Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa
File: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (raw, json)
Hash identifier: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=
Subject key identifier: 5E:93:9B:6A:A3:96:AC:28:04:4D:1B:F2:FC:17:35:17:82:AD:DD:C6
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019CAABBE7526F729B5CB4AF819F6DDDA8C3
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa
Signing time: Sun 01 Mar 2026 18:49:27 +0000
ROA not before: Sun 01 Mar 2026 18:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50124
IP address blocks: 92.62.246.0/24 maxlen: 24
178.239.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:bb:e7:52:6f:72:9b:5c:b4:af:81:9f:6d:dd:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 1 18:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e939b6aa396ac28044d1bf2fc17351782adddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:db:5b:89:54:ab:1f:8c:65:0c:df:e9:dc:
b5:9e:a3:fe:d0:e3:6c:e5:cd:78:5c:7e:c4:1b:92:
ca:f2:4c:4d:6c:68:cb:44:5b:9c:e2:99:e5:77:ee:
b3:99:59:40:20:cd:56:f2:77:45:05:6b:aa:d3:2f:
2c:7e:5a:ea:b6:b8:0c:22:8e:a7:71:11:75:8d:20:
3e:4a:54:8b:b3:46:34:42:a8:58:22:7f:7e:cf:74:
6a:bf:ea:6c:c9:92:1c:c5:f4:9f:4c:93:6e:90:77:
cc:12:9c:2e:5f:5f:94:5e:1f:9b:29:e2:e3:15:22:
7e:91:44:55:e5:ce:de:cb:df:65:28:91:a5:10:4b:
fa:d1:d7:b4:47:ff:5d:1d:f1:e8:a9:19:7e:b5:49:
2b:2a:30:54:6b:e1:0f:70:c0:23:c0:0f:fb:7d:40:
9e:bd:33:54:4e:3e:26:a6:1c:ec:02:ac:d6:5e:ed:
34:3c:2f:25:8e:05:89:a6:8d:4f:ea:90:43:77:d5:
0e:e0:f5:1f:8a:38:50:a2:1e:36:b9:2a:29:2d:27:
49:ef:58:23:55:ed:ca:65:f0:b6:7e:10:85:72:58:
29:47:85:ad:3c:ec:9d:93:28:02:ba:96:6e:80:15:
72:12:41:17:97:10:0d:82:08:e6:99:fe:5b:e3:98:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:9B:6A:A3:96:AC:28:04:4D:1B:F2:FC:17:35:17:82:AD:DD:C6
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.246.0/24
178.239.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:af:ca:85:fd:bc:94:29:6e:fb:90:9a:9e:d7:99:ba:b4:7d:
ca:42:92:e2:f2:3c:76:7a:45:73:c9:6f:1d:09:07:a4:58:84:
ab:1b:94:71:09:df:f0:2a:f0:37:e5:c1:c0:9d:a0:cf:d5:33:
a0:e8:f3:22:b9:d6:91:73:27:51:5f:e7:6a:e0:10:63:e9:6e:
be:99:81:29:19:94:9c:d9:55:75:2b:12:d4:9d:16:e0:cc:4c:
d0:03:7b:2a:0b:3d:0e:46:cf:2b:bc:09:10:a7:df:df:9d:1e:
10:25:89:25:b6:4a:2e:88:d1:31:0b:6e:b4:1f:fc:4e:64:eb:
d1:30:f3:14:dc:dc:2a:08:38:9c:cb:48:df:f6:a3:5a:0f:b4:
55:12:f8:64:d9:05:ec:fe:a2:7b:81:3b:3c:00:2b:48:52:08:
d1:4c:33:14:65:42:4b:51:ca:8a:8e:bd:d3:a4:91:46:a8:e6:
4c:e9:72:65:34:8b:c4:67:3a:ec:bd:21:0e:08:03:2c:52:89:
05:55:73:79:5f:a3:04:de:54:73:24:40:cc:7d:ed:48:b9:82:
ca:0c:8a:fa:fb:e4:33:30:b1:33:8c:36:0c:15:12:1b:c3:ab:
20:19:03:82:23:2d:ee:5f:2d:e5:7b:f3:8e:cd:12:aa:74:31:
97:4e:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:34 2026 by rpki-client