Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/26z97dFT4Y5HWN6WpM36v-ZYJL0.roa
File: 26z97dFT4Y5HWN6WpM36v-ZYJL0.roa (raw, json)
Hash identifier: 8+KwGrFkLwfadL98KOJ0eXPv2AdDMb1Sep21zVz8OUo=
Subject key identifier: DB:AC:FD:ED:D1:53:E1:8E:47:58:DE:96:A4:CD:FA:BF:E6:58:24:BD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A1A6386B965A5D9F9A3B2A4981AD241E11
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/26z97dFT4Y5HWN6WpM36v-ZYJL0.roa
Signing time: Wed 04 Nov 2026 11:01:17 +0000
ROA not before: Wed 04 Nov 2026 11:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 212.102.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:6b:96:5a:5d:9f:9a:3b:2a:49:81:ad:24:1e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Nov 4 11:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbacfdedd153e18e4758de96a4cdfabfe65824bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c6:23:07:54:78:7c:48:d2:f5:3d:ff:81:c4:
f1:fe:c9:c5:4b:b0:86:5e:59:0f:eb:b7:bb:10:67:
4d:52:c5:59:a2:02:38:ca:bf:42:db:c6:25:7b:d7:
37:26:92:67:25:cf:e9:cf:66:c8:6c:c7:2e:a8:50:
d6:21:9c:75:7b:b8:37:91:f4:cd:5d:1a:83:7e:0d:
f1:8c:25:30:fb:e5:90:d7:34:53:92:fb:c7:2f:15:
7d:fb:a2:49:68:24:bf:6f:c7:31:d3:f3:38:ab:53:
6a:42:13:fc:d6:37:c4:fe:ad:59:7c:c4:96:91:91:
9b:e2:74:0f:45:cf:d5:ee:2f:6e:dc:57:2d:1a:5c:
fd:45:ef:4f:89:fb:52:87:de:38:ec:6d:04:b6:2c:
37:aa:97:d7:e0:cb:76:63:5c:20:4d:5c:69:e8:c8:
f8:3c:dc:07:83:dc:42:0a:a5:a1:af:be:57:b1:c9:
2a:20:bf:6b:d8:7b:6a:de:ac:9a:ee:4b:29:a6:07:
8f:4d:8d:dc:39:c1:91:29:a7:89:9d:88:6f:53:e1:
e4:38:5c:46:a1:34:e5:ae:8f:1c:01:d2:e5:bb:5b:
7d:2b:1f:ca:61:18:5d:2e:63:ff:18:5c:7c:b8:46:
3e:4b:86:54:11:7e:3a:2d:40:01:52:75:b4:e6:73:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:FD:ED:D1:53:E1:8E:47:58:DE:96:A4:CD:FA:BF:E6:58:24:BD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/26z97dFT4Y5HWN6WpM36v-ZYJL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:12:95:cd:00:4d:85:63:76:69:d2:e3:70:57:80:ed:c6:d3:
f5:94:92:75:98:dd:f4:a5:8c:a6:75:7b:78:7a:b5:d5:2d:5d:
3f:c2:72:2b:e4:1c:ab:3f:ad:7e:9e:91:92:da:af:ec:83:7c:
6b:db:a7:4d:34:16:f5:63:99:76:24:f6:91:45:c5:48:84:73:
c0:4a:ca:49:62:3a:f2:bd:9a:79:7b:74:17:b3:5e:75:85:af:
70:74:e1:72:13:19:c2:b4:d4:6d:5f:3b:c2:18:b0:36:b1:06:
05:fd:8b:f9:1f:4b:0c:1e:54:b7:fe:ff:30:8b:00:4c:6f:0f:
41:26:05:7a:52:96:64:19:e6:64:4b:90:c8:a6:72:a4:e0:a7:
47:62:30:63:f7:f3:b8:e6:25:8d:66:db:b4:ff:83:1b:fe:fa:
f9:f9:fd:eb:e6:6c:58:12:fd:28:10:b7:d7:00:29:e4:4b:68:
9e:0c:17:86:a3:55:89:3d:94:bd:1d:a2:60:9b:df:6a:b1:66:
db:68:1c:15:bb:de:52:24:79:d8:78:d2:48:69:38:c7:97:59:
b3:c3:17:24:19:f0:69:33:7a:4d:0d:42:d7:b0:af:b1:ea:68:
31:2c:43:b8:a6:17:f1:ce:6f:bb:bd:f0:b0:9d:ff:7a:e5:71:
02:fa:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:21 2026 by rpki-client