Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/I2kble42uWRbRaROS55raDX21HA.roa
File: I2kble42uWRbRaROS55raDX21HA.roa (raw, json)
Hash identifier: RiURHh1pukeP66jHVzu3Tg4saWCNGpqsq64VkU4i2zc=
Subject key identifier: 23:69:1B:95:EE:36:B9:64:5B:45:A4:4E:4B:9E:6B:68:35:F6:D4:70
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019FA23D0163C7C4A1A58182C1B5B711DD64
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/I2kble42uWRbRaROS55raDX21HA.roa
Signing time: Mon 27 Jul 2026 06:22:14 +0000
ROA not before: Mon 27 Jul 2026 06:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 85.239.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:3d:01:63:c7:c4:a1:a5:81:82:c1:b5:b7:11:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 27 06:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23691b95ee36b9645b45a44e4b9e6b6835f6d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:63:45:b2:20:1f:fa:bd:ec:b5:87:a1:1a:
a2:e3:47:8f:21:47:09:77:53:ae:56:39:72:83:65:
3f:56:41:88:c2:7e:d0:93:a4:c4:e6:8e:0a:8a:e5:
94:b1:f9:1d:3d:99:0b:25:91:c1:1f:ef:c5:c9:81:
14:a7:cf:e5:64:7e:0d:d1:0d:89:59:dd:fc:34:65:
aa:8f:0a:1d:34:fc:bd:d8:b1:1d:68:46:17:ab:6d:
a5:d7:42:9c:c0:13:73:09:25:47:5b:2f:f7:06:e9:
30:0d:ca:51:ed:55:dc:16:27:2c:09:ff:5d:89:89:
41:77:82:75:17:6e:5b:3c:1e:68:aa:74:20:01:42:
19:2d:92:73:3a:44:ce:66:ca:bc:0e:ab:ec:f3:91:
9c:a2:bc:67:84:16:e8:d9:68:37:0f:44:93:e0:98:
27:37:44:b9:d5:89:2e:4a:85:b6:a5:43:19:2b:1b:
10:38:a2:db:46:ce:ac:dc:09:2f:71:f2:d8:6f:6b:
2b:22:1e:56:9a:f2:75:53:92:d4:07:fc:77:09:20:
91:84:8f:73:d4:f3:58:15:55:15:f5:68:df:84:19:
82:8f:ec:9a:ee:85:e2:74:8f:6a:df:6a:ff:99:db:
1e:a9:50:c5:c0:f9:65:09:de:94:cf:00:b3:75:60:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:1B:95:EE:36:B9:64:5B:45:A4:4E:4B:9E:6B:68:35:F6:D4:70
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/I2kble42uWRbRaROS55raDX21HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8e:e0:aa:6e:4c:c3:fc:6d:04:44:fe:5f:b9:bd:a7:cf:41:
77:c5:a6:7f:46:eb:48:40:de:9f:65:6b:81:39:c7:8b:e3:9e:
8e:a2:7b:a5:e3:ab:63:bb:6a:20:9e:4d:8c:64:b3:6f:73:61:
e1:f5:c8:61:3b:42:81:9c:f1:0e:21:05:74:b6:94:50:21:bd:
56:0d:a9:e8:85:3c:7e:94:41:8e:6c:12:68:2f:3b:20:b8:db:
65:8d:fa:3c:4b:e1:1c:df:0c:74:50:6f:27:c0:dd:63:55:49:
97:cb:2d:9f:da:d1:04:1a:54:f9:8e:45:68:3f:f0:be:c0:30:
01:b6:1f:ba:db:78:b4:82:97:86:77:cd:33:3e:98:33:4d:36:
8b:cf:67:f0:e0:48:9f:c1:91:9f:a4:28:6c:30:54:f6:f0:41:
cb:32:38:0d:68:4a:c8:59:c7:1c:52:ea:41:e1:d8:e1:59:ec:
e9:dd:6e:df:ae:cc:78:37:a0:d8:11:e8:3d:4b:50:ec:38:42:
15:ae:b8:9a:31:e4:fe:be:db:c2:cd:16:db:c0:6a:2a:4f:17:
a8:f1:8e:3a:48:f0:ef:4e:39:23:69:2f:5a:e7:fb:65:db:81:
c0:11:2a:f1:f8:be:bc:e2:4c:9d:69:22:86:8d:f0:ea:75:03:
c1:7d:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:07 2026 by rpki-client