Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YQS0kDnY5XKSI5x7HA0PqexqBUk.roa
File: YQS0kDnY5XKSI5x7HA0PqexqBUk.roa (raw, json)
Hash identifier: OkLZQYT2QLZj6+IIrfsWxMjNXtPxMi+NfDbgxIBMm8s=
Subject key identifier: 61:04:B4:90:39:D8:E5:72:92:23:9C:7B:1C:0D:0F:A9:EC:6A:05:49
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0BD676EDEAC9A4BB96D13732BC249059A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YQS0kDnY5XKSI5x7HA0PqexqBUk.roa
Signing time: Sun 20 Sep 2026 06:01:07 +0000
ROA not before: Sun 20 Sep 2026 06:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 178.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:67:6e:de:ac:9a:4b:b9:6d:13:73:2b:c2:49:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 20 06:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6104b49039d8e57292239c7b1c0d0fa9ec6a0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:e0:dd:b4:5a:a3:92:78:12:b2:78:5d:75:
45:e5:20:f6:13:f0:b6:5f:b8:5e:00:90:9d:4f:61:
e5:88:27:09:07:d8:2b:af:08:45:7a:68:74:1b:88:
ea:b4:d1:a9:7f:0f:d8:5c:0d:5e:05:f6:4c:28:1c:
31:03:29:43:d6:6d:d5:c4:48:c0:0c:af:94:75:7b:
d7:9a:3d:fe:62:a6:08:58:9d:7e:9a:ba:2e:8d:21:
cd:25:65:ef:97:f8:c9:41:c5:1f:76:61:5b:af:7c:
b0:7b:5c:a9:46:f8:42:2d:db:a4:df:24:46:7d:58:
56:0f:24:42:24:48:dc:01:53:e7:0e:5a:14:7f:9b:
20:03:3d:d3:5c:64:82:10:7d:12:f8:ff:67:e6:1a:
88:75:73:c3:c0:b2:b5:d1:f7:5a:63:9e:c9:06:7e:
3a:55:1e:3c:44:a5:17:d4:b4:89:ca:47:90:c0:2c:
48:f7:cd:b8:b3:70:79:82:21:13:13:97:67:99:85:
e4:95:fb:e1:f3:9f:e1:67:36:b5:92:eb:0d:bb:ee:
da:d6:3c:66:a6:21:c2:11:b2:7c:92:6e:d3:9f:61:
cd:4c:ae:a4:a2:45:88:f8:f1:a6:0d:28:a8:a2:e4:
bf:c6:de:f9:6a:f9:4c:a2:40:50:a1:1c:9d:09:4e:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:B4:90:39:D8:E5:72:92:23:9C:7B:1C:0D:0F:A9:EC:6A:05:49
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YQS0kDnY5XKSI5x7HA0PqexqBUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7b:f3:5e:e8:06:11:a9:8a:4f:dd:d1:8b:c6:38:eb:e3:dd:
b3:9e:6b:e7:9d:1b:4e:80:50:5a:40:a4:8e:3d:f4:a5:5c:74:
4f:91:c8:26:3a:10:3e:76:c9:4b:a4:56:ec:a9:f9:3c:7a:bd:
d4:53:05:ee:3d:9d:61:93:fb:25:a9:ea:3a:42:d0:6a:f8:13:
3b:40:cd:49:d6:49:6b:94:e1:a1:ba:09:ec:ba:9b:b1:7c:f7:
6f:97:b7:ba:45:f0:06:1f:da:18:29:eb:6a:fa:1a:65:38:37:
87:92:5b:68:1a:79:3d:80:ea:74:85:c9:e9:42:b1:b6:7c:f0:
9a:18:bb:1f:33:4c:fc:01:02:3b:35:d8:25:01:bd:71:9f:81:
d8:a5:1d:1b:f9:67:0f:10:08:42:54:a3:fa:ef:6f:87:62:3e:
80:42:71:60:17:a7:da:1b:14:00:bb:a6:26:7d:f0:8a:25:7a:
8d:d1:04:90:71:fb:18:cf:28:04:fa:99:4f:37:e7:5a:72:46:
c2:c0:21:88:d8:4c:11:87:c7:75:d8:79:17:d2:05:ba:d5:67:
23:d4:06:8e:58:d9:49:32:69:ff:52:04:0f:75:e1:21:6d:0b:
da:37:d7:6c:40:8e:85:30:22:e9:c5:af:70:20:4e:4e:45:d0:
28:e4:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:31 2026 by rpki-client