Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ta1v7sTH4K-DDYEqHW9UNBEuHUY.roa
File: Ta1v7sTH4K-DDYEqHW9UNBEuHUY.roa (raw, json)
Hash identifier: Yg+c46+eAvJrPSvpeBVf9YQArtfD+5XhPokPUV3eNm8=
Subject key identifier: 4D:AD:6F:EE:C4:C7:E0:AF:83:0D:81:2A:1D:6F:54:34:11:2E:1D:46
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A172137B13F7D81007D17238F215285FE9
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ta1v7sTH4K-DDYEqHW9UNBEuHUY.roa
Signing time: Sun 25 Oct 2026 08:00:41 +0000
ROA not before: Sun 25 Oct 2026 08:00:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 85.239.145.0/24 maxlen: 24
85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:7b:13:f7:d8:10:07:d1:72:38:f2:15:28:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 25 08:00:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dad6feec4c7e0af830d812a1d6f5434112e1d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:22:31:22:bf:0c:0e:13:6d:1d:79:4a:aa:
28:63:7a:7a:4b:c0:54:4d:2c:09:e9:8c:6a:7b:b5:
30:9a:c7:8d:d9:68:f7:b2:c1:b5:51:8b:03:96:96:
0c:aa:72:ad:07:6c:c4:58:5a:ed:fd:ec:11:11:03:
02:9e:7a:5e:f2:ae:68:37:11:ed:46:a5:a8:9c:f1:
b9:1b:42:e1:c3:57:a5:d0:f1:59:cf:3e:26:ca:e8:
02:3a:0e:cb:d9:e2:fe:1a:1f:ab:40:02:0b:40:84:
b0:69:61:c0:fa:b7:83:f8:7b:c5:81:7d:9b:f1:22:
cf:ae:f8:d9:9c:b7:7d:bc:c5:01:bc:f9:48:4f:ad:
5d:42:97:6a:f2:2f:22:3d:08:6f:3c:d8:2a:3a:95:
6a:e5:29:e8:06:c1:6d:4e:28:29:ab:32:d7:51:b3:
b0:79:2d:b8:d2:e4:a2:15:81:34:f8:36:82:a8:5e:
65:df:77:20:51:7a:ea:37:91:67:32:d1:27:27:56:
d1:45:0e:ac:fb:b5:6f:4e:c6:7e:1c:4b:f3:7d:71:
6f:70:ae:84:cc:34:73:08:46:2c:7f:81:b1:68:42:
d3:37:62:8b:e6:f8:a0:c6:14:8c:5d:8b:e5:2e:e0:
75:c8:43:a4:41:31:5b:32:b3:d6:7d:73:63:18:43:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AD:6F:EE:C4:C7:E0:AF:83:0D:81:2A:1D:6F:54:34:11:2E:1D:46
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ta1v7sTH4K-DDYEqHW9UNBEuHUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:51:50:54:c7:8f:79:4f:df:fa:d5:e4:ed:6f:38:b2:45:9e:
66:c8:a0:a8:37:95:0e:73:c7:41:be:66:b7:41:19:88:0b:56:
ef:25:08:ec:88:07:25:bf:42:6c:3c:d8:5b:e3:c2:ff:97:3c:
59:78:12:43:67:c8:d1:33:32:39:0b:a9:cf:1d:f3:2f:c9:98:
0f:e9:67:a3:b1:fa:65:36:be:63:da:e0:a8:87:55:40:45:9c:
53:ef:a2:f0:0b:6f:a1:c2:19:5f:e6:3b:7b:be:cb:9c:7b:92:
de:e7:43:f3:4d:1a:41:3c:2b:af:ed:8d:5e:18:df:f2:3f:2c:
6f:0a:a5:ec:49:a1:20:5d:a6:25:72:8e:c7:8a:b4:dc:de:97:
16:c0:dd:18:9b:bf:19:97:14:3c:f9:9d:e5:05:e2:95:95:6e:
f7:a5:b5:2d:00:13:d4:91:b3:b0:d8:7c:b5:46:26:ac:49:c3:
45:59:e4:fd:65:db:fd:99:ca:ed:09:fb:17:48:a5:ad:86:06:
5b:2a:dc:9f:18:38:e6:44:54:1d:a6:db:cd:37:59:c4:07:7a:
02:fd:49:eb:1a:14:ef:b6:46:b6:92:aa:44:01:cf:15:bc:ee:
6c:d7:01:19:24:5e:47:9a:c7:ca:80:e8:80:b2:5a:23:57:67:
aa:2c:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:44:52 2026 by rpki-client