:11:39:dc:61:2f:3d:03:5f:33:c3:b7:95:45:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:10:FB:F6:21:00:B5:DC:68:29:C1:A2:6B:3A:CC:71:56:21:48
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/29oQ-_YhALXcaCnBoms6zHFWIUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
26:09:d3:3b:a4:24:6f:f9:ab:1c:cf:23:6e:c6:11:8d:a5:f4:
31:55:53:1b:1c:b4:94:4a:8f:4f:77:68:3b:53:57:52:74:e9:
cf:ff:bf:fb:3b:e2:86:45:aa:58:f4:61:f1:c6:68:dd:ab:be:
d9:f1:e4:21:a4:5d:40:a8:aa:4a:b2:f8:3d:9f:72:56:7d:e1:
44:bb:87:1f:b3:d8:51:e6:42:33:9e:bd:46:90:fd:f7:18:50:
54:9b:66:10:70:31:a8:0e:fa:18:da:77:1c:eb:bc:2d:cd:03:
d1:4b:f7:fb:7b:37:69:17:48:18:73:36:a6:dd:93:d1:4d:f5:
ca:ff:99:15:c5:d8:04:68:1a:d7:7c:c4:18:40:ce:8b:94:89:
75:20:f4:66:66:d6:ee:fb:e8:6a:b0:48:d9:5b:79:23:f5:34:
ec:a0:de:ab:6d:ce:1a:50:cc:a2:69:b5:5b:ce:a5:5d:6c:98:
2c:b3:07:3d:69:56:4f:3c:a3:ba:6d:35:47:2c:f9:b3:c8:87:
1b:a7:75:53:89:30:53:68:9b:69:66:6d:f3:17:a3:91:97:f1:
85:5e:a0:12:3b:fe:02:87:c4:a4:ac:cb:ec:af:cb:db:98:ec:
da:05:ae:f5:cd:80:8b:0a:a0:e2:61:0f:8e:8a:e6:fa:df:9f:
59:e7:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:47 2026 by rpki-client