Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XFj-fnhFgawupIWxTj-icBAYgOM.roa
File: XFj-fnhFgawupIWxTj-icBAYgOM.roa (raw, json)
Hash identifier: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=
Subject key identifier: 5C:58:FE:7E:78:45:81:AC:2E:A4:85:B1:4E:3F:A2:70:10:18:80:E3
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019C94C94F9595DF59B1F2B4282F277DA7DE
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XFj-fnhFgawupIWxTj-icBAYgOM.roa
Signing time: Wed 25 Feb 2026 12:32:26 +0000
ROA not before: Wed 25 Feb 2026 12:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 178.239.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:c9:4f:95:95:df:59:b1:f2:b4:28:2f:27:7d:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 25 12:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c58fe7e784581ac2ea485b14e3fa270101880e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:8f:e9:cb:34:d0:90:c6:e4:e3:c6:96:eb:
32:49:79:d5:e3:95:30:55:47:48:3e:fe:36:07:b0:
7a:01:c7:6f:1f:d2:d9:de:fc:eb:9d:e3:d9:83:a0:
f9:3c:95:5f:d5:9d:f5:a0:9b:26:72:bf:59:c7:9a:
a3:68:c4:b7:a0:dd:4a:16:46:58:ce:1e:03:29:6c:
0b:06:95:f9:cb:1e:8e:3e:a0:26:8f:b3:e4:8b:74:
6c:00:3d:4a:6d:0b:09:42:c5:23:9e:4e:2c:75:2a:
b0:df:71:f4:49:6c:ae:c4:71:69:de:15:44:d2:35:
63:be:6a:73:a5:c9:81:e2:55:45:ff:7d:d6:89:68:
6d:b2:91:ba:dc:4a:3c:48:8f:12:b2:e6:d9:60:26:
22:d8:3c:e5:12:bb:cb:55:35:8c:47:f9:99:29:8c:
a8:db:c9:ef:24:be:68:81:d5:fd:c8:9a:a0:71:cd:
ae:25:96:4f:e0:76:ef:fc:ae:7c:85:16:1a:1a:8b:
a9:9b:fe:eb:8b:69:d6:b9:a1:c7:3f:5a:b4:fd:ee:
b4:65:b4:eb:8f:04:b4:cf:4e:bb:6b:30:e1:49:87:
fc:59:d3:a9:e7:85:07:8a:ae:29:e4:1b:c7:e2:80:
5c:05:ee:a3:ae:78:11:b1:f6:a4:0a:11:d8:fb:dd:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:FE:7E:78:45:81:AC:2E:A4:85:B1:4E:3F:A2:70:10:18:80:E3
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XFj-fnhFgawupIWxTj-icBAYgOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.117.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6a:1f:d2:ea:29:bd:ce:e9:43:e5:97:ea:a7:af:76:6f:d8:
fa:4e:20:31:54:10:d3:da:fc:d4:f1:99:9d:2c:15:88:18:bb:
f7:38:02:bb:17:95:13:6b:02:60:09:4d:fb:30:4a:ab:2b:54:
32:0f:7c:d5:ac:39:2f:e3:b2:0f:7b:2a:f1:a5:9e:ea:ac:c8:
04:ea:78:fa:c5:37:42:fa:72:aa:8f:a9:44:9f:8c:c9:fe:b2:
9f:a5:f6:f8:40:70:80:cc:06:bd:65:3a:d0:90:0a:11:6c:45:
0b:b5:a5:6e:b7:19:02:9c:f6:8b:fe:91:2e:04:e7:67:f5:e7:
02:fd:59:84:84:01:74:41:fe:fa:8c:e4:ba:46:e5:9a:74:11:
30:69:dd:89:a4:4c:e0:7f:93:3a:40:eb:4d:97:cf:0f:25:a5:
37:5a:3b:16:73:a3:6d:20:b9:30:6e:fd:78:20:75:e1:31:58:
14:b7:a3:79:93:eb:c9:61:49:f7:98:49:28:9f:92:56:4f:10:
1d:36:34:56:d1:ef:95:ec:a6:1c:5c:2a:ee:67:8a:b7:8e:f2:
a8:ef:a8:75:f1:80:e3:fc:27:0e:0d:89:0f:f2:96:6f:2c:f5:
68:c8:a5:d4:ea:16:c6:66:57:d3:f8:70:f7:f7:5c:16:c4:36:
fe:4a:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:12 2026 by rpki-client