Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3d2Ht-otvuauK7s8UxkULNhWE-g.roa
File: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (raw, json)
Hash identifier: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=
Subject key identifier: DD:DD:87:B7:EA:2D:BE:E6:AE:2B:BB:3C:53:19:14:2C:D8:56:13:E8
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019C36F8118D878A23DA7091AADD30810BC8
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3d2Ht-otvuauK7s8UxkULNhWE-g.roa
Signing time: Sat 07 Feb 2026 07:19:12 +0000
ROA not before: Sat 07 Feb 2026 07:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203537
IP address blocks: 178.239.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:36:f8:11:8d:87:8a:23:da:70:91:aa:dd:30:81:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 7 07:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dddd87b7ea2dbee6ae2bbb3c5319142cd85613e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:b1:c0:1f:91:41:56:d0:dd:ec:42:2c:36:
7c:ff:f6:b3:12:c0:e9:b6:c4:46:7e:3d:bf:6c:e4:
da:ec:54:3a:f3:78:2f:4b:72:c3:e4:e0:a2:32:6c:
f5:e5:67:1e:39:a7:64:8c:a4:2c:e6:18:6e:42:b7:
c9:33:da:dd:8e:50:27:1d:30:c8:d4:26:f6:1d:ab:
5c:2c:ab:9d:56:6c:9f:98:c4:43:94:7f:10:89:c3:
ac:7b:e3:f7:d5:bd:09:70:5a:3f:d2:0f:18:5b:8f:
51:6e:23:df:83:61:ff:6b:66:d7:09:c2:78:6d:ec:
a7:ce:f2:01:a4:73:8d:df:3c:c2:36:08:69:61:b8:
7b:82:2c:80:61:db:e0:41:61:0e:3a:c8:c0:d5:87:
12:2a:ed:fb:75:0b:9d:32:34:5e:49:01:06:42:35:
a8:f4:33:b5:07:7a:4a:93:27:f3:19:87:81:a3:bd:
ea:62:66:57:42:fd:67:9b:28:87:fd:a5:92:4d:66:
30:c6:5d:2e:f2:1e:5d:04:51:64:17:8f:a9:a5:b7:
76:ea:3d:a1:92:26:8a:de:86:62:36:e9:0a:e5:a2:
db:b4:6a:ab:1d:5c:9b:d9:93:de:09:7a:fd:be:a4:
a8:47:bd:dd:3f:5e:48:6d:5e:f1:64:42:b8:67:68:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:87:B7:EA:2D:BE:E6:AE:2B:BB:3C:53:19:14:2C:D8:56:13:E8
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3d2Ht-otvuauK7s8UxkULNhWE-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b0:1d:9b:50:37:85:37:e6:74:12:43:86:48:9d:35:26:47:
cf:74:b2:c1:b4:1b:29:e4:1f:fc:b9:7b:5d:70:f7:4e:7c:4b:
a4:ff:a7:f6:29:73:cf:0b:88:5d:d7:ef:56:bb:91:47:4f:56:
9e:0f:b9:56:51:b3:5c:16:aa:a2:84:9c:42:32:7c:9a:e3:d1:
a9:ad:19:6c:9f:c1:4c:66:0a:6e:b2:c9:f9:68:72:0f:13:1b:
88:f6:a3:3c:0e:af:45:23:c3:bb:e8:ac:70:16:26:23:9b:39:
9b:65:a9:bd:42:04:78:cd:ab:6b:6c:f5:1f:0c:1f:c5:92:26:
6d:b3:88:c5:2f:56:9a:49:1d:bf:33:20:f4:c7:3a:20:35:26:
35:13:d4:4e:85:6b:1b:18:3d:93:23:4e:33:80:5c:fc:26:82:
f4:d4:64:d7:ae:e0:45:65:1e:b1:c0:9f:92:33:ff:54:e2:2c:
0b:30:d6:f6:1d:fc:10:ed:1b:c1:0b:95:3f:1d:d6:d2:09:71:
be:87:f6:e3:05:db:0b:ef:c4:09:cd:c9:23:38:75:92:43:8c:
4a:52:e2:40:10:75:b5:76:d8:e5:44:de:79:b3:bd:c4:a8:d2:
00:d3:7b:d2:c9:fb:fa:53:62:88:e8:6f:ca:c0:5e:9d:30:06:
e2:de:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:57 2026 by rpki-client